Katalog CVE (hal. 832)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.261 (Critical 36.656 · High 106.368 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.551–41.600 dari 266.261 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-17699 google chrome Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security...	8.6 High	—	0,14%	30 Jul 2026
CVE-2026-17698 google chrome Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML...	7.5 High	—	0,27%	30 Jul 2026
CVE-2026-17697 google chrome Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...	9.6 Critical	—	0,55%	30 Jul 2026
CVE-2026-17696 google chrome Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s...	4.3 Medium	—	0,26%	30 Jul 2026
CVE-2026-17695 google chrome Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML...	9.6 Critical	—	0,48%	30 Jul 2026
CVE-2026-17694 google chrome Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secu...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17693 google chrome Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromi...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17692 google chrome Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perfor...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17691 google chrome Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page....	9.6 Critical	—	0,48%	30 Jul 2026
CVE-2026-17690 google chrome Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML...	6.5 Medium	—	0,25%	30 Jul 2026
CVE-2026-17689 google chrome Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	4.3 Medium	—	0,45%	30 Jul 2026
CVE-2026-17688 google chrome Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17687 google chrome Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	9.6 Critical	—	0,56%	30 Jul 2026
CVE-2026-17686 google chrome Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypa...	8.1 High	—	0,33%	30 Jul 2026
CVE-2026-17685 google chrome Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17684 google chrome Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17683 google chrome Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi...	6.5 Medium	—	0,47%	30 Jul 2026
CVE-2026-17682 google chrome Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca...	9.6 Critical	—	0,51%	30 Jul 2026
CVE-2026-17681 google chrome Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend...	9.6 Critical	—	0,39%	30 Jul 2026
CVE-2026-17680 google chrome Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perfor...	9.6 Critical	—	0,37%	30 Jul 2026
CVE-2026-17679 google chrome Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...	6.5 Medium	—	0,32%	30 Jul 2026
CVE-2026-17678 google chrome Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es...	8.8 High	—	0,51%	30 Jul 2026
CVE-2026-17677 google chrome Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted H...	8.8 High	—	0,48%	30 Jul 2026
CVE-2026-17676 google chrome Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially...	9.6 Critical	—	0,49%	30 Jul 2026
CVE-2026-17675 google chrome Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e...	9.6 Critical	—	0,43%	30 Jul 2026
CVE-2026-17674 google chrome Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromiu...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-17673 google chrome Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17672 google chrome Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pot...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17671 google chrome Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentia...	9.6 Critical	—	0,51%	30 Jul 2026
CVE-2026-17670 google chrome Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17669 google chrome Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a craf...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17668 google chrome Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	6.5 Medium	—	0,52%	30 Jul 2026
CVE-2026-17667 google chrome Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit...	6.5 Medium	—	0,52%	30 Jul 2026
CVE-2026-17666 google chrome Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via m...	9.1 Critical	—	0,17%	30 Jul 2026
CVE-2026-17665 google chrome Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17664 google chrome Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cr...	6.5 Medium	—	0,39%	30 Jul 2026
CVE-2026-17663 google chrome Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...	8.3 High	—	0,32%	30 Jul 2026
CVE-2026-17662 google chrome Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium...	4.3 Medium	—	0,21%	30 Jul 2026
CVE-2026-17661 google chrome Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17660 google chrome Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent...	8.3 High	—	0,32%	30 Jul 2026
CVE-2026-17659 google chrome Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site is...	4.2 Medium	—	0,21%	30 Jul 2026
CVE-2026-17658 google chrome Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur...	8.8 High	—	0,41%	30 Jul 2026
CVE-2026-17657 google chrome Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e...	8.3 High	—	0,30%	30 Jul 2026
CVE-2026-17656 google chrome Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17655 google chrome Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafte...	9.6 Critical	—	0,55%	30 Jul 2026
CVE-2026-17654 google chrome Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security...	7.8 High	—	0,10%	30 Jul 2026
CVE-2026-17653 google chrome Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	8.3 High	—	0,49%	30 Jul 2026
CVE-2026-17652 google chrome Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17651 google chrome Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape vi...	9.6 Critical	—	0,35%	30 Jul 2026
CVE-2026-17650 google chrome Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox...	8.3 High	—	0,30%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.