Katalog CVE (hal. 577)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.917 (Critical 36.380 · High 105.432 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 12:31 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.801–28.850 dari 263.917 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79213 google chrome Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craft...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79212 google chrome Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social enginee...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79211 google chrome Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79210 google chrome Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79209 google chrome Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-79208 google chrome Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium secu...	5.9 Medium	—	0,29%	25 Agt 2026
CVE-2026-79207 google chrome Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium sec...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79206 google chrome Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79205 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79204 google chrome UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security...	5.4 Medium	—	0,26%	25 Agt 2026
CVE-2026-79203 google chrome Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation...	3.1 Low	—	0,26%	25 Agt 2026
CVE-2026-79202 google chrome Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79201 google chrome Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79200 google chrome Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79199 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromi...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79198 google chrome Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79197 google chrome Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79196 google chrome Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HT...	5.3 Medium	—	0,23%	25 Agt 2026
CVE-2026-79195 google chrome Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79194 google chrome Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted net...	8.1 High	—	0,56%	25 Agt 2026
CVE-2026-79193 google chrome Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,30%	25 Agt 2026
CVE-2026-79192 google chrome Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traf...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79191 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social e...	3.1 Low	—	0,23%	25 Agt 2026
CVE-2026-79190 google chrome Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin poli...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79189 google chrome Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,38%	25 Agt 2026
CVE-2026-79188 google chrome Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,48%	25 Agt 2026
CVE-2026-79187 google chrome Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,52%	25 Agt 2026
CVE-2026-79186 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via...	3.1 Low	—	0,23%	25 Agt 2026
CVE-2026-79185 google chrome Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79184 google chrome Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy vi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79183 google chrome Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sand...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-79182 google chrome Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79181 google chrome Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securi...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79180 google chrome UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via...	5.4 Medium	—	0,26%	25 Agt 2026
CVE-2026-79179 google chrome Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chrom...	6.5 Medium	—	0,31%	25 Agt 2026
CVE-2026-79178 google chrome Incorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via...	4.3 Medium	—	0,30%	25 Agt 2026
CVE-2026-79177 google chrome Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system...	6.5 Medium	—	0,29%	25 Agt 2026
CVE-2026-79176 google chrome UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a c...	6.5 Medium	—	0,29%	25 Agt 2026
CVE-2026-79175 google chrome Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitr...	8.3 High	—	0,44%	25 Agt 2026
CVE-2026-79174 google chrome Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin poli...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79173 google chrome UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security...	5.4 Medium	—	0,26%	25 Agt 2026
CVE-2026-79155 google chrome Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary c...	8.3 High	—	0,32%	25 Agt 2026
CVE-2026-79154 google chrome Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI I...	6.5 Medium	—	0,28%	25 Agt 2026
CVE-2026-79152 google chrome Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (...	9.8 Critical	—	0,32%	25 Agt 2026
CVE-2026-79151 google chrome Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chro...	4.3 Medium	—	0,23%	25 Agt 2026
CVE-2026-79150 google chrome Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page....	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79149 google chrome Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,48%	25 Agt 2026
CVE-2026-79148 google chrome Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox...	9.1 Critical	—	0,34%	25 Agt 2026
CVE-2026-79147 google chrome Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive inform...	5.3 Medium	—	0,22%	25 Agt 2026
CVE-2026-79146 google chrome Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromiu...	5.5 Medium	—	0,12%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.