Katalog CVE (hal. 566)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.391 (Critical 36.349 · High 105.294 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.251–28.300 dari 263.391 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79240 google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via...	8.8 High	—	0,36%	25 Agt 2026
CVE-2026-79239 google chrome Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTM...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79238 google chrome Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79237 google chrome Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium sec...	4.3 Medium	—	0,29%	25 Agt 2026
CVE-2026-79236 google chrome Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79235 google chrome Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79234 google chrome Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79233 google chrome UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79232 google chrome Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79231 google chrome Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79230 google chrome Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v...	8.8 High	—	0,29%	25 Agt 2026
CVE-2026-79229 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sand...	6.5 Medium	—	0,39%	25 Agt 2026
CVE-2026-79228 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolati...	3.1 Low	—	0,24%	25 Agt 2026
CVE-2026-79227 google chrome Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox vi...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79226 google chrome Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system ac...	8.8 High	—	0,33%	25 Agt 2026
CVE-2026-79225 google chrome Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79224 google chrome Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79223 google chrome Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium security se...	8.8 High	—	0,32%	25 Agt 2026
CVE-2026-79222 google chrome Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (...	4.3 Medium	—	0,18%	25 Agt 2026
CVE-2026-79221 google chrome Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79220 google chrome Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79219 google chrome Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-79218 google chrome Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbit...	8.3 High	—	0,31%	25 Agt 2026
CVE-2026-79217 google chrome Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79216 google chrome Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the s...	7.5 High	—	0,40%	25 Agt 2026
CVE-2026-79215 google chrome Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p...	8.8 High	—	0,52%	25 Agt 2026
CVE-2026-79214 google chrome Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin polic...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79213 google chrome Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craft...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79212 google chrome Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social enginee...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79211 google chrome Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79210 google chrome Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79209 google chrome Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79208 google chrome Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium secu...	5.9 Medium	—	0,29%	25 Agt 2026
CVE-2026-79207 google chrome Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium sec...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79206 google chrome Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79205 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79204 google chrome UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security...	5.4 Medium	—	0,26%	25 Agt 2026
CVE-2026-79203 google chrome Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation...	3.1 Low	—	0,26%	25 Agt 2026
CVE-2026-79202 google chrome Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79201 google chrome Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79200 google chrome Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79199 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromi...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79198 google chrome Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79197 google chrome Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79196 google chrome Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HT...	5.3 Medium	—	0,23%	25 Agt 2026
CVE-2026-79195 google chrome Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79194 google chrome Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted net...	8.1 High	—	0,56%	25 Agt 2026
CVE-2026-79193 google chrome Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,30%	25 Agt 2026
CVE-2026-79192 google chrome Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traf...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79191 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social e...	3.1 Low	—	0,23%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.