Katalog CVE (hal. 967)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 48.301–48.350 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-56178 microsoft defender for endpoint Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,23%	14 Jul 2026
CVE-2026-56176 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-56175 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-56173 microsoft windows 10 1809, microsoft windows 10 21h2 +8 lainnya Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	14 Jul 2026
CVE-2026-56168 microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.	6.5 Medium	—	1,1%	14 Jul 2026
CVE-2026-56159 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.	9.8 Critical	—	0,97%	14 Jul 2026
CVE-2026-56157 microsoft sharepoint server Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	5.4 Medium	—	0,50%	14 Jul 2026
CVE-2026-56156 microsoft 365 apps, microsoft 365 +2 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55949 microsoft 365 apps, microsoft excel +5 lainnya Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55947 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55944 microsoft dynamics nav Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.	9.8 Critical	—	1,5%	14 Jul 2026
CVE-2026-55898 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	7.1 High	—	0,47%	14 Jul 2026
CVE-2026-55145 microsoft copilot Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.	7.1 High	—	0,53%	14 Jul 2026
CVE-2026-55142 microsoft 365 apps, microsoft 365 +5 lainnya Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55141 microsoft 365 apps, microsoft excel +5 lainnya Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55140 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55139 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	3.3 Low	—	0,48%	14 Jul 2026
CVE-2026-55138 microsoft 365 apps, microsoft excel +5 lainnya Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	14 Jul 2026
CVE-2026-55137 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55136 microsoft 365 apps, microsoft excel +5 lainnya Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55135 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	14 Jul 2026
CVE-2026-55134 microsoft 365 apps, microsoft 365 +5 lainnya Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55133 microsoft 365 apps, microsoft 365 +2 lainnya Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55132 microsoft 365 apps, microsoft 365 +5 lainnya Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55131 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55130 microsoft 365 apps, microsoft office 2019 +4 lainnya Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55129 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55128 microsoft 365 apps, microsoft 365 +6 lainnya Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55127 microsoft 365 apps, microsoft 365 +6 lainnya Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55126 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,65%	14 Jul 2026
CVE-2026-55125 microsoft 365 apps, microsoft 365 +5 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55124 microsoft 365 apps, microsoft 365 +6 lainnya Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55123 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55122 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	7.1 High	—	0,53%	14 Jul 2026
CVE-2026-55121 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,51%	14 Jul 2026
CVE-2026-55120 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55058 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55057 microsoft 365 apps, microsoft 365 +4 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	14 Jul 2026
CVE-2026-55056 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55055 microsoft 365 apps, microsoft 365 +5 lainnya Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55054 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	14 Jul 2026
CVE-2026-55053 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55052 microsoft sharepoint server Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,94%	14 Jul 2026
CVE-2026-55051 microsoft sharepoint server Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.	6.5 Medium	—	0,91%	14 Jul 2026
CVE-2026-55050 microsoft 365 apps, microsoft 365 +6 lainnya Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55049 microsoft 365 apps, microsoft office 2016 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55048 microsoft 365 apps, microsoft excel +5 lainnya Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55047 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55046 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	14 Jul 2026
CVE-2026-55045 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.	8.4 High	—	0,45%	14 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.