Katalog CVE (hal. 826)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.229 (Critical 36.653 · High 106.363 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.251–41.300 dari 266.229 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-17967 google chrome Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....	8.8 High	—	0,35%	30 Jul 2026
CVE-2026-17966 google chrome Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process mem...	6.2 Medium	—	0,13%	30 Jul 2026
CVE-2026-17965 google chrome Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17964 google chrome Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium sec...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17963 google chrome Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17962 google chrome Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page...	6.1 Medium	—	0,22%	30 Jul 2026
CVE-2026-17961 google chrome Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML...	4.3 Medium	—	0,24%	30 Jul 2026
CVE-2026-17960 google chrome Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17959 google chrome Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium sec...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17958 google chrome Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17957 google chrome Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17956 google chrome Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML...	8.8 High	—	0,40%	30 Jul 2026
CVE-2026-17955 google chrome Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17954 google chrome Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. (Chromium security severity:...	4.3 Medium	—	0,20%	30 Jul 2026
CVE-2026-17953 google chrome Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HT...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17952 google chrome Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary...	7.5 High	—	0,26%	30 Jul 2026
CVE-2026-17951 google chrome Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromiu...	8.8 High	—	0,37%	30 Jul 2026
CVE-2026-17950 google chrome Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. (Chr...	8.8 High	—	0,37%	30 Jul 2026
CVE-2026-17949 google chrome Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,28%	30 Jul 2026
CVE-2026-17948 google chrome Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a...	7.5 High	—	0,27%	30 Jul 2026
CVE-2026-17947 google chrome Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17946 google chrome Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive infor...	6.5 Medium	—	0,35%	30 Jul 2026
CVE-2026-17945 google chrome Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to per...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17944 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HT...	4.3 Medium	—	0,24%	30 Jul 2026
CVE-2026-17943 google chrome Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chrom...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17942 google chrome Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium sec...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17941 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17940 google chrome Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17939 google chrome Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network tra...	4.3 Medium	—	0,23%	30 Jul 2026
CVE-2026-17938 google chrome Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17937 google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted H...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17936 google chrome Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypas...	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17935 google chrome Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chro...	8.8 High	—	0,45%	30 Jul 2026
CVE-2026-17934 google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted H...	4.3 Medium	—	0,25%	30 Jul 2026
CVE-2026-17933 google chrome Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17932 google chrome Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory...	5.5 Medium	—	0,14%	30 Jul 2026
CVE-2026-17931 google chrome Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chr...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17930 google chrome Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to per...	7.5 High	—	0,32%	30 Jul 2026
CVE-2026-17929 google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious...	6.5 Medium	—	0,27%	30 Jul 2026
CVE-2026-17928 google chrome Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromiu...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17927 google chrome Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cros...	4.3 Medium	—	0,16%	30 Jul 2026
CVE-2026-17926 google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI ges...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17925 google chrome Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (C...	4.3 Medium	—	0,20%	30 Jul 2026
CVE-2026-17924 google chrome Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape v...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17923 google chrome Policy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted domain name. (Chromium secur...	6.5 Medium	—	0,27%	30 Jul 2026
CVE-2026-17922 google chrome Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium...	8.8 High	—	0,44%	30 Jul 2026
CVE-2026-17921 google chrome Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to byp...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17920 google chrome Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a...	8.8 High	—	0,30%	30 Jul 2026
CVE-2026-17919 google chrome Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via physical access...	6.8 Medium	—	0,16%	30 Jul 2026
CVE-2026-17918 google chrome Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec...	8.8 High	—	0,41%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.