Katalog CVE (hal. 747)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.042 (Critical 36.621 · High 106.282 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.301–37.350 dari 266.042 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-70323 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70322 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70321 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	1,7%	11 Agt 2026
CVE-2026-70320 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70319 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70318 microsoft 365 apps, microsoft 365 +4 lainnya Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-70317 microsoft 365 apps, microsoft 365 +4 lainnya Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70316 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70315 microsoft 365 apps, microsoft 365 +3 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70314 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-70313 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-70312 microsoft 365 apps, microsoft 365 +3 lainnya Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70311 microsoft 365 apps, microsoft 365 +4 lainnya Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-70310 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-70307 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-70306 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov...	9.3 Critical	—	1,0%	11 Agt 2026
CVE-2026-70304 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,34%	11 Agt 2026
CVE-2026-70130 microsoft 365 apps, microsoft office 2019 +2 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,34%	11 Agt 2026
CVE-2026-69320 microsoft visual studio code Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a ne...	8.8 High	—	0,86%	11 Agt 2026
CVE-2026-69306 microsoft visual studio code Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.	8.2 High	—	0,54%	11 Agt 2026
CVE-2026-69278 microsoft visual studio code Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.	7.8 High	—	0,32%	11 Agt 2026
CVE-2026-69223 apache allura Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to vers...	9.1 Critical	—	0,78%	11 Agt 2026
CVE-2026-68821 microsoft app installer Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,32%	11 Agt 2026
CVE-2026-68820 Advisory microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 High	KEV	8,6%	11 Agt 2026
CVE-2026-68819 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.	7.5 High	—	0,98%	11 Agt 2026
CVE-2026-68817 microsoft 365 apps, microsoft excel +4 lainnya Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68816 microsoft 365 apps, microsoft excel +4 lainnya Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68815 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68814 microsoft 365 apps, microsoft excel +4 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68813 microsoft 365 apps, microsoft 365 +3 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-68812 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68811 microsoft 365 apps, microsoft excel +4 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68810 microsoft 365 apps, microsoft excel +4 lainnya Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68809 microsoft 365 apps, microsoft office 2019 +3 lainnya Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-68808 microsoft 365 apps, microsoft excel +4 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-68807 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68806 microsoft 365 apps, microsoft excel +4 lainnya Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68805 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68804 microsoft 365 apps, microsoft excel +4 lainnya Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68803 microsoft 365 apps, microsoft excel +4 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68802 microsoft 365 apps, microsoft excel +4 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-68801 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68800 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68799 microsoft 365 apps, microsoft excel +4 lainnya Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-68798 microsoft 365 apps, microsoft 365 +2 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68797 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-68796 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68795 microsoft 365 apps, microsoft excel +4 lainnya Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68794 microsoft 365 apps, microsoft excel +4 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-68793 microsoft 365 apps, microsoft excel +4 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.