Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-106251
niedrig
chromium-browser: UI misrepresentation in ChromotingBuild 07:11 UTC
CVE-2026-106249
niedrig
chromium-browser: Incorrect authorization in AutofillBuild 07:11 UTC
CVE-2026-106247
niedrig
chromium-browser: angle: Buffer overflow in ANGLEBuild 07:11 UTC
CVE-2026-106236
niedrig
chromium-browser: UI misrepresentation in ChromotingBuild 07:11 UTC
CVE-2026-106234
niedrig
chromium-browser: Use after free in NetworkBuild 07:11 UTC
CVE-2026-106220
niedrig
chromium-browser: Information leak in PasswordsBuild 07:11 UTC
CVE-2026-106192
niedrig
chromium-browser: Information leak in MobileBuild 07:11 UTC
CVE-2026-106191
niedrig
chromium-browser: Missing authorization in ActorBuild 07:11 UTC
CVE-2026-106187
niedrig
chromium-browser: Missing authorization in PermissionsBuild 07:11 UTC
CVE-2026-106186
niedrig
chromium-browser: Uncontrolled search path element in CredentialProviderBuild 07:11 UTC
CVE-2026-106179
niedrig
chromium-browser: UI misrepresentation in WebAppInstallsBuild 07:11 UTC
CVE-2026-106101
niedrig
Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of ServiceBuild 07:11 UTC
CVE-2026-105800
niedrig
i18next-http-backend: i18next-http-backend: Server-Side Request Forgery via crafted path template parametersBuild 07:11 UTC
CVE-2026-105799
niedrig
LangChain: RediSearch Filter Injection via Unescaped Tag/Text ValuesBuild 07:11 UTC
CVE-2026-105795
niedrig
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsBuild 07:11 UTC
CVE-2026-75820
niedrig
aspell: aspell: Denial of Service via integer truncation in wordlist processingBuild 07:11 UTC
CVE-2026-75818
niedrig
aspell: aspell: Denial of Service via crafted compressed file in prezip-binBuild 07:11 UTC
CVE-2026-98363
niedrig
kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPSBuild 07:11 UTC
CVE-2026-98362
niedrig
kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rateBuild 07:11 UTC
CVE-2026-98346
niedrig
kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevsBuild 07:11 UTC
CVE-2026-98345
niedrig
kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d()Build 07:11 UTC
CVE-2026-98344
niedrig
kernel: dmaengine: Fix device kref underflow in dma_chan_put()Build 07:11 UTC
CVE-2026-98338
niedrig
kernel: wifi: cfg80211: ibss: ref BSS entry for joined eventBuild 07:11 UTC
CVE-2026-98337
niedrig
kernel: wifi: mac80211: don't start a ROC while scanningBuild 07:11 UTC
CVE-2026-98334
niedrig
kernel: wifi: mac80211: reset state when starting AP failsBuild 07:11 UTC
CVE-2026-98332
niedrig
kernel: wifi: mac80211: only operate on TDLS peers in the TDLS codeBuild 07:11 UTC
CVE-2026-98329
niedrig
kernel: wifi: mac80211: don't allow injecting frames wider than the chanctxBuild 07:11 UTC
CVE-2026-98328
niedrig
kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems lenBuild 07:11 UTC
CVE-2026-98326
niedrig
kernel: wifi: mac80211: mesh: release the channel if start failsBuild 07:11 UTC
CVE-2026-98325
niedrig
kernel: wifi: mac80211: set up the TX info early to fix failure pathsBuild 07:11 UTC
CVE-2026-98321
niedrig
kernel: netfilter: nf_nat: unregister and release hooks on errorBuild 07:11 UTC
CVE-2026-98319
niedrig
kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptrBuild 07:11 UTC
CVE-2026-98317
niedrig
kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MSBuild 07:11 UTC
CVE-2026-98308
niedrig
kernel: ALSA: hda: trace PCM open only after assigning a streamBuild 07:11 UTC
CVE-2026-98307
niedrig
kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()Build 07:11 UTC
CVE-2026-98304
niedrig
kernel: net: bcmgenet: restore the hardware filters on openBuild 07:11 UTC
CVE-2026-98297
niedrig
kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drainedBuild 07:11 UTC
CVE-2026-98289
niedrig
kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()Build 07:11 UTC
CVE-2026-98285
niedrig
kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errorsBuild 07:11 UTC
CVE-2026-98278
niedrig
kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop checkBuild 07:11 UTC
CVE-2026-98270
niedrig
kernel: drm/amdgpu: check ras and obj before dereferenceBuild 07:11 UTC
CVE-2026-98268
niedrig
kernel: perf: Fix null pointer access in is_include_guest_event()Build 07:11 UTC
CVE-2026-98263
niedrig
kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->typeBuild 07:11 UTC
CVE-2026-98259
niedrig
kernel: fs/dax: check zero or empty entry before converting xarray entryBuild 07:11 UTC
CVE-2026-98240
niedrig
kernel: net: ip_tunnel: initialize `options_len` before referencing optionsBuild 07:11 UTC
CVE-2026-98237
niedrig
kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chainBuild 07:11 UTC
CVE-2026-98235
niedrig
kernel: net/sched: act_api: release tail references on DELACTION failureBuild 07:11 UTC
CVE-2026-98234
niedrig
kernel: net/sched: hhf: cap hh_flows_limit at change timeBuild 07:11 UTC
CVE-2026-98233
niedrig
kernel: net/packet: clear RX owner on VNET header errorBuild 07:11 UTC
CVE-2026-98224
niedrig
kernel: mm/vma: correctly unaccount on mmap_prepare() failureBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.