Katalog CVE (hal. 581)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.973 (Critical 36.402 · High 105.447 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 29.001–29.050 dari 263.973 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79032 google chrome Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access re...	6.8 Medium	—	0,31%	25 Agt 2026
CVE-2026-79031 google chrome Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium securi...	3.1 Low	—	0,24%	25 Agt 2026
CVE-2026-79030 google chrome Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium se...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79028 google chrome Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium sec...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79027 google chrome Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chro...	8.1 High	—	0,53%	25 Agt 2026
CVE-2026-79026 google chrome Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside...	9.6 Critical	—	0,43%	25 Agt 2026
CVE-2026-79025 google chrome Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access re...	4.2 Medium	—	0,22%	25 Agt 2026
CVE-2026-79024 google chrome Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium sec...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79023 google chrome Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium se...	6.5 Medium	—	0,31%	25 Agt 2026
CVE-2026-79022 google chrome UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elem...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79021 google chrome Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access...	6.5 Medium	—	0,26%	25 Agt 2026
CVE-2026-79020 google chrome Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chro...	8.1 High	—	0,38%	25 Agt 2026
CVE-2026-79019 google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,48%	25 Agt 2026
CVE-2026-79018 google chrome Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secu...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-79017 google chrome Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chrom...	6.5 Medium	—	0,22%	25 Agt 2026
CVE-2026-79016 google chrome Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security se...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-79015 google chrome Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page....	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79014 google chrome Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cr...	4.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-79013 google chrome Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium...	5.9 Medium	—	0,32%	25 Agt 2026
CVE-2026-79012 google chrome Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-79011 google chrome UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...	8.1 High	—	0,33%	25 Agt 2026
CVE-2026-79010 google chrome Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-79009 google chrome UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79008 google chrome Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially e...	8.3 High	—	0,43%	25 Agt 2026
CVE-2026-79007 google chrome Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outsid...	3.1 Low	—	0,25%	25 Agt 2026
CVE-2026-79006 google chrome Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-79005 google chrome Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origi...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79004 google chrome Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox...	3.4 Low	—	0,23%	25 Agt 2026
CVE-2026-79003 google chrome Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via...	4.3 Medium	—	0,24%	25 Agt 2026
CVE-2026-79002 google chrome Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolati...	3.1 Low	—	0,23%	25 Agt 2026
CVE-2026-79001 google chrome Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social en...	5.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-79000 google chrome Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web o...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-78999 google chrome Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged socia...	8.3 High	—	0,39%	25 Agt 2026
CVE-2026-78991 google chrome Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information vi...	5.3 Medium	—	0,23%	25 Agt 2026
CVE-2026-78990 google chrome Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-78989 google chrome Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,56%	25 Agt 2026
CVE-2026-78987 google chrome Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sever...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-78986 google chrome Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origi...	3.1 Low	—	0,25%	25 Agt 2026
CVE-2026-78985 google chrome Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitr...	9.6 Critical	—	0,50%	25 Agt 2026
CVE-2026-78984 google chrome Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outsid...	3.4 Low	—	0,25%	25 Agt 2026
CVE-2026-78983 google chrome Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the s...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-78981 google chrome Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. (Ch...	6.5 Medium	—	0,24%	25 Agt 2026
CVE-2026-78980 google chrome Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a...	4.3 Medium	—	0,25%	25 Agt 2026
CVE-2026-78979 google chrome Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a cra...	4.3 Medium	—	0,21%	25 Agt 2026
CVE-2026-78978 google chrome Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...	8.8 High	—	0,46%	25 Agt 2026
CVE-2026-78977 google chrome Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted...	6.5 Medium	—	0,35%	25 Agt 2026
CVE-2026-78976 google chrome Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web ori...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-78975 google chrome Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securi...	6.5 Medium	—	0,31%	25 Agt 2026
CVE-2026-78974 google chrome UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access rest...	5.4 Medium	—	0,23%	25 Agt 2026
CVE-2026-78969 google chrome Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium sec...	6.5 Medium	—	0,35%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.