Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69332
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69318
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69319
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privilege...
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-69321
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
|
5.5 Medium | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-69322
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69323
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69313
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69314
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69315
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-69316
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-69317
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
|
5.7 Medium | — | 0,89% | 8 Sep 2026 |
|
CVE-2026-69308
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69309
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69310
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69311
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69312
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69303
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69304
microsoft asp.net core, microsoft visual studio 2022 +2 lainnya
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
|
5.9 Medium | — | 0,88% | 8 Sep 2026 |
|
CVE-2026-69305
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69307
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69296
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69297
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,84% | 8 Sep 2026 |
|
CVE-2026-69298
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69299
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69300
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69301
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69290
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69291
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69292
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69293
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69294
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-69295
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69284
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69285
microsoft 365 apps, microsoft office 2016 +3 lainnya
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69286
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69287
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69288
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-69289
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 8 Sep 2026 |
|
CVE-2026-69279
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69280
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69281
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69282
microsoft sharepoint server
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69283
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69276
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-69277
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69273
microsoft sharepoint server
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69274
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69275
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-69268
microsoft sharepoint server
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69269
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |