Katalog CVE (hal. 827)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.229 (Critical 36.653 · High 106.363 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.301–41.350 dari 266.229 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-17917 google chrome Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a cr...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-17916 google chrome Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privileg...	7.5 High	—	0,22%	30 Jul 2026
CVE-2026-17915 google chrome Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chro...	5.4 Medium	—	0,26%	30 Jul 2026
CVE-2026-17914 google chrome Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory...	5.3 Medium	—	0,23%	30 Jul 2026
CVE-2026-17913 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	5.4 Medium	—	0,26%	30 Jul 2026
CVE-2026-17912 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HT...	4.3 Medium	—	0,24%	30 Jul 2026
CVE-2026-17911 google chrome Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17910 google chrome Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Ch...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17909 google chrome Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious...	5.3 Medium	—	0,27%	30 Jul 2026
CVE-2026-17908 google chrome Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce...	5.8 Medium	—	0,20%	30 Jul 2026
CVE-2026-17907 google chrome Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17906 google chrome Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pote...	5.8 Medium	—	0,20%	30 Jul 2026
CVE-2026-17905 google chrome Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chrom...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17904 google chrome Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Ch...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17903 google chrome Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a pr...	5.4 Medium	—	0,17%	30 Jul 2026
CVE-2026-17902 google chrome Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chr...	3.5 Low	—	0,25%	30 Jul 2026
CVE-2026-17901 google chrome Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via m...	4.3 Medium	—	0,23%	30 Jul 2026
CVE-2026-17900 google chrome Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. (C...	4.3 Medium	—	0,20%	30 Jul 2026
CVE-2026-17899 google chrome Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform p...	8.8 High	—	0,26%	30 Jul 2026
CVE-2026-17898 google chrome Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code ins...	7.5 High	—	0,27%	30 Jul 2026
CVE-2026-17897 google chrome Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17896 google chrome Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium...	7.5 High	—	0,36%	30 Jul 2026
CVE-2026-17895 google chrome Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to l...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17894 google chrome Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi...	8.8 High	—	0,35%	30 Jul 2026
CVE-2026-17893 google chrome Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...	5.8 Medium	—	0,20%	30 Jul 2026
CVE-2026-17892 google chrome Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...	6.5 Medium	—	0,32%	30 Jul 2026
CVE-2026-17891 google chrome Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san...	5.8 Medium	—	0,16%	30 Jul 2026
CVE-2026-17890 google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten...	5.8 Medium	—	0,20%	30 Jul 2026
CVE-2026-17889 google chrome Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,28%	30 Jul 2026
CVE-2026-17888 google chrome Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via maliciou...	7.1 High	—	0,21%	30 Jul 2026
CVE-2026-17887 google chrome Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit...	7.5 High	—	0,30%	30 Jul 2026
CVE-2026-17886 google chrome Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium s...	8.8 High	—	0,35%	30 Jul 2026
CVE-2026-17885 google chrome Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17884 google chrome Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi...	8.8 High	—	0,35%	30 Jul 2026
CVE-2026-17883 google chrome Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium...	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17882 google chrome Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via...	6.5 Medium	—	0,23%	30 Jul 2026
CVE-2026-17881 google chrome Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,52%	30 Jul 2026
CVE-2026-17880 google chrome Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17879 google chrome Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17878 google chrome Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page....	6.1 Medium	—	0,22%	30 Jul 2026
CVE-2026-17877 google chrome Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via maliciou...	8.4 High	—	0,13%	30 Jul 2026
CVE-2026-17876 google chrome Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17875 google chrome Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium se...	8.8 High	—	0,38%	30 Jul 2026
CVE-2026-17874 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...	5.4 Medium	—	0,26%	30 Jul 2026
CVE-2026-17873 google chrome Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a cr...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-17872 google chrome Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTM...	6.1 Medium	—	0,08%	30 Jul 2026
CVE-2026-17871 google chrome Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17870 google chrome Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via...	4.3 Medium	—	0,16%	30 Jul 2026
CVE-2026-17869 google chrome Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium s...	8.1 High	—	0,33%	30 Jul 2026
CVE-2026-17868 google chrome Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromiu...	8.8 High	—	0,33%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.