Katalog CVE (hal. 752)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.065 (Critical 36.624 · High 106.293 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.551–37.600 dari 266.065 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-62781 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.	8.1 High	—	0,71%	11 Agt 2026
CVE-2026-62780 microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62779 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62778 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.	8.1 High	—	0,54%	11 Agt 2026
CVE-2026-62777 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-62776 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,37%	11 Agt 2026
CVE-2026-62775 microsoft windows 11 26h1 Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,35%	11 Agt 2026
CVE-2026-62774 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62773 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62772 microsoft windows 11 26h1 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62771 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62770 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62769 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.	6.7 Medium	—	0,35%	11 Agt 2026
CVE-2026-62768 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62766 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62761 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,37%	11 Agt 2026
CVE-2026-62758 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62757 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.	5.9 Medium	—	0,35%	11 Agt 2026
CVE-2026-62755 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62754 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62753 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62752 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62751 microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62750 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.	6.5 Medium	—	0,68%	11 Agt 2026
CVE-2026-62749 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62748 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileg...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62747 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62746 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62745 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62743 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62742 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62741 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62740 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62739 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62738 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62737 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62736 microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62735 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62734 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileg...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62733 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62732 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62730 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62729 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileg...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62728 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62726 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62725 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62724 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62723 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-62722 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62721 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.