Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-102867
microsoft 365 apps, microsoft office 2021 +1 lainnya
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,90% | 13 Okt 2026 |
|
CVE-2026-102866
microsoft sharepoint server
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
|
8.1 High | — | 0,55% | 13 Okt 2026 |
|
CVE-2026-102865
microsoft sharepoint server
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,79% | 13 Okt 2026 |
|
CVE-2026-102864
microsoft sharepoint server
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
|
4.6 Medium | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-102863
microsoft sharepoint server
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-102862
microsoft sharepoint server
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,71% | 13 Okt 2026 |
|
CVE-2026-102861
microsoft sharepoint server
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,71% | 13 Okt 2026 |
|
CVE-2026-102860
microsoft sharepoint server
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,71% | 13 Okt 2026 |
|
CVE-2026-102859
microsoft sharepoint server
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
|
4.6 Medium | — | 0,36% | 13 Okt 2026 |
|
CVE-2026-102858
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,74% | 13 Okt 2026 |
|
CVE-2026-102857
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-102856
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-102851
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
|
6.1 Medium | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-102850
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,64% | 13 Okt 2026 |
|
CVE-2026-102849
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,64% | 13 Okt 2026 |
|
CVE-2026-102599
Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engin...
|
7.5 High | — | 0,58% | 13 Okt 2026 |
|
CVE-2026-102233
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
|
7.8 High | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-102232
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
|
7.0 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-102231
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
|
7.7 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-102229
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
|
6.8 Medium | — | 0,93% | 13 Okt 2026 |
|
CVE-2026-102227
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102226
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a net...
|
8.8 High | — | 0,92% | 13 Okt 2026 |
|
CVE-2026-102225
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,80% | 13 Okt 2026 |
|
CVE-2026-102221
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
|
4.4 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102220
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102218
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102217
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-102216
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102215
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102214
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
|
8.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-102211
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-102210
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,89% | 13 Okt 2026 |
|
CVE-2026-102209
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-102208
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-102207
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-102206
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-102205
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102204
Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-102203
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,77% | 13 Okt 2026 |
|
CVE-2026-102202
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,35% | 13 Okt 2026 |
|
CVE-2026-102201
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102199
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
|
6.5 Medium | — | 0,85% | 13 Okt 2026 |
|
CVE-2026-102198
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
|
5.3 Medium | — | 0,70% | 13 Okt 2026 |
|
CVE-2026-102197
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-102196
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-102195
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-102194
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-102193
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-102192
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,1% | 13 Okt 2026 |
|
CVE-2026-102191
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,25% | 13 Okt 2026 |