Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 32 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-47300
microsoft .net, microsoft visual studio 2022 +1 lainnya
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 14 Jul 2026 |
|
CVE-2026-45755
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse() received th...
|
5.3 Medium | — | 0,27% | 14 Jul 2026 |
|
CVE-2026-45754
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, the Mailjet mailer bridge and LOX24...
|
5.3 Medium | — | 0,45% | 14 Jul 2026 |
|
CVE-2026-45753
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlAttributeSanitizer...
|
6.1 Medium | — | 0,34% | 14 Jul 2026 |
|
CVE-2026-45305
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Pars...
|
7.5 High | — | 0,68% | 14 Jul 2026 |
|
CVE-2026-45304
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Pars...
|
7.5 High | — | 0,68% | 14 Jul 2026 |
|
CVE-2026-45133
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed...
|
7.5 High | — | 0,63% | 14 Jul 2026 |
|
CVE-2026-45075
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped #[IsGranted], #[IsSignatureVal...
|
8.2 High | — | 0,43% | 14 Jul 2026 |
|
CVE-2026-45073
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear() build...
|
7.3 High | — | 0,46% | 14 Jul 2026 |
|
CVE-2026-45072
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler f...
|
5.4 Medium | — | 0,31% | 14 Jul 2026 |
|
CVE-2026-45070
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Mime\Head...
|
6.5 Medium | — | 0,39% | 14 Jul 2026 |
|
CVE-2026-45069
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() re...
|
9.1 Critical | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-45064
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse()...
|
6.1 Medium | — | 0,34% | 14 Jul 2026 |
|
CVE-2026-45063
sensiolabs symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts...
|
9.1 Critical | — | 0,37% | 14 Jul 2026 |
|
CVE-2026-15720
In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.
|
8.6 High | — | 0,54% | 14 Jul 2026 |
|
CVE-2026-15712
A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTT...
|
5.9 Medium | — | 0,63% | 14 Jul 2026 |
|
CVE-2026-15642
devolutions server
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with...
|
3.3 Low | — | 0,15% | 14 Jul 2026 |
|
CVE-2026-15641
devolutions server
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own p...
|
7.1 High | — | 0,29% | 14 Jul 2026 |
|
CVE-2026-15637
devolutions server
Improper authorization in the PAM SSH key and certificate retrieval
endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an
authenticated low-privileged user to...
|
7.5 High | — | 0,25% | 14 Jul 2026 |
|
CVE-2026-15058
devolutions server
Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages...
|
3.1 Low | — | 0,21% | 14 Jul 2026 |
|
CVE-2026-62659
A
security flaw was discovered in the NETGEAR WAX333 Access Point that could
allow someone already logged in and connected to the local network to make
unauthorized chang...
|
4.3 Medium | — | 0,24% | 14 Jul 2026 |
|
CVE-2026-62658
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers
that could allow someone already logged in to the device to run unauthorized commands
or co...
|
4.7 Medium | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-62657
A security flaw in the router's certificate validation process was
discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unautho...
|
4.9 Medium | — | 0,15% | 14 Jul 2026 |
|
CVE-2026-62656
A
security flaw was found in certain NETGEAR RAX models that could allow
a logged-in user to send specially crafted requests to the router and run
unauthorized commands....
|
5.4 Medium | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-62655
A
security flaw was found in certain NETGEAR Orbi models that
could allow an unauthorized user to cause the device to stop responding or
restart unexpectedly, disrupting...
|
5.7 Medium | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58638
microsoft windows 10 1809, microsoft windows 10 21h2 +10 lainnya
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,24% | 14 Jul 2026 |
|
CVE-2026-58637
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-58634
microsoft windows 11 26h1
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58633
microsoft windows 11 26h1
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58632
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58629
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-58628
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privil...
|
7.8 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-58627
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-58626
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 14 Jul 2026 |
|
CVE-2026-58619
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-58617
microsoft 365 copilot
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
|
9.8 Critical | — | 0,79% | 14 Jul 2026 |
|
CVE-2026-58613
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,38% | 14 Jul 2026 |
|
CVE-2026-58594
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,82% | 14 Jul 2026 |
|
CVE-2026-58547
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,41% | 14 Jul 2026 |
|
CVE-2026-58546
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 14 Jul 2026 |
|
CVE-2026-58545
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,35% | 14 Jul 2026 |
|
CVE-2026-58544
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-58543
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privilege...
|
6.3 Medium | — | 0,24% | 14 Jul 2026 |
|
CVE-2026-58542
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,36% | 14 Jul 2026 |
|
CVE-2026-58541
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58540
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-58539
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 14 Jul 2026 |
|
CVE-2026-58538
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58537
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58536
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.