Katalog CVE (hal. 753)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.065 (Critical 36.624 · High 106.293 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.601–37.650 dari 266.065 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-62720 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62719 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62718 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62717 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62716 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62715 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62714 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.	6.5 Medium	—	0,54%	11 Agt 2026
CVE-2026-62713 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62712 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62711 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62710 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62709 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62708 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.	6.4 Medium	—	0,34%	11 Agt 2026
CVE-2026-62707 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62705 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privile...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62703 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-62702 microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.	8.6 High	—	0,98%	11 Agt 2026
CVE-2026-62701 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62700 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62699 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.	6.8 Medium	—	0,44%	11 Agt 2026
CVE-2026-62698 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62696 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62695 microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62693 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privil...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62692 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-62690 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privile...	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-62688 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61939 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Use after free in Winlogon allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-61938 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-61937 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61936 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.	5.5 Medium	—	0,30%	11 Agt 2026
CVE-2026-61934 microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61933 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	11 Agt 2026
CVE-2026-61932 microsoft windows 10 1607, microsoft windows 10 1809 +6 lainnya Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61930 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61929 microsoft windows 11 23h2, microsoft windows 11 24h2 +3 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-61928 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.	5.5 Medium	—	0,23%	11 Agt 2026
CVE-2026-61927 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	11 Agt 2026
CVE-2026-61926 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61925 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-61924 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.	7.5 High	—	0,92%	11 Agt 2026
CVE-2026-61923 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	11 Agt 2026
CVE-2026-61921 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	11 Agt 2026
CVE-2026-61920 microsoft windows 10 1607, microsoft windows 10 1809 +6 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.	6.6 Medium	—	0,52%	11 Agt 2026
CVE-2026-61918 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.	7.5 High	—	0,92%	11 Agt 2026
CVE-2026-61368 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,43%	11 Agt 2026
CVE-2026-61367 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-61366 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	11 Agt 2026
CVE-2026-61365 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-61364 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.