Katalog CVE (hal. 130)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.897 (Critical 35.936 · High 103.540 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 6.451–6.500 dari 258.897 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-106229 google chrome UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions vi...	5.4 Medium	—	0,24%	6 Okt 2026
CVE-2026-106228 google chrome Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary...	8.3 High	—	0,36%	6 Okt 2026
CVE-2026-106227 google chrome Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,42%	6 Okt 2026
CVE-2026-106225 google chrome Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a cr...	8.8 High	—	0,31%	6 Okt 2026
CVE-2026-106216 google chrome Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web orig...	5.4 Medium	—	0,19%	6 Okt 2026
CVE-2026-106221 google chrome Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a...	8.3 High	—	0,30%	6 Okt 2026
CVE-2026-106222 google chrome Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium s...	5.9 Medium	—	0,27%	6 Okt 2026
CVE-2026-106215 google chrome Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...	4.7 Medium	—	0,28%	6 Okt 2026
CVE-2026-106220 google chrome Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securit...	8.8 High	—	0,32%	6 Okt 2026
CVE-2026-106217 google chrome Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data...	4.3 Medium	—	0,24%	6 Okt 2026
CVE-2026-106208 google chrome Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted C...	6.1 Medium	—	0,24%	6 Okt 2026
CVE-2026-106210 google chrome Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium s...	3.1 Low	—	0,21%	6 Okt 2026
CVE-2026-106214 google chrome Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic....	5.3 Medium	—	0,15%	6 Okt 2026
CVE-2026-106213 google chrome Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium secu...	4.3 Medium	—	0,21%	6 Okt 2026
CVE-2026-106212 google chrome Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106211 google chrome Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside t...	9.6 Critical	—	0,46%	6 Okt 2026
CVE-2026-106209 google chrome UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafte...	5.4 Medium	—	0,26%	6 Okt 2026
CVE-2026-106207 google chrome Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,33%	6 Okt 2026
CVE-2026-106199 google chrome Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially b...	8.2 High	—	0,25%	6 Okt 2026
CVE-2026-106198 google chrome Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy...	8.2 High	—	0,26%	6 Okt 2026
CVE-2026-106205 google chrome Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...	8.1 High	—	0,29%	6 Okt 2026
CVE-2026-106202 google chrome Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...	4.7 Medium	—	0,27%	6 Okt 2026
CVE-2026-106206 google chrome Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffi...	5.9 Medium	—	0,30%	6 Okt 2026
CVE-2026-106204 google chrome Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium sec...	8.8 High	—	0,35%	6 Okt 2026
CVE-2026-106203 google chrome Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information v...	8.8 High	—	0,35%	6 Okt 2026
CVE-2026-106201 google chrome Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,29%	6 Okt 2026
CVE-2026-106200 google chrome Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,38%	6 Okt 2026
CVE-2026-106196 google chrome Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a c...	7.6 High	—	0,25%	6 Okt 2026
CVE-2026-106195 google chrome Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network...	9.1 Critical	—	0,31%	6 Okt 2026
CVE-2026-106197 google chrome Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi...	9.6 Critical	—	0,45%	6 Okt 2026
CVE-2026-106194 google chrome Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social en...	8.3 High	—	0,38%	6 Okt 2026
CVE-2026-106193 google chrome Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,38%	6 Okt 2026
CVE-2026-106192 google chrome Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium secur...	4.6 Medium	—	0,13%	6 Okt 2026
CVE-2026-106191 google chrome Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary...	8.3 High	—	0,36%	6 Okt 2026
CVE-2026-106190 google chrome Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,36%	6 Okt 2026
CVE-2026-106189 google chrome Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a c...	7.3 High	—	0,28%	6 Okt 2026
CVE-2026-106188 google chrome Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via...	7.1 High	—	0,22%	6 Okt 2026
CVE-2026-106185 google chrome Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restri...	6.5 Medium	—	0,27%	6 Okt 2026
CVE-2026-106187 google chrome Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a...	4.2 Medium	—	0,20%	6 Okt 2026
CVE-2026-106184 google chrome Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,27%	6 Okt 2026
CVE-2026-106186 google chrome Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary cod...	8.6 High	—	0,15%	6 Okt 2026
CVE-2026-106183 google chrome Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network tr...	5.9 Medium	—	0,27%	6 Okt 2026
CVE-2026-106182 google chrome UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity:...	5.4 Medium	—	0,24%	6 Okt 2026
CVE-2026-106181 google chrome Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive...	5.3 Medium	—	0,30%	6 Okt 2026
CVE-2026-106180 google chrome Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Ch...	3.1 Low	—	0,22%	6 Okt 2026
CVE-2026-106179 google chrome UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security...	5.4 Medium	—	0,24%	6 Okt 2026
CVE-2026-106123 vmware rabbitmq java client The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.loa...	5.5 Medium	—	0,16%	6 Okt 2026
CVE-2026-106122 vmware rabbitmq java client The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes...	7.5 High	—	0,48%	6 Okt 2026
CVE-2026-106121 vmware rabbitmq java client The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReade...	7.5 High	—	0,50%	6 Okt 2026
CVE-2026-106120 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnly does not consistently restrict inherited ar...	6.0 Medium	—	0,35%	6 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.