Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-77494
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-77495
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77484
microsoft sql server 2019, microsoft sql server 2022 +1 lainnya
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 1,7% | 8 Sep 2026 |
|
CVE-2026-77485
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-77486
microsoft sql server 2017, microsoft sql server 2019
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77487
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-77488
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-77489
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-77491
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,43% | 8 Sep 2026 |
|
CVE-2026-77480
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-77481
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-77482
microsoft sql server 2017, microsoft sql server 2019
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-77483
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-76191
adobe animate
Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the curr...
|
8.2 High | — | 0,24% | 8 Sep 2026 |
|
CVE-2026-76196
adobe photoshop mobile
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access t...
|
7.4 High | — | 0,22% | 8 Sep 2026 |
|
CVE-2026-73023
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-73024
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73025
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
|
9.8 Critical | — | 0,90% | 8 Sep 2026 |
|
CVE-2026-73026
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73028
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-73029
microsoft sql server 2019, microsoft sql server 2022 +1 lainnya
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-73017
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
|
7.5 High | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-73018
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-73019
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
|
4.3 Medium | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-73020
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73021
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73022
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-73011
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73012
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-73013
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-73014
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-73015
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73016
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-73004
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-73005
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-73006
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-73007
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73008
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-73009
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-73010
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72997
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72999
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-73000
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73001
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73002
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73003
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72992
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72993
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72994
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72995
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |