Katalog CVE (hal. 446)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.902 (Critical 36.304 · High 105.051 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.251–22.300 dari 262.902 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-87491 Advisory google chrome Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...	8.8 High	KEV	3,1%	9 Sep 2026
CVE-2026-87492 google chrome Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craf...	9.6 Critical	—	0,44%	9 Sep 2026
CVE-2026-87475 google chrome Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87476 google chrome Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium sec...	6.5 Medium	—	0,31%	9 Sep 2026
CVE-2026-87477 google chrome Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security sever...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87478 google chrome Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium se...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87479 google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged soc...	8.3 High	—	0,40%	9 Sep 2026
CVE-2026-87480 google chrome Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod...	8.3 High	—	0,40%	9 Sep 2026
CVE-2026-87481 google chrome Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially...	8.3 High	—	0,41%	9 Sep 2026
CVE-2026-87482 google chrome Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via cr...	5.9 Medium	—	0,19%	9 Sep 2026
CVE-2026-87483 google chrome Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML...	6.5 Medium	—	0,28%	9 Sep 2026
CVE-2026-87465 google chrome Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a...	4.2 Medium	—	0,22%	9 Sep 2026
CVE-2026-87466 google chrome Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87467 google chrome Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a l...	8.1 High	—	0,10%	9 Sep 2026
CVE-2026-87468 google chrome Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security...	6.5 Medium	—	0,27%	9 Sep 2026
CVE-2026-87469 google chrome Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted n...	4.3 Medium	—	0,23%	9 Sep 2026
CVE-2026-87470 google chrome Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87471 google chrome Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolati...	8.1 High	—	0,32%	9 Sep 2026
CVE-2026-87472 google chrome Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a c...	4.2 Medium	—	0,24%	9 Sep 2026
CVE-2026-87473 google chrome Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictio...	6.5 Medium	—	0,29%	9 Sep 2026
CVE-2026-87474 google chrome Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87457 google chrome Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program...	8.1 High	—	0,10%	9 Sep 2026
CVE-2026-87458 google chrome UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML p...	5.4 Medium	—	0,26%	9 Sep 2026
CVE-2026-87459 google chrome Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secu...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87460 google chrome Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87461 google chrome Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium security se...	4.3 Medium	—	0,24%	9 Sep 2026
CVE-2026-87462 google chrome UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page...	5.4 Medium	—	0,26%	9 Sep 2026
CVE-2026-87463 google chrome Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted networ...	4.8 Medium	—	0,19%	9 Sep 2026
CVE-2026-87464 google chrome Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,58%	9 Sep 2026
CVE-2026-87447 google chrome Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a craft...	6.5 Medium	—	0,26%	9 Sep 2026
CVE-2026-87448 google chrome Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87449 google chrome Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HT...	4.3 Medium	—	0,22%	9 Sep 2026
CVE-2026-87450 google chrome Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via...	7.5 High	—	0,32%	9 Sep 2026
CVE-2026-87451 google chrome Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a...	3.1 Low	—	0,23%	9 Sep 2026
CVE-2026-87452 google chrome Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain...	3.1 Low	—	0,22%	9 Sep 2026
CVE-2026-87453 google chrome Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive informatio...	5.3 Medium	—	0,27%	9 Sep 2026
CVE-2026-87454 google chrome Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C...	6.5 Medium	—	0,32%	9 Sep 2026
CVE-2026-87455 google chrome Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87456 google chrome Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sand...	3.4 Low	—	0,25%	9 Sep 2026
CVE-2026-87438 google chrome Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted H...	9.6 Critical	—	0,46%	9 Sep 2026
CVE-2026-87439 google chrome Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive informati...	5.3 Medium	—	0,28%	9 Sep 2026
CVE-2026-87440 google chrome Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87441 google chrome Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension....	6.5 Medium	—	0,25%	9 Sep 2026
CVE-2026-87442 google chrome Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin p...	3.1 Low	—	0,24%	9 Sep 2026
CVE-2026-87443 google chrome Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securi...	6.5 Medium	—	0,31%	9 Sep 2026
CVE-2026-87444 google chrome Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom...	8.8 High	—	0,41%	9 Sep 2026
CVE-2026-87445 google chrome UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severit...	5.4 Medium	—	0,24%	9 Sep 2026
CVE-2026-87446 google chrome Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via...	6.5 Medium	—	0,31%	9 Sep 2026
CVE-2026-87429 google chrome Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access...	6.5 Medium	—	0,29%	9 Sep 2026
CVE-2026-87430 google chrome Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa...	8.8 High	—	0,57%	9 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.