Katalog CVE (hal. 193)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 259.403 (Critical 35.986 · High 103.717 · KEV 1.747 · sejak 2020) · Pembaruan terakhir: 18 Okt 2026, 12:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 9.601–9.650 dari 259.403 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-95361 google chrome Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML...	4.3 Medium	—	0,26%	29 Sep 2026
CVE-2026-95360 google chrome Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HT...	5.3 Medium	—	0,23%	29 Sep 2026
CVE-2026-95359 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outs...	3.4 Low	—	0,25%	29 Sep 2026
CVE-2026-95358 google chrome Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged pa...	4.4 Medium	—	0,11%	29 Sep 2026
CVE-2026-95357 google chrome Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...	9.6 Critical	—	0,47%	29 Sep 2026
CVE-2026-95356 google chrome Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outsi...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95355 google chrome Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially...	8.3 High	—	0,39%	29 Sep 2026
CVE-2026-95354 google chrome Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod...	8.3 High	—	0,37%	29 Sep 2026
CVE-2026-95353 google chrome Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,41%	29 Sep 2026
CVE-2026-95352 google chrome Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a craf...	5.4 Medium	—	0,21%	29 Sep 2026
CVE-2026-95351 google chrome Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the s...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-95350 google chrome Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...	9.6 Critical	—	0,52%	29 Sep 2026
CVE-2026-95349 google chrome Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c...	9.6 Critical	—	0,51%	29 Sep 2026
CVE-2026-95348 google chrome Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary co...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-95347 google chrome Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network tr...	9.6 Critical	—	0,43%	29 Sep 2026
CVE-2026-95346 google chrome UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromium security...	4.8 Medium	—	0,30%	29 Sep 2026
CVE-2026-95345 google chrome Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,42%	29 Sep 2026
CVE-2026-95344 google chrome Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome e...	8.0 High	—	0,23%	29 Sep 2026
CVE-2026-95343 google chrome Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,52%	29 Sep 2026
CVE-2026-95342 google chrome Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security seve...	4.3 Medium	—	0,26%	29 Sep 2026
CVE-2026-95341 google chrome Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arb...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-95340 google chrome Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy vi...	4.3 Medium	—	0,26%	29 Sep 2026
CVE-2026-95339 google chrome Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (...	9.6 Critical	—	0,50%	29 Sep 2026
CVE-2026-95338 google chrome Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium...	8.8 High	—	0,38%	29 Sep 2026
CVE-2026-95337 google chrome UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI ele...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95336 google chrome Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information...	6.5 Medium	—	0,32%	29 Sep 2026
CVE-2026-95335 google chrome Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code out...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-95334 google chrome Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially exe...	8.3 High	—	0,44%	29 Sep 2026
CVE-2026-95333 google chrome Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Ch...	8.1 High	—	0,42%	29 Sep 2026
CVE-2026-95332 google chrome Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTM...	4.7 Medium	—	0,28%	29 Sep 2026
CVE-2026-95331 google chrome Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95330 google chrome Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Ch...	6.5 Medium	—	0,28%	29 Sep 2026
CVE-2026-95329 google chrome Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95328 google chrome Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via...	6.5 Medium	—	0,23%	29 Sep 2026
CVE-2026-95327 google chrome Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security...	6.5 Medium	—	0,32%	29 Sep 2026
CVE-2026-95326 google chrome Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	8.4 High	—	0,28%	29 Sep 2026
CVE-2026-95325 google chrome Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95324 google chrome Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbo...	3.4 Low	—	0,25%	29 Sep 2026
CVE-2026-95323 google chrome UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a craf...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95322 google chrome Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary c...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-95321 google chrome UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium s...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95320 google chrome Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a...	5.4 Medium	—	0,25%	29 Sep 2026
CVE-2026-95319 google chrome Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-95318 google chrome Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa...	9.6 Critical	—	0,51%	29 Sep 2026
CVE-2026-95317 google chrome Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a...	3.1 Low	—	0,21%	29 Sep 2026
CVE-2026-95316 google chrome Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security...	2.9 Low	—	0,11%	29 Sep 2026
CVE-2026-95315 google chrome Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chr...	7.8 High	—	0,14%	29 Sep 2026
CVE-2026-95314 google chrome Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrict...	8.1 High	—	0,32%	29 Sep 2026
CVE-2026-95313 google chrome Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95312 google chrome Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a...	3.1 Low	—	0,24%	29 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.