Katalog CVE (hal. 750)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.065 (Critical 36.624 · High 106.293 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.451–37.500 dari 266.065 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-64905 microsoft 365 apps, microsoft 365 +4 lainnya Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64904 microsoft 365 apps, microsoft 365 +3 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64903 microsoft 365 apps, microsoft 365 +4 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64902 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	11 Agt 2026
CVE-2026-64901 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	2,0%	11 Agt 2026
CVE-2026-64900 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,65%	11 Agt 2026
CVE-2026-64899 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-64898 microsoft 365 apps, microsoft 365 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-64897 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	11 Agt 2026
CVE-2026-63533 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63532 microsoft 365 apps, microsoft 365 +4 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63531 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63530 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63529 microsoft 365 apps, microsoft office 2016 +3 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63528 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63527 microsoft 365 apps, microsoft 365 +4 lainnya Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63526 microsoft 365 apps, microsoft 365 +4 lainnya Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63525 microsoft 365 apps, microsoft office 2019 +3 lainnya Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63524 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63522 microsoft azure sql database Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-63521 microsoft 365 apps, microsoft office 2019 +3 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,44%	11 Agt 2026
CVE-2026-63520 microsoft sharepoint server Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.	8.1 High	—	0,96%	11 Agt 2026
CVE-2026-63519 microsoft 365 apps, microsoft 365 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63518 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63517 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-63516 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	6.5 Medium	—	1,9%	11 Agt 2026
CVE-2026-63515 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63514 microsoft sharepoint server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	8.8 High	—	2,0%	11 Agt 2026
CVE-2026-63513 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	11 Agt 2026
CVE-2026-63512 microsoft sharepoint server Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.	6.5 Medium	—	0,73%	11 Agt 2026
CVE-2026-62917 microsoft sharepoint server Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	4.6 Medium	—	0,58%	11 Agt 2026
CVE-2026-62915 microsoft exchange server, microsoft exchange server subscription edition Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.	6.5 Medium	—	0,64%	11 Agt 2026
CVE-2026-62914 microsoft exchange server, microsoft exchange server subscription edition Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a...	5.4 Medium	—	0,45%	11 Agt 2026
CVE-2026-62913 microsoft exchange server, microsoft exchange server subscription edition Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.	8.8 High	—	0,91%	11 Agt 2026
CVE-2026-62912 microsoft exchange server, microsoft exchange server subscription edition Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.	6.5 Medium	—	2,0%	11 Agt 2026
CVE-2026-62911 microsoft exchange server, microsoft exchange server subscription edition Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.	8.0 High	—	0,69%	11 Agt 2026
CVE-2026-62910 microsoft exchange server, microsoft exchange server subscription edition Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.	8.8 High	—	1,0%	11 Agt 2026
CVE-2026-62909 microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,26%	11 Agt 2026
CVE-2026-62908 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges l...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62902 microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,87%	11 Agt 2026
CVE-2026-62901 microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	11 Agt 2026
CVE-2026-62900 microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.	5.9 Medium	—	0,75%	11 Agt 2026
CVE-2026-62899 microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.	5.9 Medium	—	0,75%	11 Agt 2026
CVE-2026-62898 microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.	7.5 High	—	1,0%	11 Agt 2026
CVE-2026-62897 microsoft .net framework, microsoft visual studio 2022 +2 lainnya Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.	7.0 High	—	0,37%	11 Agt 2026
CVE-2026-62894 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62893 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.	9.8 Critical	—	0,97%	11 Agt 2026
CVE-2026-62892 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62890 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62889 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.	8.1 High	—	0,71%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.