Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69376
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69377
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-69378
microsoft exchange server, microsoft exchange server subscription edition
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-69379
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-69380
microsoft exchange server, microsoft exchange server subscription edition
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
8.1 High | — | 0,69% | 8 Sep 2026 |
|
CVE-2026-69381
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
|
4.6 Medium | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-69368
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69369
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69371
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69372
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
|
5.7 Medium | — | 0,86% | 8 Sep 2026 |
|
CVE-2026-69373
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-69374
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 8 Sep 2026 |
|
CVE-2026-69362
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69364
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate p...
|
7.1 High | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-69365
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69366
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69367
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69356
microsoft exchange server, microsoft exchange server subscription edition
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over...
|
9.3 Critical | — | 0,76% | 8 Sep 2026 |
|
CVE-2026-69357
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69358
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69359
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69360
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69361
microsoft exchange server, microsoft exchange server subscription edition
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
|
6.5 Medium | — | 0,84% | 8 Sep 2026 |
|
CVE-2026-69350
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-69351
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose informat...
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-69352
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69353
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69355
microsoft exchange server, microsoft exchange server subscription edition
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-69344
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69345
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69346
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69347
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
|
7.4 High | — | 0,29% | 8 Sep 2026 |
|
CVE-2026-69348
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69349
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
|
5.7 Medium | — | 0,89% | 8 Sep 2026 |
|
CVE-2026-69337
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69338
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69339
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-69340
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69341
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69342
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-69343
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69333
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69334
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69335
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69336
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69324
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69325
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-69328
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,46% | 8 Sep 2026 |
|
CVE-2026-69329
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-69331
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |