Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-72950
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
9.8 Critical | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72952
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72953
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72954
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 8 Sep 2026 |
|
CVE-2026-72941
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72942
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72943
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 8 Sep 2026 |
|
CVE-2026-72944
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72945
microsoft windows 10 1607, microsoft windows 10 1809 +6 lainnya
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-72946
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-72935
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-72936
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-72937
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-72938
microsoft 365 apps, microsoft 365 +3 lainnya
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-72939
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 8 Sep 2026 |
|
CVE-2026-72940
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72928
microsoft windows server 2025
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 8 Sep 2026 |
|
CVE-2026-72929
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,23% | 8 Sep 2026 |
|
CVE-2026-72930
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72931
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
|
5.5 Medium | — | 0,34% | 8 Sep 2026 |
|
CVE-2026-72932
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-72933
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-72923
The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the mod...
|
7.5 High | — | 1,9% | 8 Sep 2026 |
|
CVE-2026-72926
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-72927
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,24% | 8 Sep 2026 |
|
CVE-2026-71353
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-71350
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-71351
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-71352
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-71341
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-71342
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-71343
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-71345
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-71348
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-71349
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-71334
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-71336
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-71337
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-71338
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
|
6.4 Medium | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-71339
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-71340
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-71328
microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,76% | 8 Sep 2026 |
|
CVE-2026-71329
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-71330
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose infor...
|
7.5 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-71332
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-71333
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-70582
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate...
|
6.4 Medium | — | 0,21% | 8 Sep 2026 |
|
CVE-2026-70583
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-70584
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-70585
microsoft windows server 2012, microsoft windows server 2016 +3 lainnya
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |