Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-102331
alta
chromium-browser: angle: chromium-browser: arbitrary code execution via buffer overflow in ANGLEbuild de las 07:11 UTC
CVE-2026-102329
alta
chromium-browser: chromium-browser: Cross-site scripting in WebUIbuild de las 07:11 UTC
CVE-2026-102328
alta
chromium-browser: chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-102327
alta
chromium-browser: chromium-browser: Incorrect authorization in WebViewbuild de las 07:11 UTC
CVE-2026-102326
alta
chromium-browser: chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-102324
alta
chromium-browser: chromium-browser: Use after free in PictureInPicturebuild de las 07:11 UTC
CVE-2026-102323
alta
chromium-browser: chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-102321
alta
chromium-browser: chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-102319
alta
chromium-browser: chromium-browser: Uninitialized resource in GPUbuild de las 07:11 UTC
CVE-2026-102318
alta
chromium-browser: chromium-browser: Out of bounds read in WebGLbuild de las 07:11 UTC
CVE-2026-102317
alta
chromium-browser: chromium-browser: Improper privilege management in Mojobuild de las 07:11 UTC
CVE-2026-102316
alta
chromium-browser: chromium-browser: Use after free in Viewsbuild de las 07:11 UTC
CVE-2026-102315
alta
chromium-browser: chromium-browser: Uninitialized resource in Mediabuild de las 07:11 UTC
CVE-2026-102313
alta
chromium-browser: angle: chromium-browser: Information disclosure via uninitialized resource in ANGLEbuild de las 07:11 UTC
CVE-2026-102311
alta
chromium-browser: chromium-browser: Uninitialized resource in GPUbuild de las 07:11 UTC
CVE-2026-102309
alta
chromium-browser: chromium-browser: Use after free in FullScreenbuild de las 07:11 UTC
CVE-2026-102307
alta
chromium-browser: chromium-browser: Uninitialized resource in Dawnbuild de las 07:11 UTC
CVE-2026-102306
alta
chromium-browser: chromium-browser: Use after free in Bluetoothbuild de las 07:11 UTC
CVE-2026-102304
alta
chromium-browser: chromium-browser: Use after free in Passwordsbuild de las 07:11 UTC
CVE-2026-102302
alta
chromium-browser: chromium-browser: Buffer overflow in V8build de las 07:11 UTC
CVE-2026-102301
alta
chromium-browser: chromium-browser: Out of bounds write in GPUbuild de las 07:11 UTC
CVE-2026-102299
alta
chromium-browser: chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-102831
alta
jupyterlab: JupyterLab: Cross-Site Scripting via malicious clipboard cell pastingbuild de las 07:11 UTC
CVE-2026-102829
alta
simple-git: simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionbuild de las 07:11 UTC
CVE-2026-102826
alta
simple-git: simple-git allows command execution through unblocked Git configuration includesbuild de las 07:11 UTC
CVE-2026-102823
alta
russh: russh: State corruption via unverified SSH channel identifiersbuild de las 07:11 UTC
GHSA-rcw4-f5rp-g42v
alta
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0build de las 07:11 UTC
CVE-2026-95373
alta
chromium-browser: Use after free in DevToolsbuild de las 07:11 UTC
CVE-2026-95372
alta
chromium-browser: Use after free in Chromecastbuild de las 07:11 UTC
CVE-2026-95365
alta
chromium-browser: Type confusion in IndexedDBbuild de las 07:11 UTC
CVE-2026-95357
alta
chromium-browser: Out of bounds write in GPUbuild de las 07:11 UTC
CVE-2026-95356
alta
chromium-browser: Use after free in WindowDialogbuild de las 07:11 UTC
CVE-2026-95355
alta
chromium-browser: Incorrect authorization in Navigationbuild de las 07:11 UTC
CVE-2026-95351
alta
chromium-browser: Use after free in Viewsbuild de las 07:11 UTC
CVE-2026-95350
alta
chromium-browser: angle: Buffer overflow in ANGLEbuild de las 07:11 UTC
CVE-2026-95349
alta
chromium-browser: Buffer overflow in WebGLbuild de las 07:11 UTC
CVE-2026-95348
alta
chromium-browser: Use after free in Bluetoothbuild de las 07:11 UTC
CVE-2026-95343
alta
chromium-browser: Use after free in WebAudiobuild de las 07:11 UTC
CVE-2026-95339
alta
chromium-browser: Use after free in ServiceWorkerbuild de las 07:11 UTC
CVE-2026-95338
alta
chromium-browser: Use after free in PDFiumbuild de las 07:11 UTC
CVE-2026-95335
alta
chromium-browser: Use after free in HIDbuild de las 07:11 UTC
CVE-2026-95329
alta
chromium-browser: Out of bounds write in WebGLbuild de las 07:11 UTC
CVE-2026-95324
alta
chromium-browser: Uninitialized resource in GPUbuild de las 07:11 UTC
CVE-2026-95322
alta
chromium-browser: Out of bounds write in GPUbuild de las 07:11 UTC
CVE-2026-95318
alta
chromium-browser: Buffer overflow in Videobuild de las 07:11 UTC
CVE-2026-95315
alta
chromium-browser: Use after free in Aurabuild de las 07:11 UTC
CVE-2026-95313
alta
chromium-browser: Use after free in Fullscreenbuild de las 07:11 UTC
CVE-2026-95310
alta
chromium-browser: Use after free in AdFilterbuild de las 07:11 UTC
CVE-2026-95306
alta
chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-95304
alta
chromium-browser: Out of bounds write in V8build de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.