Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-110168
alta
chromium-browser: Use after free in V8build de las 07:11 UTC
CVE-2026-110167
alta
chromium-browser: Use after free in Mediabuild de las 07:11 UTC
CVE-2026-110166
alta
chromium-browser: Buffer overflow in Animationbuild de las 07:11 UTC
CVE-2026-110165
alta
chromium-browser: Use after free in Corebuild de las 07:11 UTC
CVE-2026-110164
alta
chromium-browser: Use after free in DOMbuild de las 07:11 UTC
CVE-2026-110163
alta
chromium-browser: Use after free in DOMbuild de las 07:11 UTC
CVE-2026-110162
alta
chromium-browser: Use after free in Desktopbuild de las 07:11 UTC
CVE-2026-110161
alta
chromium-browser: Use after free in Networkbuild de las 07:11 UTC
CVE-2026-110160
alta
chromium-browser: Missing authorization in ReadingModebuild de las 07:11 UTC
CVE-2026-110159
alta
chromium-browser: Incorrect authorization in Updaterbuild de las 07:11 UTC
CVE-2026-110158
alta
chromium-browser: Use after free in Passwordsbuild de las 07:11 UTC
CVE-2026-110157
alta
chromium-browser: Use after free in SVGbuild de las 07:11 UTC
CVE-2026-110156
alta
chromium-browser: Incorrect reference resolution in Extensionsbuild de las 07:11 UTC
CVE-2026-110155
alta
chromium-browser: Buffer overflow in PDFiumbuild de las 07:11 UTC
CVE-2026-110154
alta
chromium-browser: Use after free in Canvasbuild de las 07:11 UTC
CVE-2026-110153
alta
chromium-browser: Use after free in Mediabuild de las 07:11 UTC
CVE-2026-110152
alta
chromium-browser: angle: Buffer overflow in ANGLEbuild de las 07:11 UTC
CVE-2026-110151
alta
chromium-browser: Use after free in Mediabuild de las 07:11 UTC
CVE-2026-110150
alta
chromium-browser: Privilege elevation in Installerbuild de las 07:11 UTC
CVE-2026-110149
alta
chromium-browser: Use after free in Browserbuild de las 07:11 UTC
CVE-2026-110148
alta
chromium-browser: Use after free in SVGbuild de las 07:11 UTC
CVE-2026-110147
alta
chromium-browser: Use after free in PDFbuild de las 07:11 UTC
CVE-2026-110146
alta
chromium-browser: Information leak in Passwordsbuild de las 07:11 UTC
CVE-2026-110145
alta
chromium-browser: Use after free in Passwordsbuild de las 07:11 UTC
CVE-2026-110144
alta
chromium-browser: Incorrect authorization in Mojobuild de las 07:11 UTC
CVE-2026-110143
alta
chromium-browser: Use of uninitialized variable in ThirdParty lmza_sdkbuild de las 07:11 UTC
CVE-2026-110141
alta
chromium-browser: Observable discrepancy in Mediabuild de las 07:11 UTC
CVE-2026-110140
alta
chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-110139
alta
chromium-browser: Use after free in Mediabuild de las 07:11 UTC
CVE-2026-110138
alta
chromium-browser: Use after free in ShapeDetectionbuild de las 07:11 UTC
CVE-2026-110137
alta
chromium-browser: Use after free in WebRTCbuild de las 07:11 UTC
CVE-2026-96956
alta
dotnet8.0: dotnet10.0: dotnet9.0: SQL Server Elevation of Privilege Vulnerabilitybuild de las 07:11 UTC
CVE-2026-55601
alta
multitail: multitail: Arbitrary command execution via improper input escaping in execute-on-match featurebuild de las 07:11 UTC
CVE-2026-97801
alta
dotnet: .NET Framework: Data tampering via improper input validationbuild de las 07:11 UTC
CVE-2026-96960
alta
dotnet: .NET: Denial of Service via asymmetric resource consumptionbuild de las 07:11 UTC
CVE-2026-96959
alta
dotnet: .NET: Denial of Service via unthrottled resource allocationbuild de las 07:11 UTC
CVE-2026-96958
alta
dotnet: .NET Denial of Service Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96957
alta
dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96251
alta
Microsoft PowerShell Remote Code Execution Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96237
alta
dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96236
alta
dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96235
alta
dotnet: .NET: arbitrary code execution via out-of-bounds writebuild de las 07:11 UTC
CVE-2026-96233
alta
dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96232
alta
dotnet: .NET: Information disclosure via out-of-bounds readbuild de las 07:11 UTC
CVE-2026-96231
alta
dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96230
alta
dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96225
alta
dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96224
alta
dotnet: .NET: arbitrary code execution via out-of-bounds writebuild de las 07:11 UTC
CVE-2026-96222
alta
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerabilitybuild de las 07:11 UTC
CVE-2026-87697
alta
dotnet: dotnet: arbitrary code execution via untrusted data deserializationbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.