Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-73006
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-73007
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73008
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-73009
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-73010
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72997
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72999
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-73000
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73001
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73002
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-73003
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72992
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72993
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72994
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72995
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72996
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72989
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-72990
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72991
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72983
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72985
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-72986
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72987
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-72988
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72977
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72978
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 0,98% | 8 Sep 2026 |
|
CVE-2026-72979
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72980
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-72981
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-72982
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-72972
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72973
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72974
microsoft 365 apps, microsoft 365 +4 lainnya
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72975
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72976
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
|
5.0 Medium | — | 0,51% | 8 Sep 2026 |
|
CVE-2026-72962
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72963
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72964
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-72965
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72966
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-72967
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72956
microsoft 365 apps, microsoft office 2019 +2 lainnya
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72957
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72958
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72959
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-72960
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72961
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
8.2 High | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72947
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,27% | 8 Sep 2026 |
|
CVE-2026-72948
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 8 Sep 2026 |
|
CVE-2026-72949
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |