Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-72996
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72989
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-72990
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72991
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72983
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72985
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-72986
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72987
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-72988
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72977
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72978
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 0,98% | 8 Sep 2026 |
|
CVE-2026-72979
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72980
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-72981
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-72982
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72972
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72973
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72974
microsoft 365 apps, microsoft 365 +4 lainnya
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72975
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72976
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
|
5.0 Medium | — | 0,51% | 8 Sep 2026 |
|
CVE-2026-72962
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72963
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72964
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-72965
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72966
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-72967
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72956
microsoft 365 apps, microsoft office 2019 +2 lainnya
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72957
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72958
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72959
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-72960
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72961
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72947
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 8 Sep 2026 |
|
CVE-2026-72948
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 8 Sep 2026 |
|
CVE-2026-72949
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-72950
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
9.8 Critical | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72952
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72953
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72954
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 8 Sep 2026 |
|
CVE-2026-72941
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72942
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72943
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 8 Sep 2026 |
|
CVE-2026-72944
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72945
microsoft windows 10 1607, microsoft windows 10 1809 +6 lainnya
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-72946
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72935
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72936
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-72937
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-72938
microsoft 365 apps, microsoft 365 +3 lainnya
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72939
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 8 Sep 2026 |