csirt@kutim:~/threat-intel/cve
$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.565 (Critical 35.800 · High 103.006 · KEV 1.741 · sejak 2020)  ·  Pembaruan terakhir: 14 Okt 2026, 18:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 401–450 dari 257.565 CVE.

CVE Severity KEV EPSS Terbit
CVE-2026-97793
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
7.0 High — — 13 Okt 2026
CVE-2026-97792
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
7.8 High — — 13 Okt 2026
CVE-2026-97790
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tamp...
5.5 Medium — — 13 Okt 2026
CVE-2026-97789
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5 High — — 13 Okt 2026
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
7.5 High — — 13 Okt 2026
CVE-2026-97787
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an author...
7.0 High — — 13 Okt 2026
CVE-2026-97783
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov...
8.1 High — — 13 Okt 2026
CVE-2026-97782
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
6.8 Medium — — 13 Okt 2026
CVE-2026-97781
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a net...
8.8 High — — 13 Okt 2026
CVE-2026-97780
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97779
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
6.5 Medium — — 13 Okt 2026
CVE-2026-97778
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97777
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97776
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97775
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97774
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
7.0 High — — 13 Okt 2026
CVE-2026-97773
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97772
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97771
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97770
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97769
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97768
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97767
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97766
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97765
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97763
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97762
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97761
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97760
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
6.5 Medium — — 13 Okt 2026
CVE-2026-97759
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97758
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97757
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97756
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97755
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97754
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97753
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97752
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97751
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97750
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97749
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
9.8 Critical — — 13 Okt 2026
CVE-2026-97748
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97747
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97746
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97745
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97744
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
5.5 Medium — — 13 Okt 2026
CVE-2026-97743
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
6.5 Medium — — 13 Okt 2026
CVE-2026-97742
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97741
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
CVE-2026-97740
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a networ...
6.5 Medium — — 13 Okt 2026
CVE-2026-97739
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8 High — — 13 Okt 2026
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.