Katalog CVE (hal. 565)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.391 (Critical 36.349 · High 105.294 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.201–28.250 dari 263.391 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-80101 gimp, redhat enterprise linux A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters in...	4.4 Medium	—	0,23%	25 Agt 2026
CVE-2026-79793 A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php....	4.3 Medium	—	0,47%	25 Agt 2026
CVE-2026-79792 A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file src/transcribe_anything/ytldp_download.py of the com...	5.6 Medium	—	1,6%	25 Agt 2026
CVE-2026-79293 google chrome Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securit...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79292 google chrome Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79291 google chrome Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security seve...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79290 google chrome Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79289 google chrome Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process...	3.1 Low	—	0,28%	25 Agt 2026
CVE-2026-79288 google chrome Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML p...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79287 google chrome Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secur...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79286 google chrome Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandb...	7.4 High	—	0,11%	25 Agt 2026
CVE-2026-79285 google chrome Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chro...	6.5 Medium	—	0,37%	25 Agt 2026
CVE-2026-79284 google chrome UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79283 google chrome UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severi...	5.4 Medium	—	0,26%	25 Agt 2026
CVE-2026-79282 google chrome Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p...	9.6 Critical	—	0,48%	25 Agt 2026
CVE-2026-79276 google chrome Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restri...	4.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79275 google chrome Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,48%	25 Agt 2026
CVE-2026-79274 google chrome Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79273 google chrome Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a cr...	4.3 Medium	—	0,33%	25 Agt 2026
CVE-2026-79272 google chrome Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin da...	3.1 Low	—	0,25%	25 Agt 2026
CVE-2026-79271 google chrome Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79270 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium se...	6.5 Medium	—	0,39%	25 Agt 2026
CVE-2026-79269 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromi...	4.3 Medium	—	0,29%	25 Agt 2026
CVE-2026-79267 google chrome Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cra...	4.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-79266 google chrome Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox vi...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-79265 google chrome Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social enginee...	5.3 Medium	—	0,31%	25 Agt 2026
CVE-2026-79264 google chrome Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium...	4.3 Medium	—	0,33%	25 Agt 2026
CVE-2026-79263 google chrome Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (...	8.1 High	—	0,33%	25 Agt 2026
CVE-2026-79262 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79261 google chrome Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secur...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79260 google chrome Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin polic...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79259 google chrome Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chro...	4.3 Medium	—	0,23%	25 Agt 2026
CVE-2026-79258 google chrome Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79257 google chrome Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,36%	25 Agt 2026
CVE-2026-79256 google chrome Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to pot...	8.3 High	—	0,44%	25 Agt 2026
CVE-2026-79255 google chrome Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy...	3.1 Low	—	0,33%	25 Agt 2026
CVE-2026-79254 google chrome Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a cr...	4.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-79253 google chrome Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive infor...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79252 google chrome Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,19%	25 Agt 2026
CVE-2026-79251 google chrome Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (C...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79250 google chrome UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security seve...	5.4 Medium	—	0,24%	25 Agt 2026
CVE-2026-79249 google chrome Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. (Chromium security sever...	6.5 Medium	—	0,23%	25 Agt 2026
CVE-2026-79248 google chrome Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy vi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79247 google chrome Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79246 google chrome Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secu...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79245 google chrome Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandb...	7.7 High	—	0,13%	25 Agt 2026
CVE-2026-79244 google chrome Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79243 google chrome Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79242 google chrome Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securi...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79241 google chrome Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chr...	6.5 Medium	—	0,32%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.