Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-106298
alta
chromium-browser: Use after free in Chrome Tabsbuild de las 07:11 UTC
CVE-2026-106293
alta
chromium-browser: angle: Type confusion in ANGLEbuild de las 07:11 UTC
CVE-2026-106281
alta
chromium-browser: Use after free in Tintbuild de las 07:11 UTC
CVE-2026-106278
alta
chromium-browser: Use after free in Selectbuild de las 07:11 UTC
CVE-2026-106273
alta
chromium-browser: Uninitialized resource in Videobuild de las 07:11 UTC
CVE-2026-106268
alta
chromium-browser: Use after free in WebRTCbuild de las 07:11 UTC
CVE-2026-106258
alta
chromium-browser: angle: Uninitialized resource in ANGLEbuild de las 07:11 UTC
CVE-2026-106257
alta
chromium-browser: Use after free in HTMLbuild de las 07:11 UTC
CVE-2026-106255
alta
chromium-browser: Race condition in V8build de las 07:11 UTC
CVE-2026-106248
alta
chromium-browser: Use after free in Bindingsbuild de las 07:11 UTC
CVE-2026-106245
alta
chromium-browser: angle: Uninitialized resource in ANGLEbuild de las 07:11 UTC
CVE-2026-106243
alta
chromium-browser: Incomplete cleanup in Proxy Authbuild de las 07:11 UTC
CVE-2026-106240
alta
chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-106239
alta
chromium-browser: Integer overflow in WebGLbuild de las 07:11 UTC
CVE-2026-106235
alta
chromium-browser: Use after free in WebAudiobuild de las 07:11 UTC
CVE-2026-106233
alta
chromium-browser: Use after free in Metricsbuild de las 07:11 UTC
CVE-2026-106231
alta
chromium-browser: Uninitialized resource in Dawnbuild de las 07:11 UTC
CVE-2026-106227
alta
chromium-browser: Use after free in Corebuild de las 07:11 UTC
CVE-2026-106221
alta
chromium-browser: Confused deputy in WebAPKsbuild de las 07:11 UTC
CVE-2026-106215
alta
chromium-browser: angle: Uninitialized resource in ANGLEbuild de las 07:11 UTC
CVE-2026-106214
alta
chromium-browser: Information leak in Proxybuild de las 07:11 UTC
CVE-2026-106211
alta
chromium-browser: Use after free in TabStripbuild de las 07:11 UTC
CVE-2026-106204
alta
chromium-browser: Use after free in PDFbuild de las 07:11 UTC
CVE-2026-106203
alta
chromium-browser: Incomplete cleanup in Autofillbuild de las 07:11 UTC
CVE-2026-106202
alta
chromium-browser: angle: Uninitialized resource in ANGLEbuild de las 07:11 UTC
CVE-2026-106200
alta
chromium-browser: Use after free in Trackbuild de las 07:11 UTC
CVE-2026-106199
alta
chromium-browser: Incorrect authorization in Actorbuild de las 07:11 UTC
CVE-2026-106198
alta
chromium-browser: Missing authorization in FileSystembuild de las 07:11 UTC
CVE-2026-106197
alta
chromium-browser: Use after free in Browserbuild de las 07:11 UTC
CVE-2026-106196
alta
chromium-browser: Missing authorization in Navigationbuild de las 07:11 UTC
CVE-2026-106193
alta
chromium-browser: Use after free in Parserbuild de las 07:11 UTC
CVE-2026-106190
alta
chromium-browser: Use after free in Mediabuild de las 07:11 UTC
CVE-2026-106188
alta
chromium-browser: Confused deputy in SignInbuild de las 07:11 UTC
CVE-2026-106184
alta
chromium-browser: Uninitialized resource in Mediabuild de las 07:11 UTC
CVE-2026-106122
alta
The RabbitMQ Java client library allows Java and JVM-based application ...build de las 07:11 UTC
CVE-2026-106121
alta
The RabbitMQ Java client library allows Java and JVM-based application ...build de las 07:11 UTC
CVE-2026-106118
alta
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writebuild de las 07:11 UTC
CVE-2026-102322
alta
chromium-browser: Incorrect Authorization in SiteIsolationbuild de las 07:11 UTC
CVE-2026-106117
alta
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharpbuild de las 07:11 UTC
CVE-2026-106115
alta
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output bufferbuild de las 07:11 UTC
CVE-2026-106113
alta
ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram indexbuild de las 07:11 UTC
CVE-2026-106112
alta
ImageSharp: ICC LUT16 output channel count can write beyond Vector4build de las 07:11 UTC
CVE-2026-106110
alta
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output bufferbuild de las 07:11 UTC
CVE-2026-106107
alta
Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrainedbuild de las 07:11 UTC
CVE-2026-106106
alta
Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassablebuild de las 07:11 UTC
CVE-2026-106105
alta
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissionsbuild de las 07:11 UTC
CVE-2026-106104
alta
Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR serverbuild de las 07:11 UTC
CVE-2026-106103
alta
Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profilebuild de las 07:11 UTC
CVE-2026-106100
alta
Payload: Field-level write access bypass in Payload on MongoDBbuild de las 07:11 UTC
CVE-2026-105868
alta
Payload: Uploaded XML files could execute same-origin JavaScriptbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.