Katalog CVE (hal. 126)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.897 (Critical 35.936 · High 103.540 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 6.251–6.300 dari 258.897 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-106427 google chrome Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a cr...	5.4 Medium	—	0,17%	6 Okt 2026
CVE-2026-106424 google chrome Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox vi...	4.0 Medium	—	0,19%	6 Okt 2026
CVE-2026-106440 Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-cont...	7.8 High	—	0,27%	6 Okt 2026
CVE-2026-106439 Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related...	8.5 High	—	0,46%	6 Okt 2026
CVE-2026-106426 google chrome Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...	8.3 High	—	0,24%	6 Okt 2026
CVE-2026-106423 google chrome Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106418 google chrome Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted n...	6.5 Medium	—	0,21%	6 Okt 2026
CVE-2026-106420 google chrome Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a craf...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106416 google chrome Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome ext...	5.4 Medium	—	0,19%	6 Okt 2026
CVE-2026-106415 google chrome Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106421 google chrome Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106419 google chrome Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p...	9.6 Critical	—	0,34%	6 Okt 2026
CVE-2026-106417 google chrome Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p...	9.6 Critical	—	0,34%	6 Okt 2026
CVE-2026-106414 google chrome Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbit...	9.6 Critical	—	0,34%	6 Okt 2026
CVE-2026-106408 google chrome Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (C...	6.5 Medium	—	0,22%	6 Okt 2026
CVE-2026-106407 google chrome Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access...	6.5 Medium	—	0,22%	6 Okt 2026
CVE-2026-106405 google chrome Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium...	6.0 Medium	—	0,07%	6 Okt 2026
CVE-2026-106413 google chrome Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HT...	4.2 Medium	—	0,14%	6 Okt 2026
CVE-2026-106410 google chrome Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a...	4.2 Medium	—	0,17%	6 Okt 2026
CVE-2026-106406 google chrome Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...	5.4 Medium	—	0,19%	6 Okt 2026
CVE-2026-106412 google chrome Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineeri...	8.3 High	—	0,24%	6 Okt 2026
CVE-2026-106411 google chrome Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106409 google chrome Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to e...	8.3 High	—	0,27%	6 Okt 2026
CVE-2026-106396 google chrome Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin po...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106397 google chrome Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restri...	6.1 Medium	—	0,17%	6 Okt 2026
CVE-2026-106404 google chrome Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access r...	6.5 Medium	—	0,22%	6 Okt 2026
CVE-2026-106403 google chrome Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolati...	8.1 High	—	0,24%	6 Okt 2026
CVE-2026-106402 google chrome Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted C...	4.8 Medium	—	0,20%	6 Okt 2026
CVE-2026-106400 google chrome Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted...	5.4 Medium	—	0,19%	6 Okt 2026
CVE-2026-106399 google chrome Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. (...	3.3 Low	—	0,10%	6 Okt 2026
CVE-2026-106401 google chrome Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,34%	6 Okt 2026
CVE-2026-106398 google chrome Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s...	4.3 Medium	—	0,19%	6 Okt 2026
CVE-2026-106389 google chrome Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	6.5 Medium	—	0,22%	6 Okt 2026
CVE-2026-106395 google chrome Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....	4.7 Medium	—	0,22%	6 Okt 2026
CVE-2026-106391 google chrome Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI e...	4.2 Medium	—	0,18%	6 Okt 2026
CVE-2026-106390 google chrome Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a craft...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106394 google chrome Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML pa...	4.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106393 google chrome Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the...	8.3 High	—	0,30%	6 Okt 2026
CVE-2026-106392 google chrome Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium se...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106388 google chrome Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive infor...	5.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106385 google chrome Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restricti...	5.3 Medium	—	0,16%	6 Okt 2026
CVE-2026-106381 google chrome Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chr...	6.5 Medium	—	0,25%	6 Okt 2026
CVE-2026-106384 google chrome Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation...	6.5 Medium	—	0,24%	6 Okt 2026
CVE-2026-106386 google chrome Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium...	6.5 Medium	—	0,27%	6 Okt 2026
CVE-2026-106379 google chrome Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security s...	4.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106387 google chrome Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106383 google chrome Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106382 google chrome Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...	9.6 Critical	—	0,40%	6 Okt 2026
CVE-2026-106380 google chrome UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (...	5.4 Medium	—	0,21%	6 Okt 2026
CVE-2026-106376 google chrome Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...	4.7 Medium	—	0,22%	6 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.