Katalog CVE (hal. 445)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.902 (Critical 36.304 · High 105.051 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.201–22.250 dari 262.902 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-87528 google chrome Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra...	9.6 Critical	—	0,48%	9 Sep 2026
CVE-2026-87529 google chrome Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...	9.6 Critical	—	0,50%	9 Sep 2026
CVE-2026-87530 google chrome Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside th...	8.1 High	—	0,14%	9 Sep 2026
CVE-2026-87531 google chrome Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a craf...	3.1 Low	—	0,23%	9 Sep 2026
CVE-2026-87532 google chrome Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page....	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87533 google chrome Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium s...	8.1 High	—	0,14%	9 Sep 2026
CVE-2026-87534 google chrome Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access res...	9.8 Critical	—	0,29%	9 Sep 2026
CVE-2026-87535 google chrome Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafte...	6.5 Medium	—	0,34%	9 Sep 2026
CVE-2026-87519 google chrome Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictio...	6.5 Medium	—	0,29%	9 Sep 2026
CVE-2026-87520 google chrome Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87521 google chrome Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a cr...	3.1 Low	—	0,23%	9 Sep 2026
CVE-2026-87522 google chrome Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass syste...	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87523 google chrome Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craft...	5.3 Medium	—	0,24%	9 Sep 2026
CVE-2026-87524 google chrome Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arb...	8.3 High	—	0,40%	9 Sep 2026
CVE-2026-87525 google chrome Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (C...	2.7 Low	—	0,11%	9 Sep 2026
CVE-2026-87526 google chrome Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside...	9.6 Critical	—	0,43%	9 Sep 2026
CVE-2026-87527 google chrome Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu...	9.6 Critical	—	0,51%	9 Sep 2026
CVE-2026-87510 google chrome Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arb...	8.3 High	—	0,43%	9 Sep 2026
CVE-2026-87511 google chrome Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium...	4.3 Medium	—	0,23%	9 Sep 2026
CVE-2026-87512 google chrome Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p...	9.6 Critical	—	0,57%	9 Sep 2026
CVE-2026-87513 google chrome Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restricti...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87514 google chrome Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium secu...	8.1 High	—	0,13%	9 Sep 2026
CVE-2026-87515 google chrome Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions vi...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87516 google chrome Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87517 google chrome Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a craft...	3.1 Low	—	0,19%	9 Sep 2026
CVE-2026-87518 google chrome Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially...	5.3 Medium	—	0,28%	9 Sep 2026
CVE-2026-87501 google chrome UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security sever...	5.4 Medium	—	0,24%	9 Sep 2026
CVE-2026-87502 google chrome Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering...	4.2 Medium	—	0,22%	9 Sep 2026
CVE-2026-87503 google chrome Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system a...	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87504 google chrome Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a...	9.6 Critical	—	0,43%	9 Sep 2026
CVE-2026-87505 google chrome Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation...	8.1 High	—	0,27%	9 Sep 2026
CVE-2026-87506 google chrome Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary c...	8.3 High	—	0,40%	9 Sep 2026
CVE-2026-87507 google chrome UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML...	5.4 Medium	—	0,26%	9 Sep 2026
CVE-2026-87508 google chrome Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87509 google chrome Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a loca...	8.1 High	—	0,12%	9 Sep 2026
CVE-2026-87493 google chrome Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions v...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87494 google chrome Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87495 google chrome Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craf...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87496 google chrome UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa...	5.4 Medium	—	0,24%	9 Sep 2026
CVE-2026-87497 google chrome Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium se...	4.3 Medium	—	0,26%	9 Sep 2026
CVE-2026-87498 google chrome Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via...	3.1 Low	—	0,24%	9 Sep 2026
CVE-2026-87499 google chrome Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via...	8.1 High	—	0,32%	9 Sep 2026
CVE-2026-87500 google chrome Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox vi...	9.6 Critical	—	0,37%	9 Sep 2026
CVE-2026-87484 google chrome UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML p...	5.4 Medium	—	0,24%	9 Sep 2026
CVE-2026-87485 google chrome Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via...	3.1 Low	—	0,24%	9 Sep 2026
CVE-2026-87486 google chrome Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium...	4.0 Medium	—	0,11%	9 Sep 2026
CVE-2026-87487 google chrome Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engine...	8.3 High	—	0,39%	9 Sep 2026
CVE-2026-87488 google chrome Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87489 google chrome Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome ex...	8.8 High	—	0,38%	9 Sep 2026
CVE-2026-87490 google chrome Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chro...	6.5 Medium	—	0,32%	9 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.