Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-95370
mittel
chromium-browser: Inappropriate implementation in NFCBuild 07:11 UTC
CVE-2026-95369
mittel
chromium-browser: Inappropriate implementation in XMLBuild 07:11 UTC
CVE-2026-95366
mittel
chromium-browser: Use of released resource in CoreBuild 07:11 UTC
CVE-2026-95363
mittel
chromium-browser: UI misrepresentation in FileSystemBuild 07:11 UTC
CVE-2026-95362
mittel
chromium-browser: Cross-site request forgery in DevToolsBuild 07:11 UTC
CVE-2026-95360
mittel
chromium-browser: Race condition in EditingBuild 07:11 UTC
CVE-2026-95359
mittel
chromium-browser: Uninitialized resource in GPUBuild 07:11 UTC
CVE-2026-95358
mittel
chromium-browser: Incorrect authorization in MobileBuild 07:11 UTC
CVE-2026-95354
mittel
chromium-browser: Use after free in VerifierBuild 07:11 UTC
CVE-2026-95353
mittel
chromium-browser: Use after free in BindingsBuild 07:11 UTC
CVE-2026-95347
mittel
chromium-browser: Use after free in UpdaterBuild 07:11 UTC
CVE-2026-95346
mittel
chromium-browser: UI misrepresentation in ChromotingBuild 07:11 UTC
CVE-2026-95345
mittel
chromium-browser: Use after free in ActorBuild 07:11 UTC
CVE-2026-95344
mittel
chromium-browser: Race condition in DevToolsBuild 07:11 UTC
CVE-2026-95341
mittel
chromium-browser: Improper input validation in DesktopBuild 07:11 UTC
CVE-2026-95337
mittel
chromium-browser: UI misrepresentation in MessagesBuild 07:11 UTC
CVE-2026-95336
mittel
chromium-browser: Information leak in Transactions PlatformBuild 07:11 UTC
CVE-2026-95333
mittel
chromium-browser: Use after free in MetricsBuild 07:11 UTC
CVE-2026-95332
mittel
chromium-browser: Use of uninitialized variable in TintBuild 07:11 UTC
CVE-2026-95331
mittel
chromium-browser: angle: Out of bounds write in ANGLEBuild 07:11 UTC
CVE-2026-95330
mittel
chromium-browser: Improper state validation in DownloadsBuild 07:11 UTC
CVE-2026-95325
mittel
chromium-browser: angle: Use after free in ANGLEBuild 07:11 UTC
CVE-2026-95323
mittel
chromium-browser: UI misrepresentation in ChromiumBuild 07:11 UTC
CVE-2026-95321
mittel
chromium-browser: UI misrepresentation in PaymentsBuild 07:11 UTC
CVE-2026-95320
mittel
chromium-browser: Missing authorization in NavigationBuild 07:11 UTC
CVE-2026-95317
mittel
chromium-browser: Incorrect authorization in MediaCaptureBuild 07:11 UTC
CVE-2026-95314
mittel
chromium-browser: Incorrect authorization in HIDBuild 07:11 UTC
CVE-2026-95312
mittel
chromium-browser: Information leak in PasswordsBuild 07:11 UTC
CVE-2026-95311
mittel
chromium-browser: Free of non-heap memory in FontsBuild 07:11 UTC
CVE-2026-95303
mittel
chromium-browser: Incomplete cleanup in SmartCardBuild 07:11 UTC
CVE-2026-95302
mittel
chromium-browser: Incorrect authorization in WebAPKsBuild 07:11 UTC
CVE-2026-95300
mittel
chromium-browser: Missing authorization in DevToolsBuild 07:11 UTC
CVE-2026-95297
mittel
chromium-browser: Missing authorization in Contextual TasksBuild 07:11 UTC
CVE-2026-95295
mittel
chromium-browser: Information leak in MobileBuild 07:11 UTC
CVE-2026-95294
mittel
chromium-browser: UI misrepresentation in BrowserBuild 07:11 UTC
CVE-2026-95290
mittel
chromium-browser: Missing authorization in NFCBuild 07:11 UTC
CVE-2026-95289
mittel
chromium-browser: Incorrect authorization in ScrollBuild 07:11 UTC
CVE-2026-95287
mittel
chromium-browser: Missing authorization in NavigationBuild 07:11 UTC
CVE-2026-95276
mittel
chromium-browser: Improper input validation in ThemesBuild 07:11 UTC
CVE-2026-95275
mittel
chromium-browser: Incorrect reference resolution in MediaStreamBuild 07:11 UTC
CVE-2026-12345
mittel
python: python: Arbitrary file deletion via race condition during temporary directory cleanupBuild 07:11 UTC
GHSA-253c-mchw-3w2r
mittel
markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of secondsBuild 07:11 UTC
GHSA-r3ph-w7gj-g6xm
mittel
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesBuild 07:11 UTC
CVE-2026-92232
mittel
Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC
CVE-2026-92231
mittel
Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC
CVE-2026-92226
mittel
Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC
CVE-2026-92225
mittel
Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC
CVE-2026-92224
mittel
Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC
CVE-2026-90918
mittel
Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC
CVE-2026-90917
mittel
Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3Build 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.