Katalog CVE (hal. 972)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 48.551–48.600 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-50367 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50366 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.	6.5 Medium	—	1,1%	14 Jul 2026
CVE-2026-50365 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.	8.0 High	—	0,54%	14 Jul 2026
CVE-2026-50363 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50362 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50361 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-50360 microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,78%	14 Jul 2026
CVE-2026-50359 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50358 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Use after free in Windows Media allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50357 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50355 microsoft windows 10 1607, microsoft windows 10 1809 +6 lainnya Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	14 Jul 2026
CVE-2026-50353 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50352 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50348 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over...	8.1 High	—	0,36%	14 Jul 2026
CVE-2026-50347 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50346 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50345 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50344 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50343 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50341 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,40%	14 Jul 2026
CVE-2026-50340 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network.	8.8 High	—	0,74%	14 Jul 2026
CVE-2026-50339 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50337 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50336 microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50335 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,30%	14 Jul 2026
CVE-2026-50334 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.	5.5 Medium	—	0,48%	14 Jul 2026
CVE-2026-50332 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50331 microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50330 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.	9.8 Critical	—	1,3%	14 Jul 2026
CVE-2026-50329 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50328 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.	7.5 High	—	1,2%	14 Jul 2026
CVE-2026-50327 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50326 microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50324 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.	5.9 Medium	—	0,86%	14 Jul 2026
CVE-2026-50322 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...	7.0 High	—	0,20%	14 Jul 2026
CVE-2026-50321 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges loca...	7.0 High	—	0,21%	14 Jul 2026
CVE-2026-50317 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileg...	7.0 High	—	0,21%	14 Jul 2026
CVE-2026-50315 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50314 microsoft 365 apps, microsoft 365 +4 lainnya Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50313 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-50312 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,35%	14 Jul 2026
CVE-2026-50310 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.	4.7 Medium	—	0,31%	14 Jul 2026
CVE-2026-50309 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50307 microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,28%	14 Jul 2026
CVE-2026-50306 microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,33%	14 Jul 2026
CVE-2026-50305 microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-50304 microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	14 Jul 2026
CVE-2026-50302 microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.	6.5 Medium	—	0,33%	14 Jul 2026
CVE-2026-50301 microsoft 365 apps, microsoft office 2016 +3 lainnya Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	7.8 High	—	0,47%	14 Jul 2026
CVE-2026-4018 TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to caus...	6.4 Medium	—	0,10%	14 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.