Katalog CVE (hal. 830)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.229 (Critical 36.653 · High 106.363 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.451–41.500 dari 266.229 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-17767 google chrome Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proces...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17766 google chrome Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafte...	3.3 Low	—	0,13%	30 Jul 2026
CVE-2026-17765 google chrome Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17764 google chrome Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17763 google chrome Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17762 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page....	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17761 google chrome Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML...	5.4 Medium	—	0,20%	30 Jul 2026
CVE-2026-17760 google chrome Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17759 google chrome Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte...	6.5 Medium	—	0,35%	30 Jul 2026
CVE-2026-17758 google chrome Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium...	9.6 Critical	—	0,37%	30 Jul 2026
CVE-2026-17757 google chrome Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity...	4.3 Medium	—	0,39%	30 Jul 2026
CVE-2026-17756 google chrome Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pag...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17755 google chrome Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofi...	4.3 Medium	—	0,19%	30 Jul 2026
CVE-2026-17754 google chrome Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se...	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17753 google chrome Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17752 google chrome Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium...	8.8 High	—	0,35%	30 Jul 2026
CVE-2026-17751 google chrome Inappropriate implementation in AdFilter in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML p...	8.8 High	—	0,40%	30 Jul 2026
CVE-2026-17750 google chrome Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...	7.1 High	—	0,29%	30 Jul 2026
CVE-2026-17749 google chrome Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension...	9.6 Critical	—	0,26%	30 Jul 2026
CVE-2026-17748 google chrome Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isola...	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17747 google chrome Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce...	4.2 Medium	—	0,24%	30 Jul 2026
CVE-2026-17746 google chrome Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e...	5.8 Medium	—	0,19%	30 Jul 2026
CVE-2026-17745 google chrome Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc...	5.8 Medium	—	0,27%	30 Jul 2026
CVE-2026-17744 google chrome Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafte...	7.1 High	—	0,21%	30 Jul 2026
CVE-2026-17743 google chrome Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page....	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17742 google chrome Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17741 google chrome Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape...	7.1 High	—	0,22%	30 Jul 2026
CVE-2026-17740 google chrome Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,39%	30 Jul 2026
CVE-2026-17739 google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject...	4.2 Medium	—	0,15%	30 Jul 2026
CVE-2026-17738 google chrome Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17737 google chrome Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a...	5.0 Medium	—	0,19%	30 Jul 2026
CVE-2026-17736 google chrome Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proces...	5.8 Medium	—	0,20%	30 Jul 2026
CVE-2026-17735 google chrome Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent...	8.7 High	—	0,32%	30 Jul 2026
CVE-2026-17734 google chrome Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML p...	5.4 Medium	—	0,22%	30 Jul 2026
CVE-2026-17733 google chrome Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17732 google chrome Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17731 google chrome Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17730 google chrome Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to l...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17729 google chrome Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memor...	8.8 High	—	0,37%	30 Jul 2026
CVE-2026-17728 google chrome Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML...	5.4 Medium	—	0,22%	30 Jul 2026
CVE-2026-17727 google chrome Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page....	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17726 google chrome Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (C...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17725 google chrome Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...	8.8 High	—	0,45%	30 Jul 2026
CVE-2026-17724 google chrome Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chrom...	4.2 Medium	—	0,17%	30 Jul 2026
CVE-2026-17723 google chrome Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san...	8.3 High	—	0,30%	30 Jul 2026
CVE-2026-17722 google chrome Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per...	8.3 High	—	0,30%	30 Jul 2026
CVE-2026-17721 google chrome Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium...	9.6 Critical	—	0,44%	30 Jul 2026
CVE-2026-17720 google chrome Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-orig...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17719 google chrome Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17718 google chrome Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...	9.6 Critical	—	0,44%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.