Katalog CVE (hal. 444)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.902 (Critical 36.304 · High 105.051 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.151–22.200 dari 262.902 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-87587 google chrome Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87588 google chrome Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87589 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system acces...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87590 google chrome Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network tra...	5.9 Medium	—	0,32%	9 Sep 2026
CVE-2026-87573 google chrome Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secu...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87574 google chrome Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87575 google chrome Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via...	5.4 Medium	—	0,22%	9 Sep 2026
CVE-2026-87576 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outs...	3.4 Low	—	0,25%	9 Sep 2026
CVE-2026-87577 google chrome Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTM...	4.3 Medium	—	0,25%	9 Sep 2026
CVE-2026-87578 google chrome Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic....	8.3 High	—	0,19%	9 Sep 2026
CVE-2026-87579 google chrome Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...	8.8 High	—	0,57%	9 Sep 2026
CVE-2026-87580 google chrome Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social...	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87581 google chrome Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside t...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87564 google chrome Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security sever...	4.3 Medium	—	0,28%	9 Sep 2026
CVE-2026-87565 google chrome Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chro...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87566 google chrome Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium securi...	5.3 Medium	—	0,28%	9 Sep 2026
CVE-2026-87567 google chrome UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted d...	4.3 Medium	—	0,20%	9 Sep 2026
CVE-2026-87568 google chrome Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via...	4.3 Medium	—	0,20%	9 Sep 2026
CVE-2026-87569 google chrome Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	8.8 High	—	0,34%	9 Sep 2026
CVE-2026-87570 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social e...	8.8 High	—	0,31%	9 Sep 2026
CVE-2026-87571 google chrome Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via...	5.4 Medium	—	0,16%	9 Sep 2026
CVE-2026-87572 google chrome Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code out...	8.3 High	—	0,42%	9 Sep 2026
CVE-2026-87554 google chrome Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local prog...	8.1 High	—	0,10%	9 Sep 2026
CVE-2026-87555 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....	4.7 Medium	—	0,28%	9 Sep 2026
CVE-2026-87556 google chrome Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87557 google chrome Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system ac...	4.3 Medium	—	0,24%	9 Sep 2026
CVE-2026-87558 google chrome Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87559 google chrome UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (...	4.2 Medium	—	0,22%	9 Sep 2026
CVE-2026-87560 google chrome Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87561 google chrome Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87562 google chrome Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted...	4.3 Medium	—	0,24%	9 Sep 2026
CVE-2026-87563 google chrome Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,21%	9 Sep 2026
CVE-2026-87545 google chrome Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a c...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87546 google chrome Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a c...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87547 google chrome Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitr...	9.6 Critical	—	0,50%	9 Sep 2026
CVE-2026-87548 google chrome Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Ch...	4.3 Medium	—	0,25%	9 Sep 2026
CVE-2026-87549 google chrome Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	6.5 Medium	—	0,37%	9 Sep 2026
CVE-2026-87550 google chrome Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTM...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87551 google chrome Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via cr...	4.3 Medium	—	0,18%	9 Sep 2026
CVE-2026-87552 google chrome Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-inst...	5.5 Medium	—	0,12%	9 Sep 2026
CVE-2026-87553 google chrome Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execu...	8.3 High	—	0,43%	9 Sep 2026
CVE-2026-87536 google chrome Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87537 google chrome Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbi...	8.1 High	—	0,41%	9 Sep 2026
CVE-2026-87538 google chrome Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof...	4.2 Medium	—	0,22%	9 Sep 2026
CVE-2026-87539 google chrome Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium securit...	3.1 Low	—	0,23%	9 Sep 2026
CVE-2026-87540 google chrome Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security sev...	5.4 Medium	—	0,23%	9 Sep 2026
CVE-2026-87541 google chrome Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87542 google chrome Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87543 google chrome Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cr...	4.3 Medium	—	0,24%	9 Sep 2026
CVE-2026-87544 google chrome Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a...	9.8 Critical	—	0,34%	9 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.