Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-47558
alta
nvidia-driver: nvidia-driver: Privilege escalation via double-free of imported memory statebuild de las 07:11 UTC
CVE-2026-47556
alta
nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflowbuild de las 07:11 UTC
CVE-2026-47554
alta
nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressurebuild de las 07:11 UTC
CVE-2026-47553
alta
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47552
alta
nvidia-driver: nvidia-driver: Privilege escalation via authorization check bypassbuild de las 07:11 UTC
CVE-2026-47551
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-freebuild de las 07:11 UTC
CVE-2026-47550
alta
nvidia-driver: nvidia-driver: Privilege escalation via untrusted pointer dereferencebuild de las 07:11 UTC
CVE-2026-47548
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47545
alta
nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds readbuild de las 07:11 UTC
CVE-2026-47540
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via integer underflow in the kernel mode layerbuild de las 07:11 UTC
CVE-2026-47530
alta
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47528
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via uninitialized pointer accessbuild de las 07:11 UTC
CVE-2026-47523
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47519
alta
nvidia-vgpu-software: nvidia-vgpu-software: Arbitrary code execution via kernel-mode out-of-bounds readbuild de las 07:11 UTC
CVE-2026-47516
alta
nvidia-driver: xorg-x11-drv-nvidia: NVIDIA GPU Display Driver: Arbitrary code execution via use-after-freebuild de las 07:11 UTC
CVE-2026-47514
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel stack disclosurebuild de las 07:11 UTC
CVE-2026-47513
alta
nvidia-driver: nvidia-driver: arbitrary code execution via kernel heap out-of-bounds readbuild de las 07:11 UTC
CVE-2026-47512
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via out-of-bounds read in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47511
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via kernel-mode out-of-bounds writebuild de las 07:11 UTC
CVE-2026-47510
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47508
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via incorrect numeric type conversionbuild de las 07:11 UTC
CVE-2026-47507
alta
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds array access in the kernel mode layerbuild de las 07:11 UTC
CVE-2026-47505
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47504
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via type confusion in the NGX updaterbuild de las 07:11 UTC
CVE-2026-47501
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setupbuild de las 07:11 UTC
CVE-2026-47500
alta
nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47496
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via crafted RPC in Virtual GPU Managerbuild de las 07:11 UTC
CVE-2026-47494
alta
nvidia-driver: nvidia-driver: Arbitrary code execution via format string flawbuild de las 07:11 UTC
CVE-2026-47491
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via improper memory releasebuild de las 07:11 UTC
CVE-2026-47489
alta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissionsbuild de las 07:11 UTC
GHSA-3q6v-r5mr-hxv8
alta
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanbuild de las 07:11 UTC
CVE-2026-102984
alta
Astro: Malformed port in the Host header can crash the Node adapterbuild de las 07:11 UTC
GHSA-9c5c-9qcx-q35q
alta
@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targetsbuild de las 07:11 UTC
CVE-2026-88920
alta
org.apache.wss4j/wss4j-ws-security-dom: Apache WSS4J: Authentication bypass via unsigned SAML sender-vouches assertionbuild de las 07:11 UTC
CVE-2026-62146
alta
cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socketbuild de las 07:11 UTC
CVE-2026-94002
alta
org.apache.sshd/sshd-sftp: Apache MINA SSHD: Denial of Service via unsolicited SFTP repliesbuild de las 07:11 UTC
CVE-2026-93994
alta
org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentationbuild de las 07:11 UTC
CVE-2026-77185
alta
org.apache.sshd/sshd-core: Apache MINA SSHD: Asynchronous authentication can bypass signature verificationbuild de las 07:11 UTC
CVE-2026-102578
alta
Moodle: sql injection in question bank web servicebuild de las 07:11 UTC
CVE-2026-92871
alta
pgpool-II: pgpool-II: Denial of Service via NULL pointer dereference in watchdog processbuild de las 07:11 UTC
CVE-2026-92870
alta
pgpool-II: pgpool-II: Denial of Service via stack-based buffer overflowbuild de las 07:11 UTC
CVE-2026-92867
alta
pgpool-II: Pgpool-II: arbitrary code execution via out-of-bounds writebuild de las 07:11 UTC
CVE-2026-103111
alta
pcre2: pcre2: Out-of-bounds write via crafted regular expressionbuild de las 07:11 UTC
GHSA-v53p-9fqp-m79j
alta
Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of servicebuild de las 07:11 UTC
GHSA-8238-w5pm-2374
alta
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)build de las 07:11 UTC
CVE-2026-102937
alta
virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation scriptbuild de las 07:11 UTC
CVE-2026-102930
alta
virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheelsbuild de las 07:11 UTC
CVE-2026-102925
alta
virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scriptsbuild de las 07:11 UTC
CVE-2026-102253
alta
iperf3: iperf3: Denial of Service via UDP receive worker infinite loopbuild de las 07:11 UTC
CVE-2026-67987
alta
Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerabilitybuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.