Katalog CVE (hal. 962)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 48.051–48.100 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-48369 adobe premiere pro Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48367 adobe after effects After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48366 adobe media encoder Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48344 adobe creative cloud desktop application Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of th...	7.8 High	—	0,17%	14 Jul 2026
CVE-2026-48343 adobe bridge Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48342 adobe bridge Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	0,31%	14 Jul 2026
CVE-2026-48341 adobe bridge Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48340 adobe bridge Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi...	7.8 High	—	0,29%	14 Jul 2026
CVE-2026-48339 adobe bridge Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...	7.8 High	—	0,34%	14 Jul 2026
CVE-2026-48338 adobe coldfusion ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A...	6.8 Medium	—	0,47%	14 Jul 2026
CVE-2026-48332 adobe coldfusion ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this...	7.7 High	—	0,79%	14 Jul 2026
CVE-2026-48329 adobe coldfusion ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this...	2.7 Low	—	0,57%	14 Jul 2026
CVE-2026-48328 adobe coldfusion ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnera...	7.7 High	—	0,82%	14 Jul 2026
CVE-2026-48327 adobe coldfusion ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	9.0 Critical	—	0,41%	14 Jul 2026
CVE-2026-48325 adobe coldfusion ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. E...	9.3 Critical	—	0,55%	14 Jul 2026
CVE-2026-48324 adobe coldfusion ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execut...	9.1 Critical	—	1,1%	14 Jul 2026
CVE-2026-48322 adobe coldfusion ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the c...	9.9 Critical	—	1,2%	14 Jul 2026
CVE-2026-48321 adobe coldfusion ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauth...	9.3 Critical	—	0,41%	14 Jul 2026
CVE-2026-48320 adobe coldfusion ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page,...	8.5 High	—	0,45%	14 Jul 2026
CVE-2026-48319 adobe coldfusion ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in...	9.1 Critical	—	1,4%	14 Jul 2026
CVE-2026-48318 adobe coldfusion ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A...	9.9 Critical	—	1,1%	14 Jul 2026
CVE-2026-48311 adobe bridge Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48308 adobe premiere pro Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to by...	5.9 Medium	—	0,24%	14 Jul 2026
CVE-2026-48284 adobe coldfusion ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. The vulnerable comp...	9.6 Critical	—	0,49%	14 Jul 2026
CVE-2026-48274 adobe after effects After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48272 adobe creative cloud desktop application Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user....	7.8 High	—	0,23%	14 Jul 2026
CVE-2026-48270 adobe premiere pro Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-48269 adobe premiere pro Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t...	7.8 High	—	0,34%	14 Jul 2026
CVE-2026-48125 ua-parser-js project ua-parser-js UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From 2.0.1 until 2.0.10, a regular expression denial-of...	5.3 Medium	—	0,52%	14 Jul 2026
CVE-2026-47979 adobe media encoder Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to discl...	5.5 Medium	—	0,26%	14 Jul 2026
CVE-2026-47976 adobe media encoder Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...	7.8 High	—	0,26%	14 Jul 2026
CVE-2026-47971 adobe media encoder Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	0,34%	14 Jul 2026
CVE-2026-47475 NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A success...	6.2 Medium	—	0,16%	14 Jul 2026
CVE-2026-47473 NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tam...	7.4 High	—	0,16%	14 Jul 2026
CVE-2026-47472 NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A success...	7.8 High	—	0,35%	14 Jul 2026
CVE-2026-47471 NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit...	7.5 High	—	0,31%	14 Jul 2026
CVE-2026-47470 NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exp...	6.2 Medium	—	0,16%	14 Jul 2026
CVE-2026-46644 Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1.17.1 until 1.38.1, symfony/polyfill-intl-idn accepts xn-- l...	6.9 Medium	—	0,54%	14 Jul 2026
CVE-2026-24272 nvidia tensorrt NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code e...	7.8 High	—	0,21%	14 Jul 2026
CVE-2026-24271 NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttlin...	6.2 Medium	—	0,16%	14 Jul 2026
CVE-2026-24268 nvidia tensorrt NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code executi...	7.8 High	—	0,23%	14 Jul 2026
CVE-2026-24259 NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerab...	6.4 Medium	—	0,18%	14 Jul 2026
CVE-2026-24238 nvidia tensorrt NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to...	7.8 High	—	0,21%	14 Jul 2026
CVE-2026-24234 NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request for...	6.8 Medium	—	0,15%	14 Jul 2026
CVE-2026-24233 NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could ca...	8.4 High	—	0,39%	14 Jul 2026
CVE-2026-24229 NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state...	7.3 High	—	0,16%	14 Jul 2026
CVE-2026-24227 nvidia tensorrt NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code e...	9.8 Critical	—	1,0%	14 Jul 2026
CVE-2026-24226 NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might...	6.3 Medium	—	0,16%	14 Jul 2026
CVE-2026-24220 nvidia tensorrt-llm NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deseria...	6.4 Medium	—	0,33%	14 Jul 2026
CVE-2026-15778 google chrome Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to by...	6.5 Medium	—	0,30%	14 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.