Katalog CVE (hal. 576)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.917 (Critical 36.380 · High 105.432 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 12:31 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.751–28.800 dari 263.917 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79263 google chrome Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (...	8.1 High	—	0,33%	25 Agt 2026
CVE-2026-79262 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79261 google chrome Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secur...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79260 google chrome Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin polic...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79259 google chrome Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chro...	4.3 Medium	—	0,23%	25 Agt 2026
CVE-2026-79258 google chrome Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79257 google chrome Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,36%	25 Agt 2026
CVE-2026-79256 google chrome Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to pot...	8.3 High	—	0,44%	25 Agt 2026
CVE-2026-79255 google chrome Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy...	3.1 Low	—	0,33%	25 Agt 2026
CVE-2026-79254 google chrome Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a cr...	4.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-79253 google chrome Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive infor...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79252 google chrome Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,19%	25 Agt 2026
CVE-2026-79251 google chrome Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (C...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79250 google chrome UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security seve...	5.4 Medium	—	0,24%	25 Agt 2026
CVE-2026-79249 google chrome Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. (Chromium security sever...	6.5 Medium	—	0,23%	25 Agt 2026
CVE-2026-79248 google chrome Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy vi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79247 google chrome Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79246 google chrome Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secu...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79245 google chrome Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandb...	7.7 High	—	0,13%	25 Agt 2026
CVE-2026-79244 google chrome Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79243 google chrome Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79242 google chrome Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securi...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79241 google chrome Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chr...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79240 google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via...	8.8 High	—	0,36%	25 Agt 2026
CVE-2026-79239 google chrome Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTM...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79238 google chrome Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79237 google chrome Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium sec...	4.3 Medium	—	0,29%	25 Agt 2026
CVE-2026-79236 google chrome Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79235 google chrome Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79234 google chrome Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79233 google chrome UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79232 google chrome Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79231 google chrome Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79230 google chrome Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v...	8.8 High	—	0,29%	25 Agt 2026
CVE-2026-79229 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sand...	6.5 Medium	—	0,39%	25 Agt 2026
CVE-2026-79228 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolati...	3.1 Low	—	0,24%	25 Agt 2026
CVE-2026-79227 google chrome Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox vi...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79226 google chrome Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system ac...	8.8 High	—	0,33%	25 Agt 2026
CVE-2026-79225 google chrome Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access r...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79224 google chrome Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79223 google chrome Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium security se...	8.8 High	—	0,32%	25 Agt 2026
CVE-2026-79222 google chrome Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (...	4.3 Medium	—	0,18%	25 Agt 2026
CVE-2026-79221 google chrome Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79220 google chrome Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79219 google chrome Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-79218 google chrome Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbit...	8.3 High	—	0,31%	25 Agt 2026
CVE-2026-79217 google chrome Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79216 google chrome Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the s...	7.5 High	—	0,40%	25 Agt 2026
CVE-2026-79215 google chrome Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p...	8.8 High	—	0,52%	25 Agt 2026
CVE-2026-79214 google chrome Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin polic...	4.3 Medium	—	0,27%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.