Katalog CVE (hal. 810)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.209 (Critical 36.641 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 40.451–40.500 dari 266.209 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-58061 bouncycastle bc-java, bouncycastle bouncy castle for java lts +1 lainnya In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73....	7.5 High	—	0,28%	3 Agt 2026
CVE-2026-58060 bouncycastle bc-java, bouncycastle bouncy castle for java lts +1 lainnya In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before...	7.5 High	—	0,62%	3 Agt 2026
CVE-2026-58059 bouncycastle bc-java, bouncycastle bouncy castle for java lts +1 lainnya In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73...	7.5 High	—	0,49%	3 Agt 2026
CVE-2026-20498 mediatek mt6991 firmware, mediatek mt8768 firmware +8 lainnya In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has alr...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20497 mediatek mt6989 firmware, mediatek mt8755 firmware +9 lainnya In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obt...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20496 mediatek mt6983 firmware, mediatek mt8676 firmware +15 lainnya In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtai...	4.4 Medium	—	0,15%	3 Agt 2026
CVE-2026-20495 mediatek mt7925 firmware, mediatek mt7927 firmware +4 lainnya In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privile...	7.8 High	—	0,15%	3 Agt 2026
CVE-2026-20494 mediatek mt6890 firmware, mediatek mt6988 firmware +1 lainnya In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained t...	5.5 Medium	—	0,15%	3 Agt 2026
CVE-2026-20493 mediatek mt6890 firmware, mediatek mt6988 firmware +1 lainnya In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the S...	4.4 Medium	—	0,14%	3 Agt 2026
CVE-2026-20492 mediatek mt6990 firmware, mediatek mt2735 firmware +4 lainnya In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed....	5.5 Medium	—	0,11%	3 Agt 2026
CVE-2026-20491 mediatek mt2735 firmware, mediatek mt2737 firmware +3 lainnya In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User i...	5.5 Medium	—	0,15%	3 Agt 2026
CVE-2026-20490 mediatek mt6813 firmware, mediatek mt6982vb firmware +3 lainnya In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the Sy...	4.4 Medium	—	0,14%	3 Agt 2026
CVE-2026-20489 mediatek mt6991 firmware, mediatek mt6993 firmware +15 lainnya In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtain...	4.4 Medium	—	0,16%	3 Agt 2026
CVE-2026-20488 mediatek mt6991 firmware, mediatek mt6993 firmware +15 lainnya In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obt...	4.4 Medium	—	0,16%	3 Agt 2026
CVE-2026-20486 mediatek mt8910 firmware, mediatek mt2718 firmware +9 lainnya In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obt...	6.7 Medium	—	0,17%	3 Agt 2026
CVE-2026-20485 mediatek mt6993 firmware In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained...	6.0 Medium	—	0,16%	3 Agt 2026
CVE-2026-20484 mediatek mt8799 firmware, mediatek mt6739 firmware +37 lainnya In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obt...	4.4 Medium	—	0,16%	3 Agt 2026
CVE-2026-20483 mediatek mt8893 firmware, mediatek mt6739 firmware +33 lainnya In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution...	7.7 High	—	0,17%	3 Agt 2026
CVE-2026-20482 mediatek mt8532 firmware, mediatek mt7902 firmware +3 lainnya In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execut...	6.5 Medium	—	0,30%	3 Agt 2026
CVE-2026-20481 mediatek mt6989 firmware, mediatek mt8755 firmware +12 lainnya In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obt...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20480 mediatek mt6880 firmware, mediatek mt2735 firmware +5 lainnya In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. Use...	5.5 Medium	—	0,15%	3 Agt 2026
CVE-2026-20479 mediatek mt2735 firmware, mediatek mt6833 firmware +17 lainnya In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station...	7.5 High	—	0,71%	3 Agt 2026
CVE-2026-20478 mediatek mt2735 firmware, mediatek mt2737 firmware +4 lainnya In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. Use...	5.5 Medium	—	0,15%	3 Agt 2026
CVE-2026-20477 mediatek mt8910 firmware, mediatek mt6991 firmware +8 lainnya In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtai...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20476 mediatek mt6988 firmware, mediatek mt6813 firmware +1 lainnya In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User inte...	5.5 Medium	—	0,15%	3 Agt 2026
CVE-2026-20475 mediatek mt8910 firmware, mediatek mt6991 firmware +15 lainnya In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtai...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20474 mediatek mt6991 firmware, mediatek mt6993 firmware +15 lainnya In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtaine...	6.0 Medium	—	0,13%	3 Agt 2026
CVE-2026-20473 mediatek mt6991 firmware, mediatek mt8910 firmware +15 lainnya In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20472 In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the Sy...	4.4 Medium	—	0,14%	3 Agt 2026
CVE-2026-20471 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device...	4.6 Medium	—	0,23%	3 Agt 2026
CVE-2026-20470 In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution p...	6.2 Medium	—	0,17%	3 Agt 2026
CVE-2026-20469 In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has al...	6.0 Medium	—	0,16%	3 Agt 2026
CVE-2026-20468 In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtaine...	6.0 Medium	—	0,16%	3 Agt 2026
CVE-2026-20467 In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already ob...	6.0 Medium	—	0,17%	3 Agt 2026
CVE-2026-20466 In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical acce...	6.1 Medium	—	0,17%	3 Agt 2026
CVE-2026-20465 In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no ad...	8.1 High	—	0,31%	3 Agt 2026
CVE-2026-20464 In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already ob...	6.5 Medium	—	0,50%	3 Agt 2026
CVE-2026-18582 A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec6...	5.3 Medium	—	0,86%	3 Agt 2026
CVE-2026-8763 bouncycastle bc-java, bouncycastle bouncy castle for java lts +1 lainnya In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12,...	9.1 Critical	—	0,43%	3 Agt 2026
CVE-2026-65875 BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by...	7.1 High	—	0,26%	3 Agt 2026
CVE-2026-59652 bouncycastle bc-java In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.	6.5 Medium	—	0,30%	3 Agt 2026
CVE-2026-59651 bouncycastle bc-java, bouncycastle bouncy castle for java lts In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.1...	7.5 High	—	0,20%	3 Agt 2026
CVE-2026-59650 bouncycastle bc-java, bouncycastle bouncy castle for java lts In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.	9.1 Critical	—	0,34%	3 Agt 2026
CVE-2026-59649 bouncycastle bc-java, bouncycastle bcpg-fips +1 lainnya In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2...	7.5 High	—	0,49%	3 Agt 2026
CVE-2026-59648 bouncycastle bc-java, bouncycastle bcpg-fips +1 lainnya In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, an...	5.3 Medium	—	0,42%	3 Agt 2026
CVE-2026-59647 bouncycastle bc-java, bouncycastle bcpkix-fips +1 lainnya In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bou...	5.3 Medium	—	0,42%	3 Agt 2026
CVE-2026-59646 bouncycastle bc-java, bouncycastle bctls-fips +1 lainnya In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before...	7.5 High	—	0,47%	3 Agt 2026
CVE-2026-59645 bouncycastle bc-java, bouncycastle bcutil-fips +1 lainnya In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS...	7.5 High	—	0,41%	3 Agt 2026
CVE-2026-59644 bouncycastle bc-java In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.	7.5 High	—	0,49%	3 Agt 2026
CVE-2026-59643 bouncycastle bc-java, bouncycastle bcpg-fips In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg...	7.5 High	—	0,24%	3 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.