Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 32 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-50474
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 14 Jul 2026 |
|
CVE-2026-50473
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50471
microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50470
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 14 Jul 2026 |
|
CVE-2026-50469
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 14 Jul 2026 |
|
CVE-2026-50468
microsoft sql server 2025
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 14 Jul 2026 |
|
CVE-2026-50467
microsoft 365 apps, microsoft 365 +4 lainnya
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50466
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50465
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
|
7.1 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50463
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 1,0% | 14 Jul 2026 |
|
CVE-2026-50462
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,46% | 14 Jul 2026 |
|
CVE-2026-50461
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50460
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over...
|
8.1 High | — | 0,54% | 14 Jul 2026 |
|
CVE-2026-50459
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50458
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-50457
microsoft windows 10 1809, microsoft windows 10 21h2 +6 lainnya
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-50456
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50455
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-50454
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,37% | 14 Jul 2026 |
|
CVE-2026-50453
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
|
4.6 Medium | — | 0,51% | 14 Jul 2026 |
|
CVE-2026-50452
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over...
|
8.1 High | — | 0,36% | 14 Jul 2026 |
|
CVE-2026-50451
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,31% | 14 Jul 2026 |
|
CVE-2026-50450
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-50449
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-50448
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50447
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 14 Jul 2026 |
|
CVE-2026-50445
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 14 Jul 2026 |
|
CVE-2026-50444
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,78% | 14 Jul 2026 |
|
CVE-2026-50442
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50441
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50440
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges l...
|
7.0 High | — | 0,21% | 14 Jul 2026 |
|
CVE-2026-50439
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,79% | 14 Jul 2026 |
|
CVE-2026-50438
microsoft pc manager
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | 0,37% | 14 Jul 2026 |
|
CVE-2026-50437
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-50436
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50435
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50434
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50433
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50432
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 0,95% | 14 Jul 2026 |
|
CVE-2026-50431
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50430
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50429
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
|
8.2 High | — | 1,1% | 14 Jul 2026 |
|
CVE-2026-50428
microsoft windows 11 26h1
Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,41% | 14 Jul 2026 |
|
CVE-2026-50427
microsoft windows 10 1809, microsoft windows 10 21h2 +6 lainnya
Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-50426
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.
|
6.8 Medium | — | 0,56% | 14 Jul 2026 |
|
CVE-2026-50425
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50424
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-50423
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50422
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50421
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges loca...
|
7.8 High | — | 0,33% | 14 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.