Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-95370
media
chromium-browser: Inappropriate implementation in NFCbuild de las 07:11 UTC
CVE-2026-95369
media
chromium-browser: Inappropriate implementation in XMLbuild de las 07:11 UTC
CVE-2026-95366
media
chromium-browser: Use of released resource in Corebuild de las 07:11 UTC
CVE-2026-95363
media
chromium-browser: UI misrepresentation in FileSystembuild de las 07:11 UTC
CVE-2026-95362
media
chromium-browser: Cross-site request forgery in DevToolsbuild de las 07:11 UTC
CVE-2026-95360
media
chromium-browser: Race condition in Editingbuild de las 07:11 UTC
CVE-2026-95359
media
chromium-browser: Uninitialized resource in GPUbuild de las 07:11 UTC
CVE-2026-95358
media
chromium-browser: Incorrect authorization in Mobilebuild de las 07:11 UTC
CVE-2026-95354
media
chromium-browser: Use after free in Verifierbuild de las 07:11 UTC
CVE-2026-95353
media
chromium-browser: Use after free in Bindingsbuild de las 07:11 UTC
CVE-2026-95347
media
chromium-browser: Use after free in Updaterbuild de las 07:11 UTC
CVE-2026-95346
media
chromium-browser: UI misrepresentation in Chromotingbuild de las 07:11 UTC
CVE-2026-95345
media
chromium-browser: Use after free in Actorbuild de las 07:11 UTC
CVE-2026-95344
media
chromium-browser: Race condition in DevToolsbuild de las 07:11 UTC
CVE-2026-95341
media
chromium-browser: Improper input validation in Desktopbuild de las 07:11 UTC
CVE-2026-95337
media
chromium-browser: UI misrepresentation in Messagesbuild de las 07:11 UTC
CVE-2026-95336
media
chromium-browser: Information leak in Transactions Platformbuild de las 07:11 UTC
CVE-2026-95333
media
chromium-browser: Use after free in Metricsbuild de las 07:11 UTC
CVE-2026-95332
media
chromium-browser: Use of uninitialized variable in Tintbuild de las 07:11 UTC
CVE-2026-95331
media
chromium-browser: angle: Out of bounds write in ANGLEbuild de las 07:11 UTC
CVE-2026-95330
media
chromium-browser: Improper state validation in Downloadsbuild de las 07:11 UTC
CVE-2026-95325
media
chromium-browser: angle: Use after free in ANGLEbuild de las 07:11 UTC
CVE-2026-95323
media
chromium-browser: UI misrepresentation in Chromiumbuild de las 07:11 UTC
CVE-2026-95321
media
chromium-browser: UI misrepresentation in Paymentsbuild de las 07:11 UTC
CVE-2026-95320
media
chromium-browser: Missing authorization in Navigationbuild de las 07:11 UTC
CVE-2026-95317
media
chromium-browser: Incorrect authorization in MediaCapturebuild de las 07:11 UTC
CVE-2026-95314
media
chromium-browser: Incorrect authorization in HIDbuild de las 07:11 UTC
CVE-2026-95312
media
chromium-browser: Information leak in Passwordsbuild de las 07:11 UTC
CVE-2026-95311
media
chromium-browser: Free of non-heap memory in Fontsbuild de las 07:11 UTC
CVE-2026-95303
media
chromium-browser: Incomplete cleanup in SmartCardbuild de las 07:11 UTC
CVE-2026-95302
media
chromium-browser: Incorrect authorization in WebAPKsbuild de las 07:11 UTC
CVE-2026-95300
media
chromium-browser: Missing authorization in DevToolsbuild de las 07:11 UTC
CVE-2026-95297
media
chromium-browser: Missing authorization in Contextual Tasksbuild de las 07:11 UTC
CVE-2026-95295
media
chromium-browser: Information leak in Mobilebuild de las 07:11 UTC
CVE-2026-95294
media
chromium-browser: UI misrepresentation in Browserbuild de las 07:11 UTC
CVE-2026-95290
media
chromium-browser: Missing authorization in NFCbuild de las 07:11 UTC
CVE-2026-95289
media
chromium-browser: Incorrect authorization in Scrollbuild de las 07:11 UTC
CVE-2026-95287
media
chromium-browser: Missing authorization in Navigationbuild de las 07:11 UTC
CVE-2026-95276
media
chromium-browser: Improper input validation in Themesbuild de las 07:11 UTC
CVE-2026-95275
media
chromium-browser: Incorrect reference resolution in MediaStreambuild de las 07:11 UTC
CVE-2026-12345
media
python: python: Arbitrary file deletion via race condition during temporary directory cleanupbuild de las 07:11 UTC
GHSA-253c-mchw-3w2r
media
markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of secondsbuild de las 07:11 UTC
GHSA-r3ph-w7gj-g6xm
media
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesbuild de las 07:11 UTC
CVE-2026-92232
media
Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC
CVE-2026-92231
media
Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC
CVE-2026-92226
media
Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC
CVE-2026-92225
media
Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC
CVE-2026-92224
media
Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC
CVE-2026-90918
media
Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC
CVE-2026-90917
media
Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3build de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.