Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-109940
FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-enco...
|
4.3 Medium | — | 0,15% | 13 Okt 2026 |
|
CVE-2026-109939
FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which accesses the client bitmap cach...
|
6.5 Medium | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-109938
Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with vid...
|
6.5 Medium | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-109680
FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while keeping a pre-filled sugge...
|
5.3 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109679
FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling...
|
5.3 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109678
FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a N...
|
6.5 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-109677
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not ca...
|
6.5 Medium | — | 0,34% | 13 Okt 2026 |
|
CVE-2026-109676
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after...
|
8.8 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-109520
A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the compone...
|
8.8 High | — | 0,15% | 13 Okt 2026 |
|
CVE-2026-109519
A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. T...
|
8.3 High | — | 0,72% | 13 Okt 2026 |
|
CVE-2026-109410
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyI...
|
2.4 Low | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-109409
A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/setting/fileManagement/openFold...
|
5.3 Medium | — | 0,70% | 13 Okt 2026 |
|
CVE-2026-107832
fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does...
|
3.7 Low | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-103499
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attac...
|
7.5 High | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-0893
AMI APTIOV contains a vulnerability in BIOS
where an attacker may cause “Exposure of Sensitive
Information to an Unauthorized Actor” by local access. Successful
exploitat...
|
5.8 Medium | — | 0,12% | 13 Okt 2026 |
|
CVE-2025-58774
AMI APTIOV contains vulnerabilities
in BIOS where users may cause “Buffer Access with Incorrect Length
Value” by local access. Successful exploitation of this vulnerabili...
|
8.3 High | — | 0,12% | 13 Okt 2026 |
|
CVE-2025-58773
AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buff...
|
7.1 High | — | 0,11% | 13 Okt 2026 |
|
CVE-2025-58772
AMI APTIOV contains vulnerabilities in BIOS where users may cause
“Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to...
|
8.2 High | — | 0,12% | 13 Okt 2026 |
|
CVE-2025-58771
AMI APTIOV contains vulnerabilities in BIOS
where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could
le...
|
7.1 High | — | 0,11% | 13 Okt 2026 |
|
CVE-2026-67456
NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of servic...
|
4.4 Medium | — | 0,13% | 13 Okt 2026 |
|
CVE-2026-65180
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful...
|
7.8 High | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-65173
NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted toke...
|
9.1 Critical | — | 0,53% | 13 Okt 2026 |
|
CVE-2026-65172
NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL i...
|
8.6 High | — | 0,38% | 13 Okt 2026 |
|
CVE-2026-65170
NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplyi...
|
8.6 High | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-65164
NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a p...
|
8.1 High | — | 0,81% | 13 Okt 2026 |
|
CVE-2026-65162
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and...
|
10.0 Critical | — | 0,66% | 13 Okt 2026 |
|
CVE-2026-65161
NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying...
|
7.5 High | — | 0,66% | 13 Okt 2026 |
|
CVE-2026-65150
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to informati...
|
7.3 High | — | 0,13% | 13 Okt 2026 |
|
CVE-2026-65149
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of...
|
7.3 High | — | 0,13% | 13 Okt 2026 |
|
CVE-2026-65148
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution,...
|
7.3 High | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-65147
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to informatio...
|
7.3 High | — | 0,12% | 13 Okt 2026 |
|
CVE-2026-65141
NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, inform...
|
7.8 High | — | 0,17% | 13 Okt 2026 |
|
CVE-2026-65131
NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domai...
|
6.0 Medium | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-65110
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A success...
|
7.8 High | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-65104
NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A succ...
|
7.1 High | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-65103
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an imprope...
|
8.1 High | — | 0,90% | 13 Okt 2026 |
|
CVE-2026-65101
NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted exter...
|
8.6 High | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-109976
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a bound addre...
|
4.7 Medium | — | 0,10% | 13 Okt 2026 |
|
CVE-2026-109833
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly mov...
|
5.9 Medium | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-109781
Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
6.5 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109779
Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
4.2 Medium | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-109778
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
8.8 High | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-109777
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
4.3 Medium | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-109775
Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
6.5 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109773
Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
6.5 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-109771
Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
4.3 Medium | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-109769
Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
4.3 Medium | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-109768
Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
6.5 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-109767
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
4.3 Medium | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-109765
Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
4.2 Medium | — | 0,17% | 13 Okt 2026 |