Katalog CVE (hal. 933)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 46.601–46.650 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-45138 CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom `html_purify` validation rule used to sanitize blog post bodies r...	5.4 Medium	—	0,18%	20 Jul 2026
CVE-2026-44359 Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main_matrix.yml workflow is triggered by pull_r...	10.0 Critical	—	1,8%	20 Jul 2026
CVE-2026-42566 meshtastic firmware Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long_name that contains a malformed character enc...	7.5 High	—	0,49%	20 Jul 2026
CVE-2026-12484 A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.TorchModuleWr...	7.8 High	—	0,30%	19 Jul 2026
CVE-2026-64186 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs In iommu_mmio_write() and iommu_capab...	7.1 High	—	0,16%	19 Jul 2026
CVE-2026-64185 linux kernel In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfs_update_group() is called for a n...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64184 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() damon_sysfs_memcg_path_to_id() breaks m...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64183 linux kernel In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 5894cf571e14 ("acpi/prmt: Use EFI r...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64182 linux kernel In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64181 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() On x86 32-bit w...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64180 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leak...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64179 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64178 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_sess...	8.8 High	—	0,30%	19 Jul 2026
CVE-2026-64177 linux kernel In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_skb() The networking receive path is usually run...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64176 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are s...	8.1 High	—	0,27%	19 Jul 2026
CVE-2026-64175 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes (e.g., NMI_INTERRU...	7.5 High	—	0,46%	19 Jul 2026
CVE-2026-64174 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() cfg80211_merge_profile() reassembles a...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64173 linux kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map->ops->elt_free() if elt_alloc() fails In paths where tracing_map_elt_alloc(...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64172 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs...	7.1 High	—	0,20%	19 Jul 2026
CVE-2026-64171 linux kernel In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64170 linux kernel In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA s...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64169 linux kernel In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DM...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64168 linux kernel In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64167 linux kernel In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel kho_fill_kimage() unconditionally populates the kimage with KHO metad...	5.5 Medium	—	0,14%	19 Jul 2026
CVE-2026-64166 linux kernel In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match callback ass...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64165 linux kernel In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4 ("ARM: integrator: read...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64164 linux kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() The trace event btrfs_syn...	5.5 Medium	—	0,11%	19 Jul 2026
CVE-2026-64163 linux kernel In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64162 linux kernel In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock i...	9.8 Critical	—	0,44%	19 Jul 2026
CVE-2026-64161 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix eth_ports_node leak in probe The error path on of_property_read_u32() fai...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64160 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Fix potential tearing in using...	9.8 Critical	—	0,43%	19 Jul 2026
CVE-2026-64159 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size > remote_i_size Fix the update of the zero point[*] by netf...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64157 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64156 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_single() and afs_single_writep...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64155 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly...	5.5 Medium	—	0,12%	19 Jul 2026
CVE-2026-64154 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of_...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64153 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error...	8.8 High	—	0,14%	19 Jul 2026
CVE-2026-64152 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed a latent bug where the map err...	7.8 High	—	0,14%	19 Jul 2026
CVE-2026-64151 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could...	8.4 High	—	0,16%	19 Jul 2026
CVE-2026-64150 linux kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error...	9.8 Critical	—	0,65%	19 Jul 2026
CVE-2026-64149 linux kernel In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code dma_map_resource() uses pfn_valid(...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-64148 linux kernel In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pdsc_devcmd_wait() returns stal...	7.5 High	—	0,47%	19 Jul 2026
CVE-2026-64147 linux kernel In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with a...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64146 linux kernel In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64145 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire failure wilc_wlan_firmware_download() allocates d...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-64144 linux kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control urb is not f...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-64143 linux kernel In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on som...	5.5 Medium	—	0,14%	19 Jul 2026
CVE-2026-64142 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmbd_durable_scavenger() has two rel...	9.8 Critical	—	0,71%	19 Jul 2026
CVE-2026-64141 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the per-inode m_o...	7.5 High	—	0,63%	19 Jul 2026
CVE-2026-64140 linux kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in proc_show_files() When a SMB2 client opens a file with a dura...	7.5 High	—	0,49%	19 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.