Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69710
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
|
7.5 High | — | 0,21% | 8 Sep 2026 |
|
CVE-2026-69711
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69689
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69690
microsoft sharepoint server
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
|
5.4 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69691
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69692
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69693
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69694
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 2,8% | 8 Sep 2026 |
|
CVE-2026-69683
microsoft sharepoint server
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
|
7.7 High | — | 0,84% | 8 Sep 2026 |
|
CVE-2026-69684
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-69685
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69686
microsoft 365 apps, microsoft 365 +4 lainnya
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69687
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69688
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69676
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69678
microsoft 365 apps, microsoft 365 +4 lainnya
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69679
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
|
5.7 Medium | — | 0,65% | 8 Sep 2026 |
|
CVE-2026-69680
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
|
8.1 High | — | 0,34% | 8 Sep 2026 |
|
CVE-2026-69681
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69682
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69649
microsoft raw image extension
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69652
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69654
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69669
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69671
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69672
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69674
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-69648
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69638
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
8.4 High | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-69641
microsoft exchange server, microsoft exchange server subscription edition
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
9.1 Critical | — | 0,86% | 8 Sep 2026 |
|
CVE-2026-69643
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69645
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69628
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-69629
microsoft 365 apps, microsoft office 2019 +3 lainnya
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69630
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69631
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-69632
microsoft 365 apps, microsoft 365 +3 lainnya
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69636
microsoft sharepoint server
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information...
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-69637
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
|
5.7 Medium | — | 0,65% | 8 Sep 2026 |
|
CVE-2026-69621
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69623
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69624
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
|
6.5 Medium | — | 0,74% | 8 Sep 2026 |
|
CVE-2026-69625
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69626
microsoft 365 apps, microsoft 365 +4 lainnya
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 8 Sep 2026 |
|
CVE-2026-69627
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69614
microsoft 365 apps, microsoft access +3 lainnya
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,86% | 8 Sep 2026 |
|
CVE-2026-69615
microsoft sharepoint server
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
|
4.8 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69616
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69617
microsoft windows 11 26h1, microsoft windows server 2025
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69618
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |