Katalog CVE (hal. 582)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.973 (Critical 36.402 · High 105.447 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 29.051–29.100 dari 263.973 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-78968 google chrome Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar...	6.5 Medium	—	0,28%	25 Agt 2026
CVE-2026-78967 google chrome Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restri...	6.5 Medium	—	0,29%	25 Agt 2026
CVE-2026-78966 google chrome Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium s...	4.3 Medium	—	0,33%	25 Agt 2026
CVE-2026-78965 google chrome Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,45%	25 Agt 2026
CVE-2026-78964 google chrome Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-78963 google chrome Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft...	8.8 High	—	0,41%	25 Agt 2026
CVE-2026-78962 google chrome Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via...	4.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-78961 google chrome Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineerin...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-78960 google chrome Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted C...	6.5 Medium	—	0,29%	25 Agt 2026
CVE-2026-78959 google chrome Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system acces...	6.5 Medium	—	0,37%	25 Agt 2026
CVE-2026-78958 google chrome Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-orig...	3.1 Low	—	0,34%	25 Agt 2026
CVE-2026-78957 google chrome Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium securi...	5.5 Medium	—	0,12%	25 Agt 2026
CVE-2026-78956 google chrome Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a cr...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-78955 google chrome Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML pag...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-78954 google chrome Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin poli...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-78953 google chrome Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation...	3.1 Low	—	0,21%	25 Agt 2026
CVE-2026-78952 google chrome Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitr...	8.3 High	—	0,40%	25 Agt 2026
CVE-2026-78951 google chrome Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-78950 google chrome Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML p...	8.8 High	—	0,52%	25 Agt 2026
CVE-2026-78949 google chrome Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (C...	2.9 Low	—	0,11%	25 Agt 2026
CVE-2026-78948 google chrome Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu...	9.6 Critical	—	0,51%	25 Agt 2026
CVE-2026-78947 google chrome Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted C...	6.5 Medium	—	0,31%	25 Agt 2026
CVE-2026-78946 google chrome Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,26%	25 Agt 2026
CVE-2026-78945 google chrome Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-78944 google chrome Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox vi...	8.8 High	—	0,38%	25 Agt 2026
CVE-2026-78943 google chrome Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engin...	3.1 Low	—	0,26%	25 Agt 2026
CVE-2026-78942 google chrome Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chrom...	4.3 Medium	—	0,28%	25 Agt 2026
CVE-2026-78941 google chrome Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted...	3.1 Low	—	0,24%	25 Agt 2026
CVE-2026-78940 google chrome Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securi...	4.3 Medium	—	0,33%	25 Agt 2026
CVE-2026-78939 google chrome Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-78938 google chrome Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-78937 google chrome Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-78936 google chrome Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (C...	2.9 Low	—	0,11%	25 Agt 2026
CVE-2026-78935 google chrome Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sand...	9.6 Critical	—	0,50%	25 Agt 2026
CVE-2026-78934 google chrome Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox v...	8.3 High	—	0,32%	25 Agt 2026
CVE-2026-78915 google chrome Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox...	7.5 High	—	0,14%	25 Agt 2026
CVE-2026-78914 google chrome Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C...	6.5 Medium	—	0,27%	25 Agt 2026
CVE-2026-78913 google chrome Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted netwo...	8.1 High	—	0,42%	25 Agt 2026
CVE-2026-78912 google chrome UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severit...	5.4 Medium	—	0,26%	25 Agt 2026
CVE-2026-78911 google chrome Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering...	8.3 High	—	0,39%	25 Agt 2026
CVE-2026-78910 google chrome Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...	8.8 High	—	0,45%	25 Agt 2026
CVE-2026-78909 google chrome Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via...	9.6 Critical	—	0,46%	25 Agt 2026
CVE-2026-78908 google chrome Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sever...	4.3 Medium	—	0,27%	25 Agt 2026
CVE-2026-78907 google chrome Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium s...	6.5 Medium	—	0,32%	25 Agt 2026
CVE-2026-78906 google chrome Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...	7.5 High	—	0,42%	25 Agt 2026
CVE-2026-78905 google chrome Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...	8.8 High	—	0,62%	25 Agt 2026
CVE-2026-78904 google chrome Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...	9.6 Critical	—	0,62%	25 Agt 2026
CVE-2026-78903 google chrome Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi...	3.1 Low	—	0,30%	25 Agt 2026
CVE-2026-78901 google chrome Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...	7.5 High	—	0,29%	25 Agt 2026
CVE-2026-78900 google chrome Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft...	9.6 Critical	—	0,46%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.