Katalog CVE (hal. 373)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.314 (Critical 36.225 · High 104.856 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 22 Okt 2026, 06:31 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 18.601–18.650 dari 262.314 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-57006 google android In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed....	4.4 Medium	—	0,10%	15 Sep 2026
CVE-2026-56997 google android In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with n...	8.8 High	—	0,37%	15 Sep 2026
CVE-2026-56992 google android In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges neede...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56989 google android In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56988 google android In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execut...	6.4 Medium	—	0,07%	15 Sep 2026
CVE-2026-56986 google android In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges...	8.4 High	—	0,10%	15 Sep 2026
CVE-2026-56985 google android In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privi...	8.4 High	—	0,10%	15 Sep 2026
CVE-2026-56982 google android In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed....	7.8 High	—	0,10%	15 Sep 2026
CVE-2026-56979 google android In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution priv...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56978 google android In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no add...	8.4 High	—	0,10%	15 Sep 2026
CVE-2026-56975 google android In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additio...	6.5 Medium	—	0,15%	15 Sep 2026
CVE-2026-56974 google android In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no add...	8.8 High	—	0,37%	15 Sep 2026
CVE-2026-56973 google android In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System executio...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56972 google android In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pr...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56970 google android In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execut...	8.4 High	—	0,10%	15 Sep 2026
CVE-2026-56967 google android In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional...	8.0 High	—	0,17%	15 Sep 2026
CVE-2026-56964 google android In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede...	6.4 Medium	—	0,07%	15 Sep 2026
CVE-2026-56960 google android In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution...	9.8 Critical	—	0,40%	15 Sep 2026
CVE-2026-56958 google android In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with n...	5.5 Medium	—	0,09%	15 Sep 2026
CVE-2026-56950 google android In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with Syst...	4.4 Medium	—	0,09%	15 Sep 2026
CVE-2026-56945 google android In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed....	7.8 High	—	0,09%	15 Sep 2026
CVE-2026-56942 google android In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no add...	8.8 High	—	0,37%	15 Sep 2026
CVE-2026-56941 google android In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no addi...	8.4 High	—	0,11%	15 Sep 2026
CVE-2026-56932 google android In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System exe...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56923 google android In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no addition...	6.4 Medium	—	0,07%	15 Sep 2026
CVE-2026-56922 google android In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User int...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56920 google android In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no...	8.8 High	—	0,39%	15 Sep 2026
CVE-2026-56915 google android In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System executi...	6.4 Medium	—	0,07%	15 Sep 2026
CVE-2026-56914 google android In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privilege...	8.4 High	—	0,08%	15 Sep 2026
CVE-2026-56907 google android In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges ne...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56892 google android In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no addit...	6.2 Medium	—	0,10%	15 Sep 2026
CVE-2026-56889 google android In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-56888 google android In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no addition...	6.2 Medium	—	0,10%	15 Sep 2026
CVE-2026-56882 google android In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution priv...	8.8 High	—	0,39%	15 Sep 2026
CVE-2026-56881 google android In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional...	8.4 High	—	0,11%	15 Sep 2026
CVE-2026-56879 google android In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution...	6.7 Medium	—	0,09%	15 Sep 2026
CVE-2026-55366 google android In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no addition...	9.8 Critical	—	0,46%	15 Sep 2026
CVE-2026-55365 google android In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System e...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-55359 google android In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privil...	7.8 High	—	0,10%	15 Sep 2026
CVE-2026-55351 google android In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges neede...	7.8 High	—	0,10%	15 Sep 2026
CVE-2026-55343 google android In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additiona...	8.0 High	—	0,30%	15 Sep 2026
CVE-2026-55332 google android In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution pr...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-55331 google android In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional executio...	8.8 High	—	0,37%	15 Sep 2026
CVE-2026-55323 google android In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with n...	7.8 High	—	0,10%	15 Sep 2026
CVE-2026-55318 google android In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed...	8.8 High	—	0,29%	15 Sep 2026
CVE-2026-55317 google android In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution pr...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-55306 google android In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privil...	7.5 High	—	0,35%	15 Sep 2026
CVE-2026-55304 google android In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-55302 google android In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution priv...	6.7 Medium	—	0,10%	15 Sep 2026
CVE-2026-55301 google android In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional...	8.4 High	—	0,10%	15 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.