Katalog CVE (hal. 825)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.229 (Critical 36.653 · High 106.363 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.201–41.250 dari 266.229 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-18017 google chrome Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-18016 google chrome Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page....	4.3 Medium	—	0,20%	30 Jul 2026
CVE-2026-18015 google chrome Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-18014 google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious...	6.5 Medium	—	0,27%	30 Jul 2026
CVE-2026-18013 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-18012 google chrome Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium se...	8.8 High	—	0,38%	30 Jul 2026
CVE-2026-18011 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from pr...	2.4 Low	—	0,13%	30 Jul 2026
CVE-2026-18010 google chrome Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromiu...	4.3 Medium	—	0,23%	30 Jul 2026
CVE-2026-18009 google chrome Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network tra...	4.3 Medium	—	0,23%	30 Jul 2026
CVE-2026-18008 google chrome Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium...	4.3 Medium	—	0,23%	30 Jul 2026
CVE-2026-18007 google chrome Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromi...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-18006 google chrome Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoof...	4.3 Medium	—	0,15%	30 Jul 2026
CVE-2026-18005 google chrome Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...	6.5 Medium	—	0,32%	30 Jul 2026
CVE-2026-18004 google chrome Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-18003 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-18002 google chrome Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to po...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-18001 google chrome Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...	6.5 Medium	—	0,32%	30 Jul 2026
CVE-2026-18000 google chrome Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17999 google chrome Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium securi...	6.5 Medium	—	0,23%	30 Jul 2026
CVE-2026-17998 google chrome Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofi...	4.3 Medium	—	0,19%	30 Jul 2026
CVE-2026-17997 google chrome Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17996 google chrome Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. (C...	6.2 Medium	—	0,13%	30 Jul 2026
CVE-2026-17995 google chrome Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium se...	8.1 High	—	0,33%	30 Jul 2026
CVE-2026-17994 google chrome Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pa...	4.3 Medium	—	0,24%	30 Jul 2026
CVE-2026-17993 google chrome Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security sever...	7.0 High	—	0,09%	30 Jul 2026
CVE-2026-17992 google chrome Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via...	6.5 Medium	—	0,26%	30 Jul 2026
CVE-2026-17991 google chrome Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17990 google chrome Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten...	9.6 Critical	—	0,32%	30 Jul 2026
CVE-2026-17989 google chrome Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...	8.8 High	—	0,45%	30 Jul 2026
CVE-2026-17988 google chrome Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to byp...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17987 google chrome Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...	9.6 Critical	—	0,32%	30 Jul 2026
CVE-2026-17986 google chrome Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same ori...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-17985 google chrome Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium se...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17984 google chrome Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Ch...	3.3 Low	—	0,12%	30 Jul 2026
CVE-2026-17983 google chrome Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17982 google chrome Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page....	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17981 google chrome Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17980 google chrome Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to...	3.1 Low	—	0,23%	30 Jul 2026
CVE-2026-17979 google chrome Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi...	7.5 High	—	0,29%	30 Jul 2026
CVE-2026-17978 google chrome Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process m...	5.3 Medium	—	0,28%	30 Jul 2026
CVE-2026-17977 google chrome Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low...	4.3 Medium	—	0,22%	30 Jul 2026
CVE-2026-17976 google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass...	4.3 Medium	—	0,19%	30 Jul 2026
CVE-2026-17975 google chrome Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memo...	6.5 Medium	—	0,32%	30 Jul 2026
CVE-2026-17974 google chrome Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (C...	6.5 Medium	—	0,23%	30 Jul 2026
CVE-2026-17973 google chrome Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process mem...	5.5 Medium	—	0,13%	30 Jul 2026
CVE-2026-17972 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17971 google chrome Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted H...	8.8 High	—	0,37%	30 Jul 2026
CVE-2026-17970 google chrome Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofin...	4.3 Medium	—	0,19%	30 Jul 2026
CVE-2026-17969 google chrome Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML...	8.8 High	—	0,40%	30 Jul 2026
CVE-2026-17968 google chrome Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...	6.5 Medium	—	0,35%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.