Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69778
microsoft 365 apps, microsoft access +4 lainnya
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69779
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69781
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
|
6.5 Medium | — | 0,58% | 8 Sep 2026 |
|
CVE-2026-69782
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-69784
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69785
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,46% | 8 Sep 2026 |
|
CVE-2026-69769
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69770
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69771
microsoft windows 11 23h2, microsoft windows 11 24h2 +2 lainnya
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
|
4.7 Medium | — | 0,32% | 8 Sep 2026 |
|
CVE-2026-69772
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69773
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69775
microsoft windows 11 23h2, microsoft windows server 2025
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69759
microsoft 365 apps, microsoft 365 +4 lainnya
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69760
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-69761
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69762
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69764
microsoft 365 apps, microsoft office 2016 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69767
microsoft 365 apps, microsoft 365 +4 lainnya
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69768
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69739
microsoft 365 apps, microsoft office 2016 +3 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-69740
microsoft windows 11 23h2, microsoft windows 11 24h2 +2 lainnya
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69741
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69742
microsoft 365 apps, microsoft office 2019 +3 lainnya
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69744
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-69757
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69758
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69729
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-69730
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69731
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69732
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-69734
microsoft 365 apps, microsoft 365 +5 lainnya
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-69735
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69738
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69719
microsoft 365 apps, microsoft 365 +4 lainnya
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-69720
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69722
microsoft 365 apps, microsoft 365 +4 lainnya
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69723
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
|
5.7 Medium | — | 0,89% | 8 Sep 2026 |
|
CVE-2026-69724
microsoft sharepoint server
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69725
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69727
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69712
microsoft windows server 2012, microsoft windows server 2016 +3 lainnya
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-69713
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
|
4.4 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-69714
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69715
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69716
microsoft sharepoint server
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ov...
|
8.8 High | — | 0,99% | 8 Sep 2026 |
|
CVE-2026-69717
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69706
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69707
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69708
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69709
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |