Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 32 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-56193
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
|
3.3 Low | — | 0,50% | 14 Jul 2026 |
|
CVE-2026-56185
microsoft windows admin center
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,84% | 14 Jul 2026 |
|
CVE-2026-56170
microsoft .net
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-56169
microsoft windows admin center
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,75% | 14 Jul 2026 |
|
CVE-2026-56164
microsoft sharepoint server
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
|
9.8 Critical | KEV | 1,0% | 14 Jul 2026 |
|
CVE-2026-56155
microsoft windows 10 1607, microsoft windows 10 1809 +5 lainnya
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | KEV | 0,35% | 14 Jul 2026 |
|
CVE-2026-55948
microsoft 365 apps, microsoft excel +5 lainnya
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-55899
microsoft 365 apps, microsoft excel +5 lainnya
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-55144
microsoft windows 11 24h2, microsoft windows 11 25h2 +3 lainnya
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.
|
7.1 High | — | 0,23% | 14 Jul 2026 |
|
CVE-2026-55014
microsoft remote help
Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-55012
microsoft malware protection engine
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-55011
microsoft malware protection engine
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-55009
microsoft exchange server, microsoft exchange server subscription edition
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 2,5% | 14 Jul 2026 |
|
CVE-2026-55008
microsoft exchange server, microsoft exchange server subscription edition
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over...
|
9.6 Critical | — | 0,86% | 14 Jul 2026 |
|
CVE-2026-55006
microsoft exchange server, microsoft exchange server subscription edition
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-55005
microsoft exchange server, microsoft exchange server subscription edition
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
|
8.8 High | — | 1,0% | 14 Jul 2026 |
|
CVE-2026-55004
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-55003
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
|
6.5 Medium | — | 0,92% | 14 Jul 2026 |
|
CVE-2026-55002
microsoft sql server 2016, microsoft sql server 2017 +3 lainnya
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 14 Jul 2026 |
|
CVE-2026-55001
microsoft windows 10 1607, microsoft windows 10 1809 +4 lainnya
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-55000
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.4 Medium | — | 0,34% | 14 Jul 2026 |
|
CVE-2026-54999
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adja...
|
8.8 High | — | 0,41% | 14 Jul 2026 |
|
CVE-2026-54997
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-54996
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privilege...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-54995
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,79% | 14 Jul 2026 |
|
CVE-2026-54993
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-54992
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,34% | 14 Jul 2026 |
|
CVE-2026-54991
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privilege...
|
7.0 High | — | 0,21% | 14 Jul 2026 |
|
CVE-2026-54990
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 14 Jul 2026 |
|
CVE-2026-54989
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 14 Jul 2026 |
|
CVE-2026-54988
microsoft 365 apps, microsoft excel +5 lainnya
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
6.1 Medium | — | 0,46% | 14 Jul 2026 |
|
CVE-2026-54987
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-54986
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-54983
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-54982
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
|
8.8 High | — | 0,54% | 14 Jul 2026 |
|
CVE-2026-54433
roundcube webmail
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plain-text email message. The attacker-controlled Java...
|
10.0 Critical | — | 0,37% | 14 Jul 2026 |
|
CVE-2026-54432
Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The issue occurs because the attachment MIME type is not properly escaped...
|
4.7 Medium | — | 0,22% | 14 Jul 2026 |
|
CVE-2026-54132
microsoft windows 10 1607, microsoft windows 10 1809 +7 lainnya
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 14 Jul 2026 |
|
CVE-2026-54129
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 14 Jul 2026 |
|
CVE-2026-54127
microsoft windows 11 24h2, microsoft windows 11 25h2 +3 lainnya
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
|
8.4 High | — | 0,31% | 14 Jul 2026 |
|
CVE-2026-54122
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
|
8.4 High | — | 0,36% | 14 Jul 2026 |
|
CVE-2026-54119
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-54118
microsoft sql server 2016, microsoft sql server 2017 +3 lainnya
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,5% | 14 Jul 2026 |
|
CVE-2026-54117
microsoft sql server 2016, microsoft sql server 2017 +3 lainnya
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 1,5% | 14 Jul 2026 |
|
CVE-2026-54114
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-54112
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-54111
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privilege...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-54109
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-54108
microsoft sharepoint server
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
|
6.5 Medium | — | 1,1% | 14 Jul 2026 |
|
CVE-2026-54107
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,21% | 14 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.