Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-61363
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,68% | 11 Agt 2026 |
|
CVE-2026-61361
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-61360
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-61359
microsoft windows 11 23h2, microsoft windows 11 24h2 +4 lainnya
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-61358
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges...
|
7.8 High | — | 0,37% | 11 Agt 2026 |
|
CVE-2026-61357
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-61356
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 11 Agt 2026 |
|
CVE-2026-61355
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-61353
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-61352
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over...
|
8.1 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-61350
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
|
4.6 Medium | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-61349
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-61348
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-61347
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-61346
microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-61345
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 11 Agt 2026 |
|
CVE-2026-59138
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 11 Agt 2026 |
|
CVE-2026-59137
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-59136
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-59135
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,35% | 11 Agt 2026 |
|
CVE-2026-59134
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.1 High | — | 0,68% | 11 Agt 2026 |
|
CVE-2026-59133
microsoft windows app
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-59132
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 11 Agt 2026 |
|
CVE-2026-59131
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
|
5.6 Medium | — | 0,31% | 11 Agt 2026 |
|
CVE-2026-59130
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
|
5.6 Medium | — | 0,37% | 11 Agt 2026 |
|
CVE-2026-59128
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 11 Agt 2026 |
|
CVE-2026-59127
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 11 Agt 2026 |
|
CVE-2026-59126
microsoft windows 10 21h2, microsoft windows 10 22h2 +6 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate priv...
|
7.0 High | — | 0,20% | 11 Agt 2026 |
|
CVE-2026-59125
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-59124
microsoft windows app
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,5% | 11 Agt 2026 |
|
CVE-2026-59122
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileg...
|
7.0 High | — | 0,20% | 11 Agt 2026 |
|
CVE-2026-59119
microsoft powershell
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
|
7.3 High | — | 0,38% | 11 Agt 2026 |
|
CVE-2026-59113
microsoft visual studio code
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,76% | 11 Agt 2026 |
|
CVE-2026-58651
microsoft 365 apps, microsoft 365 +2 lainnya
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-58650
microsoft visual studio code
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
|
7.8 High | — | 0,32% | 11 Agt 2026 |
|
CVE-2026-58641
microsoft .net
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-58639
microsoft sharepoint server
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
|
6.5 Medium | — | 0,91% | 11 Agt 2026 |
|
CVE-2026-58612
microsoft powershell
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,87% | 11 Agt 2026 |
|
CVE-2026-57105
microsoft sharepoint server
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
|
5.4 Medium | — | 0,62% | 11 Agt 2026 |
|
CVE-2026-57104
microsoft azure storage explorer
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over...
|
9.6 Critical | — | 0,86% | 11 Agt 2026 |
|
CVE-2026-56179
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
|
8.3 High | — | 0,28% | 11 Agt 2026 |
|
CVE-2026-56174
microsoft windows 10 1809, microsoft windows 10 21h2 +5 lainnya
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,46% | 11 Agt 2026 |
|
CVE-2026-54984
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-54981
microsoft python
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
|
7.8 High | — | 0,47% | 11 Agt 2026 |
|
CVE-2026-54123
microsoft defender for endpoint
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 11 Agt 2026 |
|
CVE-2026-54113
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 11 Agt 2026 |
|
CVE-2026-50516
microsoft azure kubernetes service
Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.
|
9.4 Critical | — | 0,83% | 11 Agt 2026 |
|
CVE-2026-50472
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 11 Agt 2026 |
|
CVE-2026-49179
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a net...
|
8.8 High | — | 0,86% | 11 Agt 2026 |
|
CVE-2026-48483
TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later PO...
|
5.4 Medium | — | 0,33% | 11 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.