Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98423
media
kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stoppingbuild de las 07:11 UTC
CVE-2026-98420
media
kernel: ksmbd: follow SMB2 session expiration semanticsbuild de las 07:11 UTC
CVE-2026-98419
media
kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()build de las 07:11 UTC
CVE-2026-98418
media
kernel: sched/core: Avoid false migration warning for proxy donorsbuild de las 07:11 UTC
CVE-2026-98416
media
kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()build de las 07:11 UTC
CVE-2026-98415
media
kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator nodebuild de las 07:11 UTC
CVE-2026-98413
media
kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()build de las 07:11 UTC
CVE-2026-98412
media
kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()build de las 07:11 UTC
CVE-2026-98411
media
kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()build de las 07:11 UTC
CVE-2026-98410
media
kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdogbuild de las 07:11 UTC
CVE-2026-98409
media
kernel: watchdog: rtd119x: Avoid division by zerobuild de las 07:11 UTC
CVE-2026-98408
media
kernel: watchdog: rzv2h: Avoid division by zerobuild de las 07:11 UTC
CVE-2026-98407
media
kernel: wifi: rsi: fix heap OOB write on key removalbuild de las 07:11 UTC
CVE-2026-98403
media
kernel: s390/boot: Avoid IPL parameter append past command linebuild de las 07:11 UTC
CVE-2026-98401
media
kernel: net: iptunnel: fix stale transport header during tunnel decapsulationbuild de las 07:11 UTC
CVE-2026-98397
media
kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardownbuild de las 07:11 UTC
CVE-2026-98396
media
kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()build de las 07:11 UTC
CVE-2026-98395
media
kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exitbuild de las 07:11 UTC
CVE-2026-98392
media
kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-onebuild de las 07:11 UTC
CVE-2026-109968
media
clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable filebuild de las 07:11 UTC
CVE-2026-88829
media
busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxybuild de las 07:11 UTC
CVE-2026-109971
media
clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-toolbuild de las 07:11 UTC
CVE-2026-109970
media
clevis: clevis: PKCS#11 token PIN written to world-readable filebuild de las 07:11 UTC
CVE-2026-109969
media
clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umaskbuild de las 07:11 UTC
CVE-2026-84790
media
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to ...build de las 07:11 UTC
CVE-2026-77207
media
libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTSbuild de las 07:11 UTC
CVE-2026-77206
media
libreswan: IKEv2 pre-authentication Null Pointer deref in EAP codebuild de las 07:11 UTC
CVE-2026-110142
media
chromium-browser: Use after free in FileSystembuild de las 07:11 UTC
CVE-2026-56826
media
Shopping privilege escalation through missing authorization in Settings componentsbuild de las 07:11 UTC
GHSA-86xp-94pg-8r6r
media
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96303
media
Microsoft PowerShell Security Feature Bypass Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96238
media
dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96234
media
dotnet: .NET Information Disclosure Vulnerabilitybuild de las 07:11 UTC
CVE-2026-96229
media
dotnet: .NET Information Disclosure Vulnerabilitybuild de las 07:11 UTC
CVE-2026-85790
media
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerabilitybuild de las 07:11 UTC
CVE-2026-85747
media
Distribution is a toolkit to pack, ship, store, and deliver container ...build de las 07:11 UTC
CVE-2026-70196
media
dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerabilitybuild de las 07:11 UTC
CVE-2026-70194
media
dotnet: .NET Framework Security Feature Bypass Vulnerabilitybuild de las 07:11 UTC
CVE-2026-70165
media
dotnet: dotnet: Local privilege escalation via improper link resolutionbuild de las 07:11 UTC
CVE-2026-70162
media
dotnet: dotnet: Denial of Service via specially crafted web requestsbuild de las 07:11 UTC
CVE-2026-66822
media
dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerabilitybuild de las 07:11 UTC
CVE-2026-93294
media
grafana: Grafana: Information disclosure via Azure Monitor resource proxybuild de las 07:11 UTC
CVE-2026-33374
media
grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion APIbuild de las 07:11 UTC
CVE-2026-15577
media
grafana: Grafana: Unauthorized configuration modification via status subresourcebuild de las 07:11 UTC
CVE-2026-88838
media
busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictionsbuild de las 07:11 UTC
CVE-2026-88833
media
busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of servicebuild de las 07:11 UTC
CVE-2026-109828
media
libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsingbuild de las 07:11 UTC
CVE-2026-104250
media
unstructured: Stored XSS via unescaped HTML generationbuild de las 07:11 UTC
CVE-2026-79611
media
xen: xen: Denial of Service of guest virtual machines via VM entry failurebuild de las 07:11 UTC
CVE-2026-79609
media
xen: Xen: Denial of Service via guest page table access beyond direct memory mappingbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.