Katalog CVE (hal. 5083)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.101–254.150 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-0848 microsoft chakracore, microsoft edge A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	9,6%	12 Mar 2020
CVE-2020-0849 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is un...	7.8 High	—	0,88%	12 Mar 2020
CVE-2020-0850 microsoft office, microsoft office 365 proplus +5 lainnya A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vuln...	8.8 High	—	8,8%	12 Mar 2020
CVE-2020-0851 microsoft office, microsoft office 365 proplus A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vuln...	7.8 High	—	11,8%	12 Mar 2020
CVE-2020-0852 microsoft office, microsoft office online server +1 lainnya A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vuln...	7.8 High	—	12,0%	12 Mar 2020
CVE-2020-0853 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component In...	6.5 Medium	—	6,6%	12 Mar 2020
CVE-2020-0854 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management...	7.1 High	—	0,75%	12 Mar 2020
CVE-2020-0855 microsoft office, microsoft office 365 proplus A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vuln...	7.8 High	—	11,8%	12 Mar 2020
CVE-2020-0820 microsoft windows 10, microsoft windows server 2016 +1 lainnya An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.	5.5 Medium	—	1,3%	12 Mar 2020
CVE-2020-0822 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installer Elevation...	7.8 High	—	0,73%	12 Mar 2020
CVE-2020-0823 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	8,9%	12 Mar 2020
CVE-2020-0824 microsoft internet explorer A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.	7.5 High	—	7,2%	12 Mar 2020
CVE-2020-0825 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	13,3%	12 Mar 2020
CVE-2020-0826 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	8,9%	12 Mar 2020
CVE-2020-0827 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	13,3%	12 Mar 2020
CVE-2020-0828 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	8,9%	12 Mar 2020
CVE-2020-0829 microsoft chakracore, microsoft edge A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	8,9%	12 Mar 2020
CVE-2020-0830 microsoft internet explorer, microsoft chakracore +1 lainnya A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vuln...	7.5 High	—	8,7%	12 Mar 2020
CVE-2020-0831 microsoft chakracore, microsoft edge A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	8,9%	12 Mar 2020
CVE-2020-0832 microsoft internet explorer A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption...	7.5 High	—	8,7%	12 Mar 2020
CVE-2020-0833 microsoft internet explorer A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption...	7.5 High	—	8,7%	12 Mar 2020
CVE-2020-0834 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this v...	7.8 High	—	0,88%	12 Mar 2020
CVE-2020-0840 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is un...	7.8 High	—	0,88%	12 Mar 2020
CVE-2020-0802 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0803 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0804 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service...	7.8 High	—	0,98%	12 Mar 2020
CVE-2020-0806 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege V...	7.8 High	—	0,78%	12 Mar 2020
CVE-2020-0807 microsoft windows 10, microsoft windows server 2016 +1 lainnya A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This...	8.8 High	—	5,6%	12 Mar 2020
CVE-2020-0808 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vul...	7.8 High	—	0,76%	12 Mar 2020
CVE-2020-0809 microsoft windows 10, microsoft windows server 2016 +1 lainnya A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This...	8.8 High	—	5,6%	12 Mar 2020
CVE-2020-0810 microsoft visual studio 2015, microsoft visual studio 2017 +4 lainnya An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locat...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0811 microsoft chakracore, microsoft edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting...	7.5 High	—	7,7%	12 Mar 2020
CVE-2020-0812 microsoft chakracore, microsoft edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting...	7.5 High	—	7,9%	12 Mar 2020
CVE-2020-0813 microsoft chakracore, microsoft edge An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further co...	7.5 High	—	5,5%	12 Mar 2020
CVE-2020-0814 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerabilit...	7.8 High	—	1,2%	12 Mar 2020
CVE-2020-0815 microsoft azure devops server An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and T...	7.5 High	—	1,8%	12 Mar 2020
CVE-2020-0816 microsoft edge A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.	8.8 High	—	10,7%	12 Mar 2020
CVE-2020-0819 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device Setup Manager Elevation of Pr...	7.8 High	—	0,88%	12 Mar 2020
CVE-2020-0783 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Ele...	7.8 High	—	0,92%	12 Mar 2020
CVE-2020-0785 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of...	7.1 High	—	0,72%	12 Mar 2020
CVE-2020-0786 microsoft windows 10, microsoft windows server 2016 A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object Service Denial of Service Vulnerabil...	7.1 High	—	0,82%	12 Mar 2020
CVE-2020-0787 microsoft windows 10 1507, microsoft windows 10 1607 +15 lainnya An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background...	7.8 High	KEV · ransomware	42,5%	12 Mar 2020
CVE-2020-0788 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,96%	12 Mar 2020
CVE-2020-0789 microsoft visual studio 2019 A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service...	7.1 High	—	0,86%	12 Mar 2020
CVE-2020-0791 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Priv...	7.8 High	—	1,1%	12 Mar 2020
CVE-2020-0793 microsoft windows 10, microsoft windows server 2016 +4 lainnya An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Colle...	7.8 High	—	0,79%	12 Mar 2020
CVE-2020-0795 microsoft business productivity servers, microsoft sharepoint enterprise server +1 lainnya This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker coul...	5.4 Medium	—	1,5%	12 Mar 2020
CVE-2020-0796 microsoft windows 10 1903, microsoft windows 10 1909 +2 lainnya A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client...	10.0 Critical	KEV · ransomware	99,8%	12 Mar 2020
CVE-2020-0797 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0798 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading...	7.8 High	—	1,0%	12 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.