Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 28 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-17817
google chrome
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17816
google chrome
Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform...
|
7.5 High | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17815
google chrome
Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromiu...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17814
google chrome
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions vi...
|
6.5 Medium | — | 0,30% | 30 Jul 2026 |
|
CVE-2026-17813
google chrome
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted...
|
6.5 Medium | — | 0,30% | 30 Jul 2026 |
|
CVE-2026-17812
google chrome
Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chro...
|
5.4 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17811
google chrome
Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chr...
|
7.1 High | — | 0,23% | 30 Jul 2026 |
|
CVE-2026-17810
google chrome
Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity...
|
4.3 Medium | — | 0,28% | 30 Jul 2026 |
|
CVE-2026-17809
google chrome
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pot...
|
5.8 Medium | — | 0,20% | 30 Jul 2026 |
|
CVE-2026-17808
google chrome
Uninitialized Use in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur...
|
4.3 Medium | — | 0,28% | 30 Jul 2026 |
|
CVE-2026-17807
google chrome
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...
|
8.8 High | — | 0,41% | 30 Jul 2026 |
|
CVE-2026-17806
google chrome
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pot...
|
5.8 Medium | — | 0,20% | 30 Jul 2026 |
|
CVE-2026-17805
google chrome
Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML...
|
6.5 Medium | — | 0,30% | 30 Jul 2026 |
|
CVE-2026-17804
google chrome
Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...
|
9.6 Critical | — | 0,35% | 30 Jul 2026 |
|
CVE-2026-17803
google chrome
Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...
|
9.6 Critical | — | 0,32% | 30 Jul 2026 |
|
CVE-2026-17802
google chrome
Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C...
|
4.3 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17801
google chrome
Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (...
|
9.6 Critical | — | 0,43% | 30 Jul 2026 |
|
CVE-2026-17800
google chrome
Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process...
|
6.5 Medium | — | 0,32% | 30 Jul 2026 |
|
CVE-2026-17799
google chrome
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a...
|
5.4 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17798
google chrome
Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securi...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17797
google chrome
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page....
|
6.1 Medium | — | 0,22% | 30 Jul 2026 |
|
CVE-2026-17796
google chrome
Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memor...
|
6.5 Medium | — | 0,32% | 30 Jul 2026 |
|
CVE-2026-17795
google chrome
Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-orig...
|
4.3 Medium | — | 0,34% | 30 Jul 2026 |
|
CVE-2026-17794
google chrome
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process...
|
4.3 Medium | — | 0,25% | 30 Jul 2026 |
|
CVE-2026-17793
google chrome
Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chr...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17792
google chrome
Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (C...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17791
google chrome
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perfo...
|
6.5 Medium | — | 0,29% | 30 Jul 2026 |
|
CVE-2026-17790
google chrome
Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...
|
4.3 Medium | — | 0,37% | 30 Jul 2026 |
|
CVE-2026-17789
google chrome
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions vi...
|
6.5 Medium | — | 0,27% | 30 Jul 2026 |
|
CVE-2026-17788
google chrome
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17787
google chrome
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium...
|
6.5 Medium | — | 0,24% | 30 Jul 2026 |
|
CVE-2026-17786
google chrome
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension t...
|
8.8 High | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17785
google chrome
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...
|
4.3 Medium | — | 0,39% | 30 Jul 2026 |
|
CVE-2026-17784
google chrome
Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox...
|
8.8 High | — | 0,35% | 30 Jul 2026 |
|
CVE-2026-17783
google chrome
Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17782
google chrome
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a craf...
|
4.3 Medium | — | 0,25% | 30 Jul 2026 |
|
CVE-2026-17781
google chrome
Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross...
|
4.3 Medium | — | 0,19% | 30 Jul 2026 |
|
CVE-2026-17780
google chrome
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML p...
|
6.3 Medium | — | 0,22% | 30 Jul 2026 |
|
CVE-2026-17779
google chrome
Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromi...
|
5.4 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17778
google chrome
Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension....
|
8.8 High | — | 0,38% | 30 Jul 2026 |
|
CVE-2026-17777
google chrome
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17776
google chrome
Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca...
|
5.8 Medium | — | 0,19% | 30 Jul 2026 |
|
CVE-2026-17775
google chrome
Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro...
|
4.3 Medium | — | 0,21% | 30 Jul 2026 |
|
CVE-2026-17774
google chrome
Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially explo...
|
7.5 High | — | 0,18% | 30 Jul 2026 |
|
CVE-2026-17773
google chrome
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C...
|
4.3 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17772
google chrome
Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium s...
|
4.3 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17771
google chrome
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity...
|
4.3 Medium | — | 0,39% | 30 Jul 2026 |
|
CVE-2026-17770
google chrome
Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san...
|
5.8 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17769
google chrome
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C...
|
4.3 Medium | — | 0,26% | 30 Jul 2026 |
|
CVE-2026-17768
google chrome
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pot...
|
9.6 Critical | — | 0,35% | 30 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.