Katalog CVE (hal. 831)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.261 (Critical 36.656 · High 106.368 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.501–41.550 dari 266.261 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-17749 google chrome Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension...	9.6 Critical	—	0,26%	30 Jul 2026
CVE-2026-17748 google chrome Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isola...	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17747 google chrome Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce...	4.2 Medium	—	0,24%	30 Jul 2026
CVE-2026-17746 google chrome Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e...	5.8 Medium	—	0,19%	30 Jul 2026
CVE-2026-17745 google chrome Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc...	5.8 Medium	—	0,27%	30 Jul 2026
CVE-2026-17744 google chrome Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafte...	7.1 High	—	0,21%	30 Jul 2026
CVE-2026-17743 google chrome Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page....	6.5 Medium	—	0,24%	30 Jul 2026
CVE-2026-17742 google chrome Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17741 google chrome Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape...	7.1 High	—	0,22%	30 Jul 2026
CVE-2026-17740 google chrome Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,39%	30 Jul 2026
CVE-2026-17739 google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject...	4.2 Medium	—	0,15%	30 Jul 2026
CVE-2026-17738 google chrome Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17737 google chrome Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a...	5.0 Medium	—	0,19%	30 Jul 2026
CVE-2026-17736 google chrome Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proces...	5.8 Medium	—	0,20%	30 Jul 2026
CVE-2026-17735 google chrome Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent...	8.7 High	—	0,32%	30 Jul 2026
CVE-2026-17734 google chrome Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML p...	5.4 Medium	—	0,22%	30 Jul 2026
CVE-2026-17733 google chrome Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17732 google chrome Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17731 google chrome Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17730 google chrome Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to l...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17729 google chrome Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memor...	8.8 High	—	0,37%	30 Jul 2026
CVE-2026-17728 google chrome Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML...	5.4 Medium	—	0,22%	30 Jul 2026
CVE-2026-17727 google chrome Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page....	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17726 google chrome Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (C...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17725 google chrome Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...	8.8 High	—	0,45%	30 Jul 2026
CVE-2026-17724 google chrome Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chrom...	4.2 Medium	—	0,17%	30 Jul 2026
CVE-2026-17723 google chrome Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san...	8.3 High	—	0,30%	30 Jul 2026
CVE-2026-17722 google chrome Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per...	8.3 High	—	0,30%	30 Jul 2026
CVE-2026-17721 google chrome Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium...	9.6 Critical	—	0,44%	30 Jul 2026
CVE-2026-17720 google chrome Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-orig...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17719 google chrome Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17718 google chrome Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...	9.6 Critical	—	0,44%	30 Jul 2026
CVE-2026-17717 google chrome Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec...	9.6 Critical	—	0,51%	30 Jul 2026
CVE-2026-17716 google chrome Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic. (Chromium...	8.4 High	—	0,14%	30 Jul 2026
CVE-2026-17715 google chrome Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak...	3.1 Low	—	0,18%	30 Jul 2026
CVE-2026-17714 google chrome Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted...	6.5 Medium	—	0,52%	30 Jul 2026
CVE-2026-17713 google chrome Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17712 google chrome Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securi...	8.8 High	—	0,45%	30 Jul 2026
CVE-2026-17711 google chrome Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap...	9.6 Critical	—	0,28%	30 Jul 2026
CVE-2026-17710 google chrome Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17709 google chrome Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap...	9.6 Critical	—	0,28%	30 Jul 2026
CVE-2026-17708 google chrome Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17707 google chrome Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sen...	6.5 Medium	—	0,35%	30 Jul 2026
CVE-2026-17706 google chrome Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17705 google chrome Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17704 google chrome Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	9.6 Critical	—	0,51%	30 Jul 2026
CVE-2026-17703 google chrome Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17702 google chrome Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data...	3.1 Low	—	0,31%	30 Jul 2026
CVE-2026-17701 google chrome Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to p...	9.6 Critical	—	0,47%	30 Jul 2026
CVE-2026-17700 google chrome Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cro...	4.3 Medium	—	0,26%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.