Katalog CVE (hal. 968)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 48.351–48.400 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-55044 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55043 microsoft 365 apps, microsoft 365 +4 lainnya Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55042 microsoft 365 apps, microsoft 365 +4 lainnya Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	14 Jul 2026
CVE-2026-55041 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55040 Advisory microsoft sharepoint server Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.	9.1 Critical	KEV	69,5%	14 Jul 2026
CVE-2026-55039 microsoft 365 apps, microsoft excel +5 lainnya Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55038 microsoft 365 apps, microsoft 365 +5 lainnya Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55037 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55036 microsoft 365 apps, microsoft excel +5 lainnya Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55035 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	3.3 Low	—	0,57%	14 Jul 2026
CVE-2026-55034 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	8.7 High	—	0,95%	14 Jul 2026
CVE-2026-55033 microsoft 365 apps, microsoft 365 +5 lainnya Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55032 microsoft 365 apps, microsoft 365 +5 lainnya Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	7.8 High	—	0,57%	14 Jul 2026
CVE-2026-55031 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55030 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	14 Jul 2026
CVE-2026-55029 microsoft 365 apps, microsoft excel +5 lainnya Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55028 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55027 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55026 microsoft 365 apps, microsoft 365 +5 lainnya Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,45%	14 Jul 2026
CVE-2026-55025 microsoft 365 apps, microsoft excel +5 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55024 microsoft 365 apps, microsoft excel +5 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55023 microsoft 365 apps, microsoft 365 +5 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,60%	14 Jul 2026
CVE-2026-55022 microsoft 365 apps, microsoft 365 +4 lainnya Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55021 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	8.7 High	—	0,95%	14 Jul 2026
CVE-2026-55020 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	14 Jul 2026
CVE-2026-55019 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	14 Jul 2026
CVE-2026-55018 microsoft 365 apps, microsoft 365 +4 lainnya Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55017 microsoft 365 apps, microsoft office 2016 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-55016 microsoft sharepoint server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...	5.4 Medium	—	0,58%	14 Jul 2026
CVE-2026-55010 microsoft minecraft bedrock dedicated server Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.	9.8 Critical	—	0,97%	14 Jul 2026
CVE-2026-54131 microsoft 365 apps, microsoft 365 +4 lainnya Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-54128 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.	8.4 High	—	0,36%	14 Jul 2026
CVE-2026-54126 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	14 Jul 2026
CVE-2026-54125 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-54124 microsoft terminal, microsoft windows 10 21h2 +6 lainnya Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-54121 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,78%	14 Jul 2026
CVE-2026-54116 microsoft sql server 2025 Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.	6.5 Medium	—	1,00%	14 Jul 2026
CVE-2026-54115 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50692 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.	8.8 High	—	0,33%	14 Jul 2026
CVE-2026-50690 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	14 Jul 2026
CVE-2026-50689 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-50688 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50687 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50686 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.	8.1 High	—	0,71%	14 Jul 2026
CVE-2026-50685 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.	7.5 High	—	0,66%	14 Jul 2026
CVE-2026-50684 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perf...	4.8 Medium	—	0,40%	14 Jul 2026
CVE-2026-50683 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.	8.0 High	—	0,58%	14 Jul 2026
CVE-2026-50682 microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.	7.1 High	—	0,93%	14 Jul 2026
CVE-2026-50681 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50680 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,34%	14 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.