Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69495
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69489
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69490
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-69491
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69492
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69493
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69494
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69481
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69482
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.
|
7.1 High | — | 0,46% | 8 Sep 2026 |
|
CVE-2026-69483
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-69485
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-69488
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69475
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69476
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69477
microsoft 365 apps, microsoft access +3 lainnya
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
|
7.3 High | — | 0,43% | 8 Sep 2026 |
|
CVE-2026-69478
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69479
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
8.4 High | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-69480
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69468
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69469
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.6 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-69470
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69472
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69473
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69474
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
|
4.8 Medium | — | 0,65% | 8 Sep 2026 |
|
CVE-2026-69461
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69462
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69463
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69464
microsoft sharepoint server
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-69465
microsoft sharepoint server
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69466
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69467
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69455
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69456
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69457
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69458
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69459
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69460
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69447
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69448
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileg...
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69449
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
|
6.7 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-69450
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69451
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69453
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-69440
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69441
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges local...
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69442
microsoft 365 apps, microsoft office 2016 +3 lainnya
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69443
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-69444
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69445
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 8 Sep 2026 |
|
CVE-2026-69432
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |