Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 28 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-17867
google chrome
Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted...
|
7.1 High | — | 0,22% | 30 Jul 2026 |
|
CVE-2026-17866
google chrome
Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb...
|
5.8 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17865
google chrome
Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially pe...
|
9.6 Critical | — | 0,35% | 30 Jul 2026 |
|
CVE-2026-17864
google chrome
Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious f...
|
7.8 High | — | 0,12% | 30 Jul 2026 |
|
CVE-2026-17863
google chrome
Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file....
|
7.8 High | — | 0,13% | 30 Jul 2026 |
|
CVE-2026-17862
google chrome
Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chro...
|
7.8 High | — | 0,14% | 30 Jul 2026 |
|
CVE-2026-17861
google chrome
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a mali...
|
7.8 High | — | 0,13% | 30 Jul 2026 |
|
CVE-2026-17860
google chrome
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL...
|
3.3 Low | — | 0,12% | 30 Jul 2026 |
|
CVE-2026-17859
google chrome
Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se...
|
4.3 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17858
google chrome
Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur...
|
4.3 Medium | — | 0,28% | 30 Jul 2026 |
|
CVE-2026-17857
google chrome
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium sec...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17856
google chrome
Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p...
|
9.6 Critical | — | 0,35% | 30 Jul 2026 |
|
CVE-2026-17855
google chrome
Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...
|
9.6 Critical | — | 0,28% | 30 Jul 2026 |
|
CVE-2026-17854
google chrome
Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromiu...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17853
google chrome
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or H...
|
6.1 Medium | — | 0,22% | 30 Jul 2026 |
|
CVE-2026-17852
google chrome
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chro...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17851
google chrome
Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-orig...
|
4.3 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17850
google chrome
Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chrom...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17849
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via...
|
4.3 Medium | — | 0,23% | 30 Jul 2026 |
|
CVE-2026-17848
google chrome
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium s...
|
9.6 Critical | — | 0,32% | 30 Jul 2026 |
|
CVE-2026-17847
google chrome
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafte...
|
9.6 Critical | — | 0,37% | 30 Jul 2026 |
|
CVE-2026-17846
google chrome
Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17845
google chrome
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page....
|
6.1 Medium | — | 0,22% | 30 Jul 2026 |
|
CVE-2026-17844
google chrome
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via...
|
4.3 Medium | — | 0,16% | 30 Jul 2026 |
|
CVE-2026-17843
google chrome
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17842
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gest...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17841
google chrome
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit...
|
6.5 Medium | — | 0,23% | 30 Jul 2026 |
|
CVE-2026-17840
google chrome
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium securit...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17839
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17838
google chrome
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chro...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17837
google chrome
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten...
|
9.6 Critical | — | 0,35% | 30 Jul 2026 |
|
CVE-2026-17836
google chrome
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...
|
8.8 High | — | 0,41% | 30 Jul 2026 |
|
CVE-2026-17835
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17834
google chrome
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pote...
|
9.6 Critical | — | 0,35% | 30 Jul 2026 |
|
CVE-2026-17833
google chrome
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17832
google chrome
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...
|
9.6 Critical | — | 0,34% | 30 Jul 2026 |
|
CVE-2026-17831
google chrome
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perf...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17830
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HT...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17829
google chrome
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromiu...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17828
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17827
google chrome
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page....
|
6.1 Medium | — | 0,22% | 30 Jul 2026 |
|
CVE-2026-17826
google chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gest...
|
3.1 Low | — | 0,18% | 30 Jul 2026 |
|
CVE-2026-17825
google chrome
Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a cra...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17824
google chrome
Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17823
google chrome
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17822
google chrome
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit...
|
6.5 Medium | — | 0,23% | 30 Jul 2026 |
|
CVE-2026-17821
google chrome
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass...
|
6.5 Medium | — | 0,23% | 30 Jul 2026 |
|
CVE-2026-17820
google chrome
Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17819
google chrome
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17818
google chrome
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML pa...
|
6.1 Medium | — | 0,22% | 30 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.