Katalog CVE (hal. 756)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.065 (Critical 36.624 · High 106.293 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.751–37.800 dari 266.065 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-20913 intel neural compressor Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivil...	5.3 Medium	—	0,14%	11 Agt 2026
CVE-2026-20908 intel neural processing unit driver Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivilege...	5.3 Medium	—	0,07%	11 Agt 2026
CVE-2026-20906 intel neural compressor Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unpri...	6.7 Medium	—	0,16%	11 Agt 2026
CVE-2026-20903 Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-20898 intel xeon 6315p firmware, intel xeon 6325p firmware +58 lainnya Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code...	7.2 High	—	0,13%	11 Agt 2026
CVE-2026-20891 intel proset/wireless wifi Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged softw...	7.9 High	—	0,17%	11 Agt 2026
CVE-2026-20890 intel proset/wireless wifi Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivil...	7.3 High	—	0,13%	11 Agt 2026
CVE-2026-20886 intel proset/wireless wifi Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an una...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-20885 intel tdx module Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege...	7.2 High	—	0,15%	11 Agt 2026
CVE-2026-20878 intel proset/wireless wifi Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with a...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-20799 Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivile...	5.4 Medium	—	0,12%	11 Agt 2026
CVE-2026-20795 intel proset/wireless wifi Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary wi...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-20789 intel proset/wireless wifi Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged softw...	7.8 High	—	0,15%	11 Agt 2026
CVE-2026-20787 intel proset/wireless wifi Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with a...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-20786 intel neural processing unit driver Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an au...	6.1 Medium	—	0,13%	11 Agt 2026
CVE-2026-20783 intel neural processing unit driver Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software...	6.1 Medium	—	0,14%	11 Agt 2026
CVE-2026-20780 intel proset/wireless wifi Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged so...	6.5 Medium	—	0,15%	11 Agt 2026
CVE-2026-20778 intel proset/wireless wifi Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with a...	6.8 Medium	—	0,44%	11 Agt 2026
CVE-2026-20776 intel proset/wireless wifi Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthent...	8.6 High	—	0,55%	11 Agt 2026
CVE-2026-20775 intel tdx module Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with...	5.3 Medium	—	0,13%	11 Agt 2026
CVE-2026-20770 Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-20769 intel neural processing unit driver Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary wit...	6.1 Medium	—	0,14%	11 Agt 2026
CVE-2026-20765 intel trust domain extensions guest Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adve...	4.2 Medium	—	0,30%	11 Agt 2026
CVE-2026-20763 intel trust domain extensions guest Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adv...	4.2 Medium	—	0,15%	11 Agt 2026
CVE-2026-20760 Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege...	6.8 Medium	—	0,10%	11 Agt 2026
CVE-2026-20755 Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a pr...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-20752 intel proset/wireless wifi Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privil...	4.4 Medium	—	0,19%	11 Agt 2026
CVE-2026-20749 intel proset/wireless wifi Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthent...	8.8 High	—	0,27%	11 Agt 2026
CVE-2026-20747 intel proset/wireless wifi Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthent...	6.5 Medium	—	0,28%	11 Agt 2026
CVE-2026-20745 intel proset/wireless wifi Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an una...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-20741 intel proset/wireless wifi Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with...	7.4 High	—	0,18%	11 Agt 2026
CVE-2026-20739 intel proset/wireless wifi Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with...	7.4 High	—	0,27%	11 Agt 2026
CVE-2026-20737 intel proset/wireless wifi Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalati...	7.9 High	—	0,16%	11 Agt 2026
CVE-2026-20734 Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information...	5.6 Medium	—	0,16%	11 Agt 2026
CVE-2026-20731 intel neural processing unit driver Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary...	6.1 Medium	—	0,14%	11 Agt 2026
CVE-2026-20728 Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privileg...	5.4 Medium	—	0,16%	11 Agt 2026
CVE-2026-20727 intel proset/wireless wifi Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary...	8.6 High	—	0,55%	11 Agt 2026
CVE-2026-20716 intel xeon 634 firmware, intel xeon 636 firmware +58 lainnya Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticate...	7.0 High	—	0,09%	11 Agt 2026
CVE-2026-20715 Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageability may allow a denial of se...	8.2 High	—	0,43%	11 Agt 2026
CVE-2026-20713 Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a...	4.5 Medium	—	0,10%	11 Agt 2026
CVE-2026-20708 Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an information disclosure. Network ad...	5.9 Medium	—	0,32%	11 Agt 2026
CVE-2026-20707 Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivil...	6.8 Medium	—	0,08%	11 Agt 2026
CVE-2026-20705 intel tdx module Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System softw...	5.3 Medium	—	0,13%	11 Agt 2026
CVE-2026-20702 Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with a...	8.9 High	—	0,45%	11 Agt 2026
CVE-2026-20349 Advisory cisco adaptive security appliance software A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) S...	8.6 High	KEV	1,0%	11 Agt 2026
CVE-2026-18247 A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in...	5.3 Medium	—	0,44%	11 Agt 2026
CVE-2026-12571 An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.	9.8 Critical	—	3,3%	11 Agt 2026
CVE-2025-8087 A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially res...	7.0 High	—	0,16%	11 Agt 2026
CVE-2025-61970 Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in bi...	1.0 Low	—	0,14%	11 Agt 2026
CVE-2025-48506 Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbit...	4.6 Medium	—	0,20%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.