Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-68833
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,44% | 8 Sep 2026 |
|
CVE-2026-68834
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68824
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attac...
|
7.0 High | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-68825
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-68827
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
|
8.0 High | — | 0,77% | 8 Sep 2026 |
|
CVE-2026-68828
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-68830
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information...
|
5.5 Medium | — | 0,37% | 8 Sep 2026 |
|
CVE-2026-68785
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
4.9 Medium | — | 1,1% | 8 Sep 2026 |
|
CVE-2026-68786
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-68787
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 8 Sep 2026 |
|
CVE-2026-68776
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68777
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68778
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68779
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68780
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68781
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68784
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-68775
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67638
microsoft sql server 2025
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67639
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67641
microsoft sql server 2022, microsoft sql server 2025
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 8 Sep 2026 |
|
CVE-2026-67642
microsoft sql server 2025
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67643
microsoft sql server 2022, microsoft sql server 2025
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-67645
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67648
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67624
microsoft sql server 2019, microsoft sql server 2022 +1 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67629
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67630
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67631
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 8 Sep 2026 |
|
CVE-2026-67633
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 8 Sep 2026 |
|
CVE-2026-67636
microsoft sql server 2019, microsoft sql server 2022 +1 lainnya
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
|
9.0 Critical | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-67385
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Use after free in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67386
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67388
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67389
microsoft sql server 2022, microsoft sql server 2025
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67390
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67393
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67376
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 8 Sep 2026 |
|
CVE-2026-67378
microsoft sql server 2019, microsoft sql server 2022 +1 lainnya
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
|
9.0 Critical | — | 0,71% | 8 Sep 2026 |
|
CVE-2026-67379
microsoft sql server 2019, microsoft sql server 2022 +1 lainnya
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.5 High | — | 0,66% | 8 Sep 2026 |
|
CVE-2026-67380
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67381
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67383
microsoft sql server 2025
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67384
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-67368
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 1,0% | 8 Sep 2026 |
|
CVE-2026-67369
microsoft sql server 2025
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-67370
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,99% | 8 Sep 2026 |
|
CVE-2026-67373
microsoft sql server 2025
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 8 Sep 2026 |
|
CVE-2026-66816
microsoft sql server 2022, microsoft sql server 2025
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
|
6.5 Medium | — | 1,00% | 8 Sep 2026 |
|
CVE-2026-66818
microsoft sql server 2017, microsoft sql server 2019 +2 lainnya
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 8 Sep 2026 |