Katalog CVE (hal. 389)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.397 (Critical 36.228 · High 104.890 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 22 Okt 2026, 12:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 19.401–19.450 dari 262.397 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-84505 apple macos An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be...	7.8 High	—	0,17%	14 Sep 2026
CVE-2026-84497 apple ipados, apple iphone os +3 lainnya A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia...	7.8 High	—	0,19%	14 Sep 2026
CVE-2026-84492 apple ipados, apple iphone os +4 lainnya A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15...	4.7 Medium	—	0,11%	14 Sep 2026
CVE-2026-84491 apple ipados, apple iphone os +4 lainnya A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visi...	5.5 Medium	—	0,14%	14 Sep 2026
CVE-2026-84489 apple ipados, apple iphone os +1 lainnya A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Se...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-84487 apple ipados, apple iphone os +4 lainnya An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo...	6.5 Medium	—	0,46%	14 Sep 2026
CVE-2026-81903 concretecms concrete cms Concrete CMS versions 9.0.0 to 9.5.2 stored the Page Container icon value submitted through the dashboard without validating it against the set of known container icons....	5.4 Medium	—	0,32%	14 Sep 2026
CVE-2026-81902 concretecms concrete cms Concrete CMS 9 through 9.5.2 did not validate a CSRF token in the orphaned block removal panel action (removeOrphanedBlocks). A remote attacker could craft a request that...	8.1 High	—	0,24%	14 Sep 2026
CVE-2026-81901 concretecms concrete cms In Concrete CMS 9.2.0 through 9.5.2, the REST API page update endpoint (PUT /ccm/api/1.0/pages/{cID}) did not enforce page-property, page-template, or page-type authoriza...	8.7 High	—	0,38%	14 Sep 2026
CVE-2026-7884 IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaS...	5.4 Medium	—	0,23%	14 Sep 2026
CVE-2026-78415 IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization o...	5.4 Medium	—	0,31%	14 Sep 2026
CVE-2026-75792 IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authoriz...	4.3 Medium	—	0,36%	14 Sep 2026
CVE-2026-68489 Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via c...	8.7 High	—	0,67%	14 Sep 2026
CVE-2026-67399 Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.	9.3 Critical	—	0,75%	14 Sep 2026
CVE-2026-65415 apple ipados, apple iphone os +4 lainnya A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local us...	8.1 High	—	0,32%	14 Sep 2026
CVE-2026-65414 apple ipados, apple iphone os +3 lainnya An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac...	9.8 Critical	—	1,1%	14 Sep 2026
CVE-2026-65413 apple macos An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-65412 apple ipados, apple iphone os +3 lainnya A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macO...	6.5 Medium	—	0,47%	14 Sep 2026
CVE-2026-65411 apple ipados, apple iphone os +1 lainnya A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to mo...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-65410 apple ipados, apple iphone os +4 lainnya The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visi...	7.5 High	—	0,50%	14 Sep 2026
CVE-2026-65409 apple ipados, apple iphone os +4 lainnya A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Seq...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65408 apple ipados, apple iphone os +1 lainnya An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65407 apple ipados, apple iphone os +4 lainnya A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-65406 apple ipados, apple iphone os +3 lainnya A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65405 apple ipados, apple iphone os +4 lainnya A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, ma...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65404 apple ipados, apple iphone os +1 lainnya An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, ma...	5.5 Medium	—	0,15%	14 Sep 2026
CVE-2026-65403 apple ipados, apple iphone os +3 lainnya This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Taho...	5.5 Medium	—	0,14%	14 Sep 2026
CVE-2026-65402 apple ipados, apple iphone os +4 lainnya A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS S...	5.5 Medium	—	0,15%	14 Sep 2026
CVE-2026-65401 apple macos A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system...	5.5 Medium	—	0,11%	14 Sep 2026
CVE-2026-65399 apple ipados, apple iphone os +3 lainnya A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia...	4.4 Medium	—	0,14%	14 Sep 2026
CVE-2026-65398 apple ipados, apple iphone os +4 lainnya An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchO...	7.8 High	—	0,16%	14 Sep 2026
CVE-2026-65395 apple ipados, apple iphone os +3 lainnya An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac...	6.5 Medium	—	0,46%	14 Sep 2026
CVE-2026-65393 apple xcode, apple macos A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65391 apple safari, apple ipados +5 lainnya An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27,...	8.8 High	—	0,41%	14 Sep 2026
CVE-2026-65390 apple safari, apple ipados +5 lainnya An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionO...	8.8 High	—	0,41%	14 Sep 2026
CVE-2026-65383 apple macos This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks.	4.4 Medium	—	0,13%	14 Sep 2026
CVE-2026-65382 apple macos A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah...	5.5 Medium	—	0,18%	14 Sep 2026
CVE-2026-65381 apple macos A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Gol...	10.0 Critical	—	0,35%	14 Sep 2026
CVE-2026-65380 apple macos An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-65378 apple macos An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able...	7.5 High	—	0,31%	14 Sep 2026
CVE-2026-65377 apple ipados, apple iphone os +4 lainnya A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65376 apple macos An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able t...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-65375 apple macos The issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6. An app may be able to cause unexp...	7.5 High	—	0,66%	14 Sep 2026
CVE-2026-65374 apple macos A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malic...	8.8 High	—	0,53%	14 Sep 2026
CVE-2026-65371 apple ipados, apple iphone os +4 lainnya This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26....	3.3 Low	—	0,15%	14 Sep 2026
CVE-2026-65369 apple macos A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-65365 apple macos An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a mali...	6.5 Medium	—	0,39%	14 Sep 2026
CVE-2026-65364 apple macos An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker ma...	7.5 High	—	0,70%	14 Sep 2026
CVE-2026-65362 apple macos This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileg...	7.8 High	—	0,15%	14 Sep 2026
CVE-2026-65361 apple macos This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive u...	5.5 Medium	—	0,15%	14 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.