Katalog CVE (hal. 455)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.042 (Critical 36.325 · High 105.117 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 24 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.701–22.750 dari 263.042 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-66308 microsoft skype for business server, microsoft skype for business server subscription edition Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.	6.5 Medium	—	1,1%	8 Sep 2026
CVE-2026-66302 microsoft skype for business server, microsoft skype for business server subscription edition External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.	9.8 Critical	—	0,97%	8 Sep 2026
CVE-2026-66303 microsoft skype for business server, microsoft skype for business server subscription edition Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.	6.5 Medium	—	1,1%	8 Sep 2026
CVE-2026-66304 microsoft skype for business server, microsoft skype for business server subscription edition Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.	7.5 High	—	0,97%	8 Sep 2026
CVE-2026-63523 microsoft skype for business server, microsoft skype for business server subscription edition Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a netw...	6.1 Medium	—	0,55%	8 Sep 2026
CVE-2026-58846 google android In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional...	7.8 High	—	0,11%	8 Sep 2026
CVE-2026-58848 google android In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no add...	7.0 High	—	0,09%	8 Sep 2026
CVE-2026-58874 google android In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privile...	7.8 High	—	0,09%	8 Sep 2026
CVE-2026-58941 google android In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no...	7.8 High	—	0,11%	8 Sep 2026
CVE-2026-58820 google android In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution priv...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-58822 google android In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional executio...	9.8 Critical	—	0,38%	8 Sep 2026
CVE-2026-58823 google android In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-58839 google android In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-55273 google android In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-55277 google android In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent)...	8.0 High	—	0,17%	8 Sep 2026
CVE-2026-55285 google android In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no a...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-55290 google android In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no addition...	3.3 Low	—	0,09%	8 Sep 2026
CVE-2026-55294 google android In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-55256 google android In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with...	6.5 Medium	—	0,33%	8 Sep 2026
CVE-2026-49918 google android In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution p...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-49919 google android In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no ad...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-49921 google android In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privil...	9.8 Critical	—	0,39%	8 Sep 2026
CVE-2026-49927 google android In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution p...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-49932 google android In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-49879 google android In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execut...	8.8 High	—	0,37%	8 Sep 2026
CVE-2026-49881 google android In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of priv...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-49882 google android In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional...	8.8 High	—	0,38%	8 Sep 2026
CVE-2026-49884 google android In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-49887 google android In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escal...	7.8 High	—	0,09%	8 Sep 2026
CVE-2026-49895 google android In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/ad...	3.5 Low	—	0,13%	8 Sep 2026
CVE-2026-45528 google android In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalatio...	7.3 High	—	0,09%	8 Sep 2026
CVE-2026-45531 google android In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional e...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-45515 google android In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-45519 google android In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information...	3.3 Low	—	0,08%	8 Sep 2026
CVE-2026-45520 google android In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no a...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-45521 google android In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no a...	3.3 Low	—	0,09%	8 Sep 2026
CVE-2026-45525 google android In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional...	3.3 Low	—	0,09%	8 Sep 2026
CVE-2026-45527 google android In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remo...	4.3 Medium	—	0,31%	8 Sep 2026
CVE-2026-28671 google android In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no add...	3.3 Low	—	0,07%	8 Sep 2026
CVE-2026-28656 google android In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege w...	7.3 High	—	0,09%	8 Sep 2026
CVE-2026-28657 google android In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalat...	7.8 High	—	0,09%	8 Sep 2026
CVE-2026-28658 google android In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additiona...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-28660 google android In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additio...	3.3 Low	—	0,09%	8 Sep 2026
CVE-2026-28662 google android In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) c...	8.0 High	—	0,17%	8 Sep 2026
CVE-2026-28663 google android In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local esc...	7.8 High	—	0,09%	8 Sep 2026
CVE-2026-28664 google android In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no add...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-28666 google android In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to re...	8.8 High	—	0,34%	8 Sep 2026
CVE-2026-28668 google android In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additio...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-28634 google android In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to...	7.8 High	—	0,10%	8 Sep 2026
CVE-2026-28636 google android In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local esca...	7.8 High	—	0,09%	8 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.