Katalog CVE (hal. 194)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 259.409 (Critical 35.985 · High 103.719 · KEV 1.747 · sejak 2020) · Pembaruan terakhir: 18 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 9.651–9.700 dari 259.409 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-95317 google chrome Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a...	3.1 Low	—	0,21%	29 Sep 2026
CVE-2026-95316 google chrome Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security...	2.9 Low	—	0,11%	29 Sep 2026
CVE-2026-95315 google chrome Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chr...	7.8 High	—	0,14%	29 Sep 2026
CVE-2026-95314 google chrome Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrict...	8.1 High	—	0,32%	29 Sep 2026
CVE-2026-95313 google chrome Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95312 google chrome Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a...	3.1 Low	—	0,24%	29 Sep 2026
CVE-2026-95311 google chrome Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code out...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95310 google chrome Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95309 google chrome UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium securit...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95308 google chrome Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside...	3.4 Low	—	0,23%	29 Sep 2026
CVE-2026-95307 google chrome UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95306 google chrome Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,45%	29 Sep 2026
CVE-2026-95305 google chrome UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted networ...	4.8 Medium	—	0,26%	29 Sep 2026
CVE-2026-95304 google chrome Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...	8.8 High	—	0,46%	29 Sep 2026
CVE-2026-95303 google chrome Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	6.5 Medium	—	0,37%	29 Sep 2026
CVE-2026-95302 google chrome Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chr...	2.9 Low	—	0,11%	29 Sep 2026
CVE-2026-95301 google chrome Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi...	8.1 High	—	0,32%	29 Sep 2026
CVE-2026-95300 google chrome Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via...	4.8 Medium	—	0,24%	29 Sep 2026
CVE-2026-95299 google chrome Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95298 google chrome Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (...	7.8 High	—	0,17%	29 Sep 2026
CVE-2026-95297 google chrome Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium...	6.5 Medium	—	0,30%	29 Sep 2026
CVE-2026-95296 google chrome Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a...	4.3 Medium	—	0,25%	29 Sep 2026
CVE-2026-95295 google chrome Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chromium securit...	4.6 Medium	—	0,13%	29 Sep 2026
CVE-2026-95294 google chrome UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95293 google chrome Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium secu...	4.7 Medium	—	0,28%	29 Sep 2026
CVE-2026-95292 google chrome Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic...	4.8 Medium	—	0,21%	29 Sep 2026
CVE-2026-95291 google chrome UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chro...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95290 google chrome Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictio...	5.4 Medium	—	0,22%	29 Sep 2026
CVE-2026-95289 google chrome Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafte...	4.3 Medium	—	0,25%	29 Sep 2026
CVE-2026-95288 google chrome UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium securit...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95287 google chrome Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi...	5.4 Medium	—	0,22%	29 Sep 2026
CVE-2026-95286 google chrome Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,45%	29 Sep 2026
CVE-2026-95285 google chrome Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web or...	8.4 High	—	0,23%	29 Sep 2026
CVE-2026-95284 google chrome Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...	9.6 Critical	—	0,51%	29 Sep 2026
CVE-2026-95283 google chrome Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr...	9.6 Critical	—	0,51%	29 Sep 2026
CVE-2026-95282 google chrome Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,42%	29 Sep 2026
CVE-2026-95281 google chrome Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...	9.6 Critical	—	0,51%	29 Sep 2026
CVE-2026-95280 google chrome Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	7.5 High	—	0,29%	29 Sep 2026
CVE-2026-95279 google chrome UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium se...	5.4 Medium	—	0,26%	29 Sep 2026
CVE-2026-95278 google chrome Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restr...	8.4 High	—	0,22%	29 Sep 2026
CVE-2026-95277 google chrome Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...	9.6 Critical	—	0,46%	29 Sep 2026
CVE-2026-95276 google chrome Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbi...	8.3 High	—	0,47%	29 Sep 2026
CVE-2026-95275 google chrome Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a c...	6.5 Medium	—	0,33%	29 Sep 2026
CVE-2026-95274 google chrome Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arb...	8.3 High	—	0,40%	29 Sep 2026
CVE-2026-94954 A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the rout...	8.8 High	—	0,33%	29 Sep 2026
CVE-2026-84842 ibm guardium data protection IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exp...	8.1 High	—	0,39%	29 Sep 2026
CVE-2026-84440 ibm guardium data protection IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy aler...	8.8 High	—	0,74%	29 Sep 2026
CVE-2026-84436 ibm guardium data protection IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute...	9.1 Critical	—	0,68%	29 Sep 2026
CVE-2026-84422 ibm guardium data protection IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged C...	7.2 High	—	0,68%	29 Sep 2026
CVE-2026-84421 ibm datastage on cloud pak for data IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extra...	8.8 High	—	0,57%	29 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.