Katalog CVE (hal. 578)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.917 (Critical 36.380 · High 105.432 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 12:31 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.851–28.900 dari 263.917 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79144 google chrome Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79143 google chrome Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79142 google chrome Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...	8.8 High	—	0,40%	25 Agt 2026
CVE-2026-79141 google chrome Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79140 google chrome Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page....	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79139 google chrome Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially...	7.5 High	—	0,39%	25 Agt 2026
CVE-2026-79138 google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,36%	25 Agt 2026
CVE-2026-79137 google chrome Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions...	4.3 Medium	—	0,22%	25 Agt 2026
CVE-2026-79136 google chrome Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium...	4.3 Medium	—	0,35%	25 Agt 2026
CVE-2026-79134 google chrome Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromi...	6.5 Medium	—	0,23%	25 Agt 2026
CVE-2026-79133 google chrome Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secu...	6.5 Medium	—	0,31%	25 Agt 2026
CVE-2026-79132 google chrome Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially...	8.3 High	—	0,43%	25 Agt 2026
CVE-2026-79131 google chrome Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...	9.6 Critical	—	0,48%	25 Agt 2026
CVE-2026-79130 google chrome Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu...	9.6 Critical	—	0,42%	25 Agt 2026
CVE-2026-79129 google chrome Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside...	9.6 Critical	—	0,43%	25 Agt 2026
CVE-2026-79128 google chrome Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page....	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79127 google chrome Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...	8.8 High	—	0,48%	25 Agt 2026
CVE-2026-79126 google chrome Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive...	5.9 Medium	—	0,24%	25 Agt 2026
CVE-2026-79125 google chrome Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sever...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79124 google chrome Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromi...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79123 google chrome Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79122 google chrome Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium securi...	5.9 Medium	—	0,30%	25 Agt 2026
CVE-2026-79121 google chrome Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute...	8.3 High	—	0,43%	25 Agt 2026
CVE-2026-79120 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromi...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79119 google chrome Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium sec...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-79118 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79117 google chrome Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy...	4.3 Medium	—	0,19%	25 Agt 2026
CVE-2026-79116 google chrome Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79112 google chrome Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox vi...	6.5 Medium	—	0,25%	25 Agt 2026
CVE-2026-79111 google chrome Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79110 google chrome Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79109 google chrome Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute ar...	8.3 High	—	0,43%	25 Agt 2026
CVE-2026-79108 google chrome UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to b...	6.5 Medium	—	0,33%	25 Agt 2026
CVE-2026-79107 google chrome Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traff...	6.5 Medium	—	0,28%	25 Agt 2026
CVE-2026-79106 google chrome Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social enginee...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79105 google chrome Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML pa...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79104 google chrome Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information...	5.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79103 google chrome Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolati...	3.1 Low	—	0,30%	25 Agt 2026
CVE-2026-79099 google chrome Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium...	6.5 Medium	—	0,29%	25 Agt 2026
CVE-2026-79098 google chrome UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79097 google chrome Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79095 google chrome Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security sev...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79094 google chrome Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securi...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-79093 google chrome Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chrom...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79091 google chrome Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside th...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79090 google chrome Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restriction...	9.8 Critical	—	0,42%	25 Agt 2026
CVE-2026-79089 google chrome Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system acc...	5.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-79088 google chrome Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions...	6.5 Medium	—	0,22%	25 Agt 2026
CVE-2026-79087 google chrome Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. (Chro...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79086 google chrome Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app....	5.1 Medium	—	0,11%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.