Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 32 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-54058
python pillow
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-control...
|
9.1 Critical | — | 0,52% | 14 Jul 2026 |
|
CVE-2026-50697
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-50696
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-50695
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-50694
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,79% | 14 Jul 2026 |
|
CVE-2026-50678
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
|
3.3 Low | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50675
microsoft 365 apps, microsoft excel +5 lainnya
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50663
microsoft age of empires ii
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,94% | 14 Jul 2026 |
|
CVE-2026-50653
microsoft .net framework, microsoft azure active directory
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-50652
microsoft .net framework, microsoft azure active directory
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,7% | 14 Jul 2026 |
|
CVE-2026-50522
microsoft sharepoint server
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | KEV | 3,0% | 14 Jul 2026 |
|
CVE-2026-50520
microsoft visual studio code
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.
|
8.4 High | — | 0,35% | 14 Jul 2026 |
|
CVE-2026-50506
microsoft asp.net core odata, microsoft odata web api
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-50384
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges lo...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-50381
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-50364
microsoft windows 10 21h2, microsoft windows 10 22h2 +3 lainnya
Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.
|
7.3 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50356
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privil...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-50354
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.1 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50351
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50350
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50342
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
8.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50338
microsoft azure spring cloud
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
|
8.2 High | — | 0,52% | 14 Jul 2026 |
|
CVE-2026-50333
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50325
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,24% | 14 Jul 2026 |
|
CVE-2026-50323
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-50318
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-50316
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-50311
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50308
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
|
CVE-2026-50303
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,27% | 14 Jul 2026 |
|
CVE-2026-50300
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-50299
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
|
6.8 Medium | — | 0,44% | 14 Jul 2026 |
|
CVE-2026-50298
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.8 Medium | — | 0,44% | 14 Jul 2026 |
|
CVE-2026-50297
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,24% | 14 Jul 2026 |
|
CVE-2026-50296
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-50295
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
|
5.5 Medium | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-50294
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
|
6.2 Medium | — | 0,51% | 14 Jul 2026 |
|
CVE-2026-50293
microsoft windows 10 21h2, microsoft windows 10 22h2 +4 lainnya
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-49808
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-49807
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
|
6.2 Medium | — | 0,51% | 14 Jul 2026 |
|
CVE-2026-49806
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privilege...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-49805
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,24% | 14 Jul 2026 |
|
CVE-2026-49804
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
6.6 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-49803
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate pr...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-49802
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privilege...
|
7.0 High | — | 0,20% | 14 Jul 2026 |
|
CVE-2026-49801
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,40% | 14 Jul 2026 |
|
CVE-2026-49800
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-49799
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
|
6.5 Medium | — | 1,1% | 14 Jul 2026 |
|
CVE-2026-49798
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
|
9.3 Critical | — | 0,36% | 14 Jul 2026 |
|
CVE-2026-49797
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,47% | 14 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.