Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-69268
microsoft sharepoint server
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |
|
CVE-2026-69269
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69270
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69271
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-69272
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-69265
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-69266
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-69267
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
|
6.5 Medium | — | 0,35% | 8 Sep 2026 |
|
CVE-2026-68896
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 8 Sep 2026 |
|
CVE-2026-68897
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-68898
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
|
6.5 Medium | — | 0,89% | 8 Sep 2026 |
|
CVE-2026-68891
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-68892
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68893
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-68894
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68895
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-68887
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-68888
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68889
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-68890
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68878
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68880
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68881
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-68884
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-68885
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68886
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-68852
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-68873
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-68874
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
|
5.7 Medium | — | 0,89% | 8 Sep 2026 |
|
CVE-2026-68875
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68876
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68877
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68847
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-68848
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68849
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
|
4.7 Medium | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-68850
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68851
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-68842
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 8 Sep 2026 |
|
CVE-2026-68843
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 8 Sep 2026 |
|
CVE-2026-68844
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68845
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68846
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-68835
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
|
7.1 High | — | 0,57% | 8 Sep 2026 |
|
CVE-2026-68837
microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-68838
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68839
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-68840
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges loca...
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-68841
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68831
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,55% | 8 Sep 2026 |
|
CVE-2026-68832
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |