Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-68792
microsoft 365 apps, microsoft office 2019 +2 lainnya
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,32% | 11 Agt 2026 |
|
CVE-2026-66810
microsoft 365 apps, microsoft 365 +4 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,44% | 11 Agt 2026 |
|
CVE-2026-66809
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,44% | 11 Agt 2026 |
|
CVE-2026-66808
microsoft sharepoint server
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 2,0% | 11 Agt 2026 |
|
CVE-2026-66807
microsoft 365 apps, microsoft 365 +3 lainnya
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-66806
microsoft 365 apps, microsoft office 2019 +3 lainnya
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,44% | 11 Agt 2026 |
|
CVE-2026-66805
microsoft sharepoint server
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
8.8 High | — | 2,0% | 11 Agt 2026 |
|
CVE-2026-66804
microsoft windows 10 22h2, microsoft windows 11 24h2 +2 lainnya
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 11 Agt 2026 |
|
CVE-2026-66802
microsoft windows 10 1809, microsoft windows 11 26h1 +3 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to...
|
8.1 High | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-66799
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-66301
microsoft dynamics 365
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 11 Agt 2026 |
|
CVE-2026-65815
microsoft dynamics 365
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
|
8.8 High | — | 1,7% | 11 Agt 2026 |
|
CVE-2026-65814
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-65813
microsoft exchange server, microsoft exchange server subscription edition
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,94% | 11 Agt 2026 |
|
CVE-2026-65811
microsoft power bi report server
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,96% | 11 Agt 2026 |
|
CVE-2026-65810
microsoft .net framework
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
|
7.8 High | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-65807
microsoft 365 apps, microsoft excel +4 lainnya
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 11 Agt 2026 |
|
CVE-2026-65806
microsoft azure cyclecloud
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,84% | 11 Agt 2026 |
|
CVE-2026-65799
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,34% | 11 Agt 2026 |
|
CVE-2026-65798
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 11 Agt 2026 |
|
CVE-2026-65797
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 11 Agt 2026 |
|
CVE-2026-65796
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 11 Agt 2026 |
|
CVE-2026-65795
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 11 Agt 2026 |
|
CVE-2026-65794
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 11 Agt 2026 |
|
CVE-2026-65791
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 11 Agt 2026 |
|
CVE-2026-65790
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-65789
microsoft windows 10 1607, microsoft windows 10 1809 +4 lainnya
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 11 Agt 2026 |
|
CVE-2026-65788
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65787
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-65786
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-65785
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
|
6.5 Medium | — | 0,58% | 11 Agt 2026 |
|
CVE-2026-65784
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-65783
microsoft windows 11 24h2, microsoft windows 11 25h2
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65782
microsoft windows 11 24h2, microsoft windows 11 25h2
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65781
microsoft windows 11 24h2, microsoft windows 11 25h2
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65780
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65779
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65778
microsoft windows 11 24h2, microsoft windows 11 25h2
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65777
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
|
5.3 Medium | — | 0,36% | 11 Agt 2026 |
|
CVE-2026-65776
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65775
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-65774
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-65773
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 11 Agt 2026 |
|
CVE-2026-65769
microsoft teams
Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 11 Agt 2026 |
|
CVE-2026-65768
microsoft teams
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a netwo...
|
9.8 Critical | — | 0,94% | 11 Agt 2026 |
|
CVE-2026-65767
microsoft teams
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over...
|
7.6 High | — | 0,61% | 11 Agt 2026 |
|
CVE-2026-65681
microsoft windows 10 1607, microsoft windows 10 1809 +4 lainnya
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 11 Agt 2026 |
|
CVE-2026-65679
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 11 Agt 2026 |
|
CVE-2026-65678
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-65675
microsoft github copilot chat
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
|
6.5 Medium | — | 0,64% | 11 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.