Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-62888
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62887
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-62886
microsoft visual studio 2022, microsoft visual studio 2026 +1 lainnya
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-62885
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62883
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 11 Agt 2026 |
|
CVE-2026-62882
microsoft 365 apps, microsoft office 2019 +3 lainnya
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
|
4.3 Medium | — | 0,67% | 11 Agt 2026 |
|
CVE-2026-62881
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
6.7 Medium | — | 0,35% | 11 Agt 2026 |
|
CVE-2026-62880
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62878
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 11 Agt 2026 |
|
CVE-2026-62877
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62876
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62872
microsoft .net framework
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 11 Agt 2026 |
|
CVE-2026-62871
microsoft .net, microsoft visual studio 2022 +1 lainnya
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-62869
microsoft entra id
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
|
8.8 High | — | 0,44% | 11 Agt 2026 |
|
CVE-2026-62842
microsoft 365 apps, microsoft 365 +3 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-62839
microsoft sharepoint server
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
|
6.5 Medium | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-62837
microsoft sharepoint server
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,2% | 11 Agt 2026 |
|
CVE-2026-62832
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 11 Agt 2026 |
|
CVE-2026-62829
microsoft sharepoint server
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
|
5.4 Medium | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-62827
microsoft sharepoint server
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,94% | 11 Agt 2026 |
|
CVE-2026-62824
microsoft windows 10 1607, microsoft windows server 2012 +1 lainnya
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 11 Agt 2026 |
|
CVE-2026-62823
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
|
8.8 High | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-62822
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 11 Agt 2026 |
|
CVE-2026-62820
microsoft windows 10 1607, microsoft windows 10 1809 +4 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-62819
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
8.1 High | — | 0,71% | 11 Agt 2026 |
|
CVE-2026-62818
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-62817
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
|
8.8 High | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-62816
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
|
8.8 High | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-62815
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 11 Agt 2026 |
|
CVE-2026-62814
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
6.5 Medium | — | 0,54% | 11 Agt 2026 |
|
CVE-2026-62812
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 11 Agt 2026 |
|
CVE-2026-62811
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62807
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 11 Agt 2026 |
|
CVE-2026-62803
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 11 Agt 2026 |
|
CVE-2026-62800
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-62799
microsoft windows 11 26h1
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62798
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-62797
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62796
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-62795
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 11 Agt 2026 |
|
CVE-2026-62793
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-62792
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,71% | 11 Agt 2026 |
|
CVE-2026-62790
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-62788
microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-62787
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
7.5 High | — | 0,66% | 11 Agt 2026 |
|
CVE-2026-62786
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-62785
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 11 Agt 2026 |
|
CVE-2026-62784
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-62783
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-62782
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 11 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.