Katalog CVE (hal. 580)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.973 (Critical 36.402 · High 105.447 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 28.951–29.000 dari 263.973 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79091 google chrome Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside th...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79090 google chrome Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restriction...	9.8 Critical	—	0,42%	25 Agt 2026
CVE-2026-79089 google chrome Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system acc...	5.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-79088 google chrome Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions...	6.5 Medium	—	0,22%	25 Agt 2026
CVE-2026-79087 google chrome Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. (Chro...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79086 google chrome Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app....	5.1 Medium	—	0,11%	25 Agt 2026
CVE-2026-79085 google chrome Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy vi...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79084 google chrome Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass we...	4.3 Medium	—	0,13%	25 Agt 2026
CVE-2026-79083 google chrome Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potenti...	7.5 High	—	0,36%	25 Agt 2026
CVE-2026-79082 google chrome Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79078 google chrome Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79077 google chrome Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chr...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79076 google chrome Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium...	6.5 Medium	—	0,29%	25 Agt 2026
CVE-2026-79075 google chrome Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craf...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79074 google chrome Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79073 google chrome Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79072 google chrome Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTM...	8.1 High	—	0,33%	25 Agt 2026
CVE-2026-79071 google chrome Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code out...	8.3 High	—	0,32%	25 Agt 2026
CVE-2026-79070 google chrome Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium s...	4.3 Medium	—	0,33%	25 Agt 2026
CVE-2026-79069 google chrome Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craf...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-79068 google chrome Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79067 google chrome Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restri...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79066 google chrome Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolatio...	3.1 Low	—	0,26%	25 Agt 2026
CVE-2026-79065 google chrome Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin polic...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79064 google chrome Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...	9.6 Critical	—	0,43%	25 Agt 2026
CVE-2026-79060 google chrome Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origi...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79059 google chrome Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a c...	3.1 Low	—	0,23%	25 Agt 2026
CVE-2026-79058 google chrome Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a c...	9.1 Critical	—	0,36%	25 Agt 2026
CVE-2026-79057 google chrome Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code...	8.1 High	—	0,10%	25 Agt 2026
CVE-2026-79056 google chrome Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79055 google chrome Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive information v...	5.1 Medium	—	0,11%	25 Agt 2026
CVE-2026-79054 google chrome Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-79053 google chrome Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engine...	3.1 Low	—	0,23%	25 Agt 2026
CVE-2026-79052 google chrome Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79051 google chrome Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79050 google chrome Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromi...	4.3 Medium	—	0,34%	25 Agt 2026
CVE-2026-79049 google chrome Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Ch...	4.3 Medium	—	0,37%	25 Agt 2026
CVE-2026-79048 google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via...	8.8 High	—	0,56%	25 Agt 2026
CVE-2026-79047 google chrome Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,44%	25 Agt 2026
CVE-2026-79046 google chrome Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy vi...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79045 google chrome Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-79044 google chrome Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain...	5.3 Medium	—	0,29%	25 Agt 2026
CVE-2026-79043 google chrome Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79042 google chrome Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially bypass syst...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79041 google chrome Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy int...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79040 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....	4.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79039 google chrome Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network tra...	8.1 High	—	0,42%	25 Agt 2026
CVE-2026-79038 google chrome Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79034 google chrome Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafte...	3.1 Low	—	0,23%	25 Agt 2026
CVE-2026-79033 google chrome Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute ar...	8.8 High	—	0,41%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.