Katalog CVE (hal. 971)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 48.501–48.550 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-50420 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,41%	14 Jul 2026
CVE-2026-50419 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.	3.3 Low	—	0,46%	14 Jul 2026
CVE-2026-50418 microsoft windows 11 24h2, microsoft windows 11 25h2 +3 lainnya Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.	6.1 Medium	—	0,27%	14 Jul 2026
CVE-2026-50417 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50416 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.	3.3 Low	—	0,46%	14 Jul 2026
CVE-2026-50415 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.	7.5 High	—	0,86%	14 Jul 2026
CVE-2026-50414 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a ne...	8.8 High	—	0,57%	14 Jul 2026
CVE-2026-50413 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50412 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50411 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	14 Jul 2026
CVE-2026-50410 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	14 Jul 2026
CVE-2026-50409 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50408 microsoft 365 apps, microsoft excel +5 lainnya Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	5.5 Medium	—	0,54%	14 Jul 2026
CVE-2026-50407 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50406 microsoft windows 10 21h2, microsoft windows 10 22h2 +3 lainnya Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50405 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50404 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50403 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50402 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50401 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	14 Jul 2026
CVE-2026-50400 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50399 microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50398 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a ne...	7.5 High	—	0,57%	14 Jul 2026
CVE-2026-50397 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	14 Jul 2026
CVE-2026-50396 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50394 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50393 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50392 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	14 Jul 2026
CVE-2026-50391 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50390 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50389 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50388 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50387 microsoft 365 copilot, microsoft 365 +14 lainnya Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50386 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50385 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...	8.8 High	—	0,26%	14 Jul 2026
CVE-2026-50383 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	14 Jul 2026
CVE-2026-50382 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.	8.8 High	—	0,33%	14 Jul 2026
CVE-2026-50380 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.	9.6 Critical	—	0,82%	14 Jul 2026
CVE-2026-50379 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a ne...	7.5 High	—	0,51%	14 Jul 2026
CVE-2026-50378 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges local...	7.0 High	—	0,21%	14 Jul 2026
CVE-2026-50377 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,41%	14 Jul 2026
CVE-2026-50376 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	14 Jul 2026
CVE-2026-50375 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50374 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack.	6.8 Medium	—	0,35%	14 Jul 2026
CVE-2026-50373 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50372 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,26%	14 Jul 2026
CVE-2026-50371 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50370 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.	8.8 High	—	0,50%	14 Jul 2026
CVE-2026-50369 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,70%	14 Jul 2026
CVE-2026-50368 microsoft windows 10 1607, microsoft windows 10 1809 +6 lainnya Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	14 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.