Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-87035
tanium comply
Tanium addressed an information disclosure vulnerability in Comply.
|
4.3 Medium | — | 0,30% | 9 Sep 2026 |
|
CVE-2026-87036
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
8.1 High | — | 0,38% | 9 Sep 2026 |
|
CVE-2026-87037
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
5.4 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-87046
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
4.3 Medium | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-87047
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
6.3 Medium | — | 0,26% | 9 Sep 2026 |
|
CVE-2026-87048
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
5.4 Medium | — | 0,29% | 9 Sep 2026 |
|
CVE-2026-87072
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
7.1 High | — | 0,29% | 9 Sep 2026 |
|
CVE-2026-87073
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
6.5 Medium | — | 0,30% | 9 Sep 2026 |
|
CVE-2026-87075
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
8.1 High | — | 0,38% | 9 Sep 2026 |
|
CVE-2026-87019
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
4.3 Medium | — | 0,26% | 9 Sep 2026 |
|
CVE-2026-87021
tanium comply
Tanium addressed an unauthorized code execution vulnerability in Comply.
|
7.2 High | — | 0,66% | 9 Sep 2026 |
|
CVE-2026-87023
tanium comply
Tanium addressed a path traversal vulnerability in Comply.
|
8.5 High | — | 0,46% | 9 Sep 2026 |
|
CVE-2026-87025
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
5.4 Medium | — | 0,29% | 9 Sep 2026 |
|
CVE-2026-87030
tanium comply
Tanium addressed a path traversal vulnerability in Comply.
|
8.5 High | — | 0,44% | 9 Sep 2026 |
|
CVE-2026-87032
Tanium addressed an information disclosure vulnerability in Tanium Server.
|
4.3 Medium | — | 0,30% | 9 Sep 2026 |
|
CVE-2026-87033
tanium comply
Tanium addressed an improper access controls vulnerability in Comply.
|
5.4 Medium | — | 0,29% | 9 Sep 2026 |
|
CVE-2026-87034
tanium comply
Tanium addressed a SQL injection vulnerability in Comply.
|
8.3 High | — | 0,33% | 9 Sep 2026 |
|
CVE-2026-76801
The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to Remote Code Execution in all versions up...
|
8.8 High | — | 0,94% | 9 Sep 2026 |
|
CVE-2026-15406
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inc...
|
7.5 High | — | 0,66% | 9 Sep 2026 |
|
CVE-2026-14892
Tanium addressed an improper access controls vulnerability in Tanium Server.
|
4.3 Medium | — | 0,19% | 9 Sep 2026 |
|
CVE-2026-15667
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inc...
|
7.5 High | — | 0,80% | 9 Sep 2026 |
|
CVE-2026-12956
The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the create_item() handler for the...
|
5.3 Medium | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-13359
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_drop...
|
7.2 High | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-13709
The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting in all v...
|
6.4 Medium | — | 0,19% | 9 Sep 2026 |
|
CVE-2026-14505
Tanium addressed a path traversal vulnerability in Tanium Data Service.
|
6.6 Medium | — | 0,31% | 9 Sep 2026 |
|
CVE-2026-87083
A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from_disk of the file tilelang/cache/kernel_cache.py o...
|
5.5 Medium | — | 0,35% | 9 Sep 2026 |
|
CVE-2026-87724
Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of...
|
6.5 Medium | — | 0,43% | 9 Sep 2026 |
|
CVE-2026-87655
google chrome
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (C...
|
5.4 Medium | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-87656
google chrome
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page....
|
5.4 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-87657
google chrome
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a cr...
|
3.1 Low | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-87658
google chrome
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted C...
|
4.3 Medium | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-87646
google chrome
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa...
|
9.6 Critical | — | 0,53% | 9 Sep 2026 |
|
CVE-2026-87647
google chrome
Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbo...
|
3.4 Low | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-87648
google chrome
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute ar...
|
8.3 High | — | 0,31% | 9 Sep 2026 |
|
CVE-2026-87649
google chrome
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via...
|
5.4 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-87650
google chrome
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML...
|
9.6 Critical | — | 0,46% | 9 Sep 2026 |
|
CVE-2026-87651
google chrome
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...
|
4.3 Medium | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-87652
google chrome
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy...
|
3.1 Low | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-87653
google chrome
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium...
|
5.4 Medium | — | 0,26% | 9 Sep 2026 |
|
CVE-2026-87654
google chrome
Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...
|
9.6 Critical | — | 0,40% | 9 Sep 2026 |
|
CVE-2026-87637
google chrome
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...
|
9.6 Critical | — | 0,46% | 9 Sep 2026 |
|
CVE-2026-87638
google chrome
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...
|
9.6 Critical | — | 0,46% | 9 Sep 2026 |
|
CVE-2026-87639
google chrome
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary...
|
8.3 High | — | 0,40% | 9 Sep 2026 |
|
CVE-2026-87640
google chrome
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outs...
|
6.1 Medium | — | 0,28% | 9 Sep 2026 |
|
CVE-2026-87641
google chrome
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securi...
|
4.2 Medium | — | 0,18% | 9 Sep 2026 |
|
CVE-2026-87642
google chrome
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se...
|
4.3 Medium | — | 0,28% | 9 Sep 2026 |
|
CVE-2026-87643
google chrome
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr...
|
9.6 Critical | — | 0,46% | 9 Sep 2026 |
|
CVE-2026-87644
google chrome
Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged so...
|
8.3 High | — | 0,39% | 9 Sep 2026 |
|
CVE-2026-87645
google chrome
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page....
|
5.4 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-87628
google chrome
Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network...
|
8.3 High | — | 0,19% | 9 Sep 2026 |