Katalog CVE (hal. 749)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.042 (Critical 36.621 · High 106.282 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.401–37.450 dari 266.042 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-65673 microsoft entra connect Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.	7.8 High	—	0,32%	11 Agt 2026
CVE-2026-65672 microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-65671 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-65665 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	1,7%	11 Agt 2026
CVE-2026-65664 microsoft 365 apps, microsoft 365 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-65663 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	2,0%	11 Agt 2026
CVE-2026-65662 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-65661 microsoft 365 apps, microsoft office 2016 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-65660 Advisory microsoft sharepoint server Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	KEV	8,2%	11 Agt 2026
CVE-2026-65658 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	2,0%	11 Agt 2026
CVE-2026-65657 microsoft 365 apps, microsoft 365 +3 lainnya Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-65656 microsoft 365 apps, microsoft office 2019 +2 lainnya Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,46%	11 Agt 2026
CVE-2026-64922 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	11 Agt 2026
CVE-2026-64921 microsoft sharepoint server Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,94%	11 Agt 2026
CVE-2026-64920 microsoft 365 apps, microsoft access +3 lainnya Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64919 microsoft 365 apps, microsoft access +3 lainnya Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64917 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-64916 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	11 Agt 2026
CVE-2026-64915 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64914 microsoft 365 apps, microsoft access +3 lainnya Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64912 microsoft 365 apps, microsoft access +3 lainnya Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64911 microsoft 365 apps, microsoft 365 +3 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64910 microsoft 365 apps, microsoft 365 +3 lainnya Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64909 microsoft 365 apps, microsoft 365 +4 lainnya Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64908 microsoft 365 apps, microsoft access +3 lainnya Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64907 microsoft 365 apps, microsoft 365 +4 lainnya Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64906 microsoft 365 apps, microsoft access +3 lainnya Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64905 microsoft 365 apps, microsoft 365 +4 lainnya Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64904 microsoft 365 apps, microsoft 365 +3 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64903 microsoft 365 apps, microsoft 365 +4 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64902 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	11 Agt 2026
CVE-2026-64901 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	2,0%	11 Agt 2026
CVE-2026-64900 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,65%	11 Agt 2026
CVE-2026-64899 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-64898 microsoft 365 apps, microsoft 365 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64897 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	11 Agt 2026
CVE-2026-63533 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63532 microsoft 365 apps, microsoft 365 +4 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63531 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63530 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63529 microsoft 365 apps, microsoft office 2016 +3 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63528 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63527 microsoft 365 apps, microsoft 365 +4 lainnya Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63526 microsoft 365 apps, microsoft 365 +4 lainnya Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63525 microsoft 365 apps, microsoft office 2019 +3 lainnya Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63524 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63522 microsoft azure sql database Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-63521 microsoft 365 apps, microsoft office 2019 +3 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-63520 microsoft sharepoint server Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.	8.1 High	—	0,96%	11 Agt 2026
CVE-2026-63519 microsoft 365 apps, microsoft 365 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.