Katalog CVE (hal. 5110)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.217 (Critical 35.883 · High 103.262 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 06:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 255.451–255.500 dari 258.217 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-0736 microsoft windows 7, microsoft windows server 2008 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.	5.5 Medium	—	1,5%	11 Feb 2020
CVE-2020-0715 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Priv...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0716 microsoft windows 10, microsoft windows 8.1 +3 lainnya An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This C...	5.5 Medium	—	1,5%	11 Feb 2020
CVE-2020-0717 microsoft windows 10, microsoft windows server 2016 +1 lainnya An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This C...	5.5 Medium	—	1,5%	11 Feb 2020
CVE-2020-0719 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,91%	11 Feb 2020
CVE-2020-0720 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0721 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0722 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0723 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0724 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,91%	11 Feb 2020
CVE-2020-0725 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,91%	11 Feb 2020
CVE-2020-0726 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0727 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experienc...	7.8 High	—	0,85%	11 Feb 2020
CVE-2020-0728 microsoft windows 10, microsoft windows server 2016 +1 lainnya An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Discl...	5.5 Medium	—	3,7%	11 Feb 2020
CVE-2020-0701 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka 'Windows Client License Service...	7.8 High	—	0,79%	11 Feb 2020
CVE-2020-0702 microsoft surface hub firmware A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulnerability'.	6.8 Medium	—	0,86%	11 Feb 2020
CVE-2020-0703 microsoft windows 10, microsoft windows 7 +4 lainnya An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first h...	7.8 High	—	1,0%	11 Feb 2020
CVE-2020-0704 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerability, an attacker would first...	7.8 High	—	0,95%	11 Feb 2020
CVE-2020-0705 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an...	5.5 Medium	—	1,5%	11 Feb 2020
CVE-2020-0706 microsoft internet explorer, microsoft edge An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vul...	4.3 Medium	—	5,1%	11 Feb 2020
CVE-2020-0707 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain executio...	7.8 High	—	0,95%	11 Feb 2020
CVE-2020-0708 microsoft windows 10, microsoft windows 7 +6 lainnya A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coe...	7.8 High	—	13,5%	11 Feb 2020
CVE-2020-0709 microsoft windows 10, microsoft windows server 2016 An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is uniqu...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0710 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	10,1%	11 Feb 2020
CVE-2020-0711 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	10,2%	11 Feb 2020
CVE-2020-0712 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	10,1%	11 Feb 2020
CVE-2020-0713 microsoft edge, microsoft chakracore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerabil...	7.5 High	—	10,1%	11 Feb 2020
CVE-2020-0714 microsoft windows 10, microsoft windows server 2016 +1 lainnya An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.	5.5 Medium	—	1,4%	11 Feb 2020
CVE-2020-0691 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privile...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0692 microsoft exchange server An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.	8.1 High	—	3,3%	11 Feb 2020
CVE-2020-0693 microsoft sharepoint enterprise server A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint se...	5.4 Medium	—	1,6%	11 Feb 2020
CVE-2020-0694 microsoft sharepoint enterprise server A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint se...	5.4 Medium	—	1,6%	11 Feb 2020
CVE-2020-0695 microsoft office online server A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing...	5.4 Medium	—	0,97%	11 Feb 2020
CVE-2020-0696 microsoft office, microsoft office 365 proplus +1 lainnya A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Featur...	6.5 Medium	—	5,0%	11 Feb 2020
CVE-2020-0697 microsoft office 365 proplus An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this...	7.8 High	—	0,90%	11 Feb 2020
CVE-2020-0698 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerabili...	5.5 Medium	—	1,5%	11 Feb 2020
CVE-2020-0676 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulner...	5.5 Medium	—	1,6%	11 Feb 2020
CVE-2020-0677 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulner...	5.5 Medium	—	1,6%	11 Feb 2020
CVE-2020-0678 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privi...	7.8 High	—	0,91%	11 Feb 2020
CVE-2020-0679 microsoft windows 10, microsoft windows 7 +5 lainnya An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service E...	7.8 High	—	0,85%	11 Feb 2020
CVE-2020-0680 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service E...	7.8 High	—	0,85%	11 Feb 2020
CVE-2020-0681 microsoft windows 10, microsoft windows 7 +6 lainnya A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execu...	7.5 High	—	10,6%	11 Feb 2020
CVE-2020-0682 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service E...	7.8 High	—	0,91%	11 Feb 2020
CVE-2020-0683 microsoft windows 10 1507, microsoft windows 10 1607 +15 lainnya An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerabil...	7.8 High	KEV	7,6%	11 Feb 2020
CVE-2020-0685 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.	7.8 High	—	0,91%	11 Feb 2020
CVE-2020-0686 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerabil...	7.8 High	—	0,96%	11 Feb 2020
CVE-2020-0688 microsoft exchange server A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory C...	8.8 High	KEV · ransomware	100,0%	11 Feb 2020
CVE-2020-0689 microsoft windows 10, microsoft windows 8.1 +4 lainnya A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.	6.7 Medium	—	1,1%	11 Feb 2020
CVE-2020-0662 microsoft windows 10, microsoft windows 7 +5 lainnya A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.	8.8 High	—	13,3%	11 Feb 2020
CVE-2020-0663 microsoft edge An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information fr...	4.2 Medium	—	1,6%	11 Feb 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.