Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98423
mittel
kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stoppingBuild 07:11 UTC
CVE-2026-98420
mittel
kernel: ksmbd: follow SMB2 session expiration semanticsBuild 07:11 UTC
CVE-2026-98419
mittel
kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()Build 07:11 UTC
CVE-2026-98418
mittel
kernel: sched/core: Avoid false migration warning for proxy donorsBuild 07:11 UTC
CVE-2026-98416
mittel
kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()Build 07:11 UTC
CVE-2026-98415
mittel
kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator nodeBuild 07:11 UTC
CVE-2026-98413
mittel
kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()Build 07:11 UTC
CVE-2026-98412
mittel
kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()Build 07:11 UTC
CVE-2026-98411
mittel
kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()Build 07:11 UTC
CVE-2026-98410
mittel
kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdogBuild 07:11 UTC
CVE-2026-98409
mittel
kernel: watchdog: rtd119x: Avoid division by zeroBuild 07:11 UTC
CVE-2026-98408
mittel
kernel: watchdog: rzv2h: Avoid division by zeroBuild 07:11 UTC
CVE-2026-98407
mittel
kernel: wifi: rsi: fix heap OOB write on key removalBuild 07:11 UTC
CVE-2026-98403
mittel
kernel: s390/boot: Avoid IPL parameter append past command lineBuild 07:11 UTC
CVE-2026-98401
mittel
kernel: net: iptunnel: fix stale transport header during tunnel decapsulationBuild 07:11 UTC
CVE-2026-98397
mittel
kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardownBuild 07:11 UTC
CVE-2026-98396
mittel
kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()Build 07:11 UTC
CVE-2026-98395
mittel
kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exitBuild 07:11 UTC
CVE-2026-98392
mittel
kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-oneBuild 07:11 UTC
CVE-2026-109968
mittel
clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable fileBuild 07:11 UTC
CVE-2026-88829
mittel
busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxyBuild 07:11 UTC
CVE-2026-109971
mittel
clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-toolBuild 07:11 UTC
CVE-2026-109970
mittel
clevis: clevis: PKCS#11 token PIN written to world-readable fileBuild 07:11 UTC
CVE-2026-109969
mittel
clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umaskBuild 07:11 UTC
CVE-2026-84790
mittel
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to ...Build 07:11 UTC
CVE-2026-77207
mittel
libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTSBuild 07:11 UTC
CVE-2026-77206
mittel
libreswan: IKEv2 pre-authentication Null Pointer deref in EAP codeBuild 07:11 UTC
CVE-2026-110142
mittel
chromium-browser: Use after free in FileSystemBuild 07:11 UTC
CVE-2026-56826
mittel
Shopping privilege escalation through missing authorization in Settings componentsBuild 07:11 UTC
GHSA-86xp-94pg-8r6r
mittel
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service VulnerabilityBuild 07:11 UTC
CVE-2026-96303
mittel
Microsoft PowerShell Security Feature Bypass VulnerabilityBuild 07:11 UTC
CVE-2026-96238
mittel
dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass VulnerabilityBuild 07:11 UTC
CVE-2026-96234
mittel
dotnet: .NET Information Disclosure VulnerabilityBuild 07:11 UTC
CVE-2026-96229
mittel
dotnet: .NET Information Disclosure VulnerabilityBuild 07:11 UTC
CVE-2026-85790
mittel
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure VulnerabilityBuild 07:11 UTC
CVE-2026-85747
mittel
Distribution is a toolkit to pack, ship, store, and deliver container ...Build 07:11 UTC
CVE-2026-70196
mittel
dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service VulnerabilityBuild 07:11 UTC
CVE-2026-70194
mittel
dotnet: .NET Framework Security Feature Bypass VulnerabilityBuild 07:11 UTC
CVE-2026-70165
mittel
dotnet: dotnet: Local privilege escalation via improper link resolutionBuild 07:11 UTC
CVE-2026-70162
mittel
dotnet: dotnet: Denial of Service via specially crafted web requestsBuild 07:11 UTC
CVE-2026-66822
mittel
dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure VulnerabilityBuild 07:11 UTC
CVE-2026-93294
mittel
grafana: Grafana: Information disclosure via Azure Monitor resource proxyBuild 07:11 UTC
CVE-2026-33374
mittel
grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion APIBuild 07:11 UTC
CVE-2026-15577
mittel
grafana: Grafana: Unauthorized configuration modification via status subresourceBuild 07:11 UTC
CVE-2026-88838
mittel
busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictionsBuild 07:11 UTC
CVE-2026-88833
mittel
busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of serviceBuild 07:11 UTC
CVE-2026-109828
mittel
libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsingBuild 07:11 UTC
CVE-2026-104250
mittel
unstructured: Stored XSS via unescaped HTML generationBuild 07:11 UTC
CVE-2026-79611
mittel
xen: xen: Denial of Service of guest virtual machines via VM entry failureBuild 07:11 UTC
CVE-2026-79609
mittel
xen: Xen: Denial of Service via guest page table access beyond direct memory mappingBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.