Katalog CVE (hal. 443)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.902 (Critical 36.304 · High 105.051 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.101–22.150 dari 262.902 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-87629 google chrome Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a cra...	6.5 Medium	—	0,29%	9 Sep 2026
CVE-2026-87630 google chrome Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87631 google chrome Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromiu...	6.5 Medium	—	0,31%	9 Sep 2026
CVE-2026-87632 google chrome Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secu...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87633 google chrome Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium secur...	8.6 High	—	0,15%	9 Sep 2026
CVE-2026-87634 google chrome Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted H...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87635 google chrome UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severi...	5.4 Medium	—	0,26%	9 Sep 2026
CVE-2026-87636 google chrome Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page....	8.8 High	—	0,45%	9 Sep 2026
CVE-2026-87619 google chrome Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87620 google chrome Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securit...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87621 google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,36%	9 Sep 2026
CVE-2026-87622 google chrome Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security s...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87623 google chrome Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafte...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87624 google chrome UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI ele...	4.2 Medium	—	0,22%	9 Sep 2026
CVE-2026-87625 google chrome Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a cr...	8.8 High	—	0,38%	9 Sep 2026
CVE-2026-87626 google chrome Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network...	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87627 google chrome Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87610 google chrome Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a cra...	6.5 Medium	—	0,29%	9 Sep 2026
CVE-2026-87611 google chrome Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data...	3.1 Low	—	0,22%	9 Sep 2026
CVE-2026-87612 google chrome Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,45%	9 Sep 2026
CVE-2026-87613 google chrome Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v...	9.0 Critical	—	0,47%	9 Sep 2026
CVE-2026-87614 google chrome Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin p...	3.1 Low	—	0,24%	9 Sep 2026
CVE-2026-87615 google chrome Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (...	5.4 Medium	—	0,19%	9 Sep 2026
CVE-2026-87616 google chrome Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged so...	8.3 High	—	0,44%	9 Sep 2026
CVE-2026-87617 google chrome Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox vi...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87618 google chrome Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to pote...	8.3 High	—	0,44%	9 Sep 2026
CVE-2026-87600 google chrome Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system a...	6.5 Medium	—	0,30%	9 Sep 2026
CVE-2026-87601 google chrome Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	7.5 High	—	0,29%	9 Sep 2026
CVE-2026-87602 google chrome Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted H...	4.7 Medium	—	0,17%	9 Sep 2026
CVE-2026-87603 google chrome Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chrom...	6.5 Medium	—	0,29%	9 Sep 2026
CVE-2026-87604 google chrome Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary co...	8.3 High	—	0,33%	9 Sep 2026
CVE-2026-87605 google chrome Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineer...	5.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87606 google chrome Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation...	8.1 High	—	0,32%	9 Sep 2026
CVE-2026-87607 google chrome Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87608 google chrome Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via c...	7.5 High	—	0,26%	9 Sep 2026
CVE-2026-87609 google chrome Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network tr...	9.6 Critical	—	0,43%	9 Sep 2026
CVE-2026-87591 google chrome Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extensio...	6.5 Medium	—	0,26%	9 Sep 2026
CVE-2026-87592 google chrome Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chrom...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87593 google chrome Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87594 google chrome Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive inf...	5.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87595 google chrome Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions...	9.8 Critical	—	0,42%	9 Sep 2026
CVE-2026-87596 google chrome Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87597 google chrome UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium...	4.8 Medium	—	0,26%	9 Sep 2026
CVE-2026-87598 google chrome Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87599 google chrome Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium secur...	5.4 Medium	—	0,24%	9 Sep 2026
CVE-2026-87582 google chrome Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrar...	8.3 High	—	0,39%	9 Sep 2026
CVE-2026-87583 google chrome UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium...	5.4 Medium	—	0,26%	9 Sep 2026
CVE-2026-87584 google chrome Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a craft...	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87585 google chrome Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft...	8.8 High	—	0,38%	9 Sep 2026
CVE-2026-87586 google chrome Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,26%	9 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.