Katalog CVE (hal. 128)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.897 (Critical 35.936 · High 103.540 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 6.351–6.400 dari 258.897 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-106328 google chrome Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive informatio...	5.9 Medium	—	0,17%	6 Okt 2026
CVE-2026-106322 google chrome Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTM...	6.1 Medium	—	0,19%	6 Okt 2026
CVE-2026-106326 google chrome Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-...	4.4 Medium	—	0,08%	6 Okt 2026
CVE-2026-106324 google chrome Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a craft...	6.1 Medium	—	0,18%	6 Okt 2026
CVE-2026-106321 google chrome Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HT...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106320 google chrome Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a craft...	4.2 Medium	—	0,18%	6 Okt 2026
CVE-2026-106325 google chrome Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a cra...	4.3 Medium	—	0,23%	6 Okt 2026
CVE-2026-106323 google chrome Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute a...	9.6 Critical	—	0,33%	6 Okt 2026
CVE-2026-106318 google chrome Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106317 google chrome UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106311 google chrome Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML...	5.4 Medium	—	0,19%	6 Okt 2026
CVE-2026-106310 google chrome Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin pol...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106316 google chrome UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via craf...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106315 google chrome Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106314 google chrome Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium...	8.8 High	—	0,24%	6 Okt 2026
CVE-2026-106313 google chrome Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive inform...	5.1 Medium	—	0,09%	6 Okt 2026
CVE-2026-106312 google chrome Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craf...	6.5 Medium	—	0,22%	6 Okt 2026
CVE-2026-106309 google chrome Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page....	8.8 High	—	0,24%	6 Okt 2026
CVE-2026-106308 google chrome Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensiti...	8.8 High	—	0,28%	6 Okt 2026
CVE-2026-106307 google chrome Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access rest...	6.5 Medium	—	0,22%	6 Okt 2026
CVE-2026-106306 google chrome Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. (Chromi...	5.4 Medium	—	0,14%	6 Okt 2026
CVE-2026-106301 google chrome Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access res...	8.1 High	—	0,24%	6 Okt 2026
CVE-2026-106304 google chrome Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium securi...	4.7 Medium	—	0,20%	6 Okt 2026
CVE-2026-106300 google chrome Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandb...	4.7 Medium	—	0,16%	6 Okt 2026
CVE-2026-106305 google chrome UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium sec...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106303 google chrome Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engi...	5.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106302 google chrome UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...	5.4 Medium	—	0,21%	6 Okt 2026
CVE-2026-106297 google chrome Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium sec...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106294 google chrome Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traf...	9.1 Critical	—	0,31%	6 Okt 2026
CVE-2026-106299 google chrome Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access r...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106296 google chrome Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access rest...	5.4 Medium	—	0,17%	6 Okt 2026
CVE-2026-106295 google chrome Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elemen...	4.2 Medium	—	0,17%	6 Okt 2026
CVE-2026-106298 google chrome Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...	9.6 Critical	—	0,34%	6 Okt 2026
CVE-2026-106293 google chrome Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code o...	8.3 High	—	0,32%	6 Okt 2026
CVE-2026-106292 google chrome Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code...	8.3 High	—	0,33%	6 Okt 2026
CVE-2026-106287 google chrome Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security sev...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106286 google chrome Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security s...	6.5 Medium	—	0,21%	6 Okt 2026
CVE-2026-106289 google chrome Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security s...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106288 google chrome Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106290 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outs...	4.7 Medium	—	0,22%	6 Okt 2026
CVE-2026-106284 google chrome Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged soci...	4.7 Medium	—	0,20%	6 Okt 2026
CVE-2026-106291 google chrome Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106285 google chrome UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restriction...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106283 google chrome Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside t...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106280 google chrome Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106275 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....	4.7 Medium	—	0,22%	6 Okt 2026
CVE-2026-106282 google chrome UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106281 google chrome Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page...	9.6 Critical	—	0,34%	6 Okt 2026
CVE-2026-106279 google chrome Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potenti...	7.4 High	—	0,09%	6 Okt 2026
CVE-2026-106278 google chrome Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via...	8.8 High	—	0,30%	6 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.