Katalog CVE (hal. 129)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.897 (Critical 35.936 · High 103.540 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 6.401–6.450 dari 258.897 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-106277 google chrome Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve...	4.3 Medium	—	0,20%	6 Okt 2026
CVE-2026-106276 google chrome UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML p...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106274 google chrome Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive in...	8.8 High	—	0,28%	6 Okt 2026
CVE-2026-106267 google chrome Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a...	6.5 Medium	—	0,20%	6 Okt 2026
CVE-2026-106266 google chrome Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106271 google chrome Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a...	8.1 High	—	0,23%	6 Okt 2026
CVE-2026-106273 google chrome Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sand...	4.7 Medium	—	0,21%	6 Okt 2026
CVE-2026-106270 google chrome Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium securi...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106272 google chrome UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI e...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106269 google chrome Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106268 google chrome Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,38%	6 Okt 2026
CVE-2026-106261 google chrome Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium sec...	6.5 Medium	—	0,25%	6 Okt 2026
CVE-2026-106263 google chrome Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions v...	6.5 Medium	—	0,21%	6 Okt 2026
CVE-2026-106259 google chrome Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML pag...	5.4 Medium	—	0,17%	6 Okt 2026
CVE-2026-106264 google chrome Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafte...	5.4 Medium	—	0,23%	6 Okt 2026
CVE-2026-106262 google chrome Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social enginee...	4.2 Medium	—	0,19%	6 Okt 2026
CVE-2026-106258 google chrome Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...	4.7 Medium	—	0,22%	6 Okt 2026
CVE-2026-106265 google chrome UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page....	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106260 google chrome Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafte...	4.3 Medium	—	0,19%	6 Okt 2026
CVE-2026-106253 google chrome Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chrom...	4.3 Medium	—	0,18%	6 Okt 2026
CVE-2026-106250 google chrome Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	5.4 Medium	—	0,17%	6 Okt 2026
CVE-2026-106257 google chrome Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106256 google chrome Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informatio...	8.8 High	—	0,25%	6 Okt 2026
CVE-2026-106255 google chrome Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (...	8.8 High	—	0,24%	6 Okt 2026
CVE-2026-106254 google chrome Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromiu...	5.1 Medium	—	0,09%	6 Okt 2026
CVE-2026-106252 google chrome Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106251 google chrome UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via craf...	5.4 Medium	—	0,18%	6 Okt 2026
CVE-2026-106246 google chrome Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security seve...	5.4 Medium	—	0,20%	6 Okt 2026
CVE-2026-106245 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,22%	6 Okt 2026
CVE-2026-106244 google chrome Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic....	6.5 Medium	—	0,18%	6 Okt 2026
CVE-2026-106242 google chrome Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information vi...	6.5 Medium	—	0,23%	6 Okt 2026
CVE-2026-106249 google chrome Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML pag...	8.8 High	—	0,24%	6 Okt 2026
CVE-2026-106248 google chrome Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,30%	6 Okt 2026
CVE-2026-106247 google chrome Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code...	8.3 High	—	0,33%	6 Okt 2026
CVE-2026-106243 google chrome Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromi...	5.3 Medium	—	0,11%	6 Okt 2026
CVE-2026-106241 google chrome Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arb...	9.6 Critical	—	0,33%	6 Okt 2026
CVE-2026-106237 google chrome Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security sev...	9.6 Critical	—	0,25%	6 Okt 2026
CVE-2026-106240 google chrome Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,44%	6 Okt 2026
CVE-2026-106239 google chrome Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...	9.6 Critical	—	0,42%	6 Okt 2026
CVE-2026-106238 google chrome Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code o...	8.3 High	—	0,30%	6 Okt 2026
CVE-2026-106236 google chrome UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via...	5.4 Medium	—	0,22%	6 Okt 2026
CVE-2026-106235 google chrome Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,38%	6 Okt 2026
CVE-2026-106234 google chrome Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside th...	9.6 Critical	—	0,31%	6 Okt 2026
CVE-2026-106233 google chrome Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the...	8.3 High	—	0,37%	6 Okt 2026
CVE-2026-106232 google chrome UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa...	5.4 Medium	—	0,24%	6 Okt 2026
CVE-2026-106231 google chrome Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Ch...	4.7 Medium	—	0,27%	6 Okt 2026
CVE-2026-106226 google chrome Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar v...	4.2 Medium	—	0,22%	6 Okt 2026
CVE-2026-106224 google chrome Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin dat...	3.1 Low	—	0,21%	6 Okt 2026
CVE-2026-106223 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....	4.7 Medium	—	0,28%	6 Okt 2026
CVE-2026-106230 google chrome Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obta...	5.3 Medium	—	0,29%	6 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.