Katalog CVE (hal. 755)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.065 (Critical 36.624 · High 106.293 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.701–37.750 dari 266.065 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-48446 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file s...	5.5 Medium	—	0,29%	11 Agt 2026
CVE-2026-48445 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit th...	6.2 Medium	—	0,29%	11 Agt 2026
CVE-2026-48444 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit th...	6.2 Medium	—	0,30%	11 Agt 2026
CVE-2026-48443 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	6.2 Medium	—	0,26%	11 Agt 2026
CVE-2026-48442 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary fi...	7.1 High	—	0,30%	11 Agt 2026
CVE-2026-48440 adobe coldfusion ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on...	8.1 High	—	1,3%	11 Agt 2026
CVE-2026-48439 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	0,90%	11 Agt 2026
CVE-2026-48438 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vuln...	7.5 High	—	0,90%	11 Agt 2026
CVE-2026-48437 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	5.5 Medium	—	0,15%	11 Agt 2026
CVE-2026-48436 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	6.5 Medium	—	0,72%	11 Agt 2026
CVE-2026-48435 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could ex...	6.2 Medium	—	0,26%	11 Agt 2026
CVE-2026-48434 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	6.2 Medium	—	0,26%	11 Agt 2026
CVE-2026-48387 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit th...	6.2 Medium	—	0,29%	11 Agt 2026
CVE-2026-48386 adobe coldfusion ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage t...	7.5 High	—	0,96%	11 Agt 2026
CVE-2026-48385 adobe coldfusion ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in a Security feat...	7.7 High	—	1,6%	11 Agt 2026
CVE-2026-48384 adobe coldfusion ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit...	4.9 Medium	—	1,0%	11 Agt 2026
CVE-2026-48376 adobe coldfusion is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vuln...	5.4 Medium	—	0,68%	11 Agt 2026
CVE-2026-48375 adobe coldfusion ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vul...	6.5 Medium	—	0,81%	11 Agt 2026
CVE-2026-48362 adobe coldfusion ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code...	10.0 Critical	—	3,5%	11 Agt 2026
CVE-2026-47922 adobe c2pa, adobe c2pa-web +1 lainnya CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires u...	4.7 Medium	—	0,56%	11 Agt 2026
CVE-2026-47704 TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to...	7.1 High	—	0,56%	11 Agt 2026
CVE-2026-47299 microsoft azure monitor agent Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a netw...	7.2 High	—	1,0%	11 Agt 2026
CVE-2026-47285 microsoft visual studio code Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a n...	6.5 Medium	—	0,92%	11 Agt 2026
CVE-2026-43606 Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or elect...	8.5 High	—	0,16%	11 Agt 2026
CVE-2026-42976 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	11 Agt 2026
CVE-2026-40375 microsoft dynamics 365 business central 2024, microsoft dynamics 365 business central 2025 +1 lainnya Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.	6.5 Medium	—	0,84%	11 Agt 2026
CVE-2026-39452 intel transfer learning tool Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivile...	7.3 High	—	0,33%	11 Agt 2026
CVE-2026-35502 intel extension for pytorch Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unpr...	5.3 Medium	—	0,26%	11 Agt 2026
CVE-2026-34635 adobe coldfusion is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...	8.4 High	—	0,25%	11 Agt 2026
CVE-2026-34175 intel hardware-aware-automated-machine-learning Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege...	6.7 Medium	—	0,16%	11 Agt 2026
CVE-2026-32791 intel performance counter monitor Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of p...	7.0 High	—	0,12%	11 Agt 2026
CVE-2026-32788 intel approximate bayesian inference framework Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of p...	6.7 Medium	—	0,16%	11 Agt 2026
CVE-2026-32677 intel gaudi container runtime Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversa...	7.3 High	—	0,16%	11 Agt 2026
CVE-2026-28757 intel workload sevices framework Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged so...	6.7 Medium	—	0,12%	11 Agt 2026
CVE-2026-28729 Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined...	2.4 Low	—	0,15%	11 Agt 2026
CVE-2026-28707 Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-28700 Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-27765 intel vllm hardware Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denial of servic...	5.5 Medium	—	0,11%	11 Agt 2026
CVE-2026-25652 adobe coldfusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unau...	7.8 High	—	0,25%	11 Agt 2026
CVE-2026-25194 Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low c...	1.8 Low	—	0,16%	11 Agt 2026
CVE-2026-24911 intel proset/wireless wifi Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversa...	8.6 High	—	0,55%	11 Agt 2026
CVE-2026-24693 intel oneccl bindings for pytorch Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Un...	6.7 Medium	—	0,12%	11 Agt 2026
CVE-2026-24099 intel proset/wireless wifi Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthen...	5.1 Medium	—	0,13%	11 Agt 2026
CVE-2026-22887 intel proset/wireless wifi Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software advers...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-21400 intel ai reference models Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileg...	6.7 Medium	—	0,16%	11 Agt 2026
CVE-2026-21399 intel open vkl Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applica...	6.1 Medium	—	0,11%	11 Agt 2026
CVE-2026-21387 Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software advers...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-21279 adobe coldfusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security...	8.2 High	—	0,79%	11 Agt 2026
CVE-2026-21273 adobe coldfusion is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain un...	8.7 High	—	0,86%	11 Agt 2026
CVE-2026-21269 adobe coldfusion ColdFusion is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable...	5.4 Medium	—	0,57%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.