Katalog CVE (hal. 969)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 48.401–48.450 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-50679 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50677 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Use after free in Windows Media allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-50676 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,21%	14 Jul 2026
CVE-2026-50674 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50673 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,21%	14 Jul 2026
CVE-2026-50672 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50670 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50669 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileg...	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50668 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.	6.8 Medium	—	0,44%	14 Jul 2026
CVE-2026-50667 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,21%	14 Jul 2026
CVE-2026-50666 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,91%	14 Jul 2026
CVE-2026-50665 microsoft 365 apps, microsoft 365 +4 lainnya Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.	3.3 Low	—	0,51%	14 Jul 2026
CVE-2026-50661 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.	4.6 Medium	—	0,48%	14 Jul 2026
CVE-2026-50658 microsoft defender for endpoint Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50657 microsoft defender for endpoint Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	14 Jul 2026
CVE-2026-50655 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50647 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	14 Jul 2026
CVE-2026-50518 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.	9.8 Critical	—	0,97%	14 Jul 2026
CVE-2026-50510 microsoft github copilot Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.	7.8 High	—	0,36%	14 Jul 2026
CVE-2026-50509 microsoft windows 10 1607, microsoft windows 10 1809 +8 lainnya Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	3,5%	14 Jul 2026
CVE-2026-50505 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network.	8.8 High	—	0,74%	14 Jul 2026
CVE-2026-50504 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.	7.5 High	—	0,92%	14 Jul 2026
CVE-2026-50503 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50502 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.	8.8 High	—	0,65%	14 Jul 2026
CVE-2026-50501 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.	7.8 High	—	0,36%	14 Jul 2026
CVE-2026-50500 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,74%	14 Jul 2026
CVE-2026-50499 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50498 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	7.8 High	—	0,36%	14 Jul 2026
CVE-2026-50497 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.	7.5 High	—	0,92%	14 Jul 2026
CVE-2026-50496 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.	7.5 High	—	1,2%	14 Jul 2026
CVE-2026-50495 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.	5.5 Medium	—	0,30%	14 Jul 2026
CVE-2026-50494 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50493 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50492 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.	6.8 Medium	—	0,44%	14 Jul 2026
CVE-2026-50491 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50490 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50489 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50488 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges...	7.8 High	—	0,32%	14 Jul 2026
CVE-2026-50487 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.	9.8 Critical	—	0,79%	14 Jul 2026
CVE-2026-50486 microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50485 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.	5.7 Medium	—	0,66%	14 Jul 2026
CVE-2026-50484 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50483 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50482 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.	7.8 High	—	0,36%	14 Jul 2026
CVE-2026-50480 microsoft windows 10 1607, microsoft windows server 2012 +1 lainnya Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50479 microsoft windows 10 1809, microsoft windows 10 21h2 +4 lainnya Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50478 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50477 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50476 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50475 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,38%	14 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.