Katalog CVE (hal. 127)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.897 (Critical 35.936 · High 103.540 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 6.301–6.350 dari 258.897 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-106370 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outs...	4.7 Medium	—	0,22%	6 Okt 2026
CVE-2026-106378 google chrome Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary c...	8.3 High	—	0,32%	6 Okt 2026
CVE-2026-106377 google chrome Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the s...	8.3 High	—	0,26%	6 Okt 2026
CVE-2026-106375 google chrome Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML...	9.6 Critical	—	0,40%	6 Okt 2026
CVE-2026-106374 google chrome Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,36%	6 Okt 2026
CVE-2026-106373 google chrome Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106372 google chrome Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HT...	9.6 Critical	—	0,36%	6 Okt 2026
CVE-2026-106371 google chrome Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a cra...	8.8 High	—	0,24%	6 Okt 2026
CVE-2026-106366 google chrome Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chr...	5.4 Medium	—	0,22%	6 Okt 2026
CVE-2026-106369 google chrome Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via...	4.2 Medium	—	0,16%	6 Okt 2026
CVE-2026-106365 google chrome Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	6.5 Medium	—	0,25%	6 Okt 2026
CVE-2026-106362 google chrome Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafte...	6.5 Medium	—	0,28%	6 Okt 2026
CVE-2026-106363 google chrome Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engine...	8.3 High	—	0,30%	6 Okt 2026
CVE-2026-106361 google chrome Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypa...	6.5 Medium	—	0,29%	6 Okt 2026
CVE-2026-106367 google chrome Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitr...	8.4 High	—	0,09%	6 Okt 2026
CVE-2026-106368 google chrome UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium securit...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106364 google chrome Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive informat...	5.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106359 google chrome Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (C...	4.3 Medium	—	0,26%	6 Okt 2026
CVE-2026-106353 google chrome Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106356 google chrome Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromiu...	5.4 Medium	—	0,25%	6 Okt 2026
CVE-2026-106354 google chrome Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106360 google chrome Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security sev...	4.3 Medium	—	0,26%	6 Okt 2026
CVE-2026-106358 google chrome Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...	9.6 Critical	—	0,50%	6 Okt 2026
CVE-2026-106357 google chrome Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,52%	6 Okt 2026
CVE-2026-106355 google chrome Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitiv...	5.3 Medium	—	0,27%	6 Okt 2026
CVE-2026-106352 google chrome Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via...	8.8 High	—	0,34%	6 Okt 2026
CVE-2026-106348 google chrome Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security...	6.5 Medium	—	0,26%	6 Okt 2026
CVE-2026-106345 google chrome Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a...	4.2 Medium	—	0,19%	6 Okt 2026
CVE-2026-106351 google chrome Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sens...	5.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106350 google chrome Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium se...	8.8 High	—	0,28%	6 Okt 2026
CVE-2026-106349 google chrome Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106347 google chrome Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,35%	6 Okt 2026
CVE-2026-106346 google chrome Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106344 google chrome Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engin...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106343 google chrome Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Ch...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106339 google chrome Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-or...	3.1 Low	—	0,18%	6 Okt 2026
CVE-2026-106338 google chrome UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Ch...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106342 google chrome Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security...	8.8 High	—	0,28%	6 Okt 2026
CVE-2026-106341 google chrome Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (...	8.8 High	—	0,34%	6 Okt 2026
CVE-2026-106340 google chrome Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical ac...	4.6 Medium	—	0,11%	6 Okt 2026
CVE-2026-106337 google chrome UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium securit...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106336 google chrome Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106327 google chrome Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restric...	6.1 Medium	—	0,19%	6 Okt 2026
CVE-2026-106331 google chrome Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106333 google chrome Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML p...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106332 google chrome Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,21%	6 Okt 2026
CVE-2026-106330 google chrome Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security seve...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106335 google chrome Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106334 google chrome Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted...	8.8 High	—	0,28%	6 Okt 2026
CVE-2026-106329 google chrome Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary cod...	9.6 Critical	—	0,36%	6 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.