Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-106422
baja
chromium-browser: Incorrect authorization in APIbuild de las 07:11 UTC
CVE-2026-106418
baja
chromium-browser: Missing authorization in Networkbuild de las 07:11 UTC
CVE-2026-106417
baja
chromium-browser: Integer overflow in Mediabuild de las 07:11 UTC
CVE-2026-106413
baja
chromium-browser: Race condition in Browserbuild de las 07:11 UTC
CVE-2026-106399
baja
chromium-browser: skia: Out of bounds read in Skiabuild de las 07:11 UTC
CVE-2026-106394
baja
chromium-browser: Incomplete cleanup in Glicbuild de las 07:11 UTC
CVE-2026-106390
baja
chromium-browser: Incorrect provision of specified functionality in SanitizerAPIbuild de las 07:11 UTC
CVE-2026-106385
baja
chromium-browser: Race condition in Chromotingbuild de las 07:11 UTC
CVE-2026-106380
baja
chromium-browser: UI misrepresentation in UIbuild de las 07:11 UTC
CVE-2026-106374
baja
chromium-browser: Type confusion in V8build de las 07:11 UTC
CVE-2026-106371
baja
chromium-browser: Incorrect authorization in Transactions Platformbuild de las 07:11 UTC
CVE-2026-106368
baja
chromium-browser: UI misrepresentation in UIbuild de las 07:11 UTC
CVE-2026-106362
baja
chromium-browser: Missing authorization in DevToolsbuild de las 07:11 UTC
CVE-2026-106359
baja
chromium-browser: Confused deputy in DeviceBoundSessionCredentialsbuild de las 07:11 UTC
CVE-2026-106355
baja
chromium-browser: Missing authorization in Mediabuild de las 07:11 UTC
CVE-2026-106353
baja
chromium-browser: Improper input validation in Mobilebuild de las 07:11 UTC
CVE-2026-106350
baja
chromium-browser: Incorrect authorization in Browserbuild de las 07:11 UTC
CVE-2026-106345
baja
chromium-browser: Use of released resource in Sessionbuild de las 07:11 UTC
CVE-2026-106344
baja
chromium-browser: Missing authorization in Permissionsbuild de las 07:11 UTC
CVE-2026-106343
baja
chromium-browser: Improper state validation in Autofill AIbuild de las 07:11 UTC
CVE-2026-106340
baja
chromium-browser: Missing authorization in CredentialProviderbuild de las 07:11 UTC
CVE-2026-106339
baja
chromium-browser: Use of released resource in Corebuild de las 07:11 UTC
CVE-2026-106338
baja
chromium-browser: UI misrepresentation in PictureInPicturebuild de las 07:11 UTC
CVE-2026-106334
baja
chromium-browser: Information leak in Paymentsbuild de las 07:11 UTC
CVE-2026-106331
baja
chromium-browser: Improper input validation in Extensionsbuild de las 07:11 UTC
CVE-2026-106325
baja
chromium-browser: Incorrect reference resolution in Corebuild de las 07:11 UTC
CVE-2026-106320
baja
chromium-browser: Use of released resource in UIbuild de las 07:11 UTC
CVE-2026-106317
baja
chromium-browser: UI misrepresentation in FullScreenbuild de las 07:11 UTC
CVE-2026-106316
baja
chromium-browser: UI misrepresentation in Chromotingbuild de las 07:11 UTC
CVE-2026-106312
baja
chromium-browser: Missing authorization in SignInbuild de las 07:11 UTC
CVE-2026-106310
baja
chromium-browser: Use of released resource in FontAccessbuild de las 07:11 UTC
CVE-2026-106309
baja
chromium-browser: Incorrect authorization in Selectionbuild de las 07:11 UTC
CVE-2026-106306
baja
chromium-browser: Incorrect authorization in DevToolsbuild de las 07:11 UTC
CVE-2026-106305
baja
chromium-browser: UI misrepresentation in Mobilebuild de las 07:11 UTC
CVE-2026-106299
baja
chromium-browser: Improper input validation in WebAudiobuild de las 07:11 UTC
CVE-2026-106297
baja
chromium-browser: Incorrect authorization in Schedulingbuild de las 07:11 UTC
CVE-2026-106296
baja
chromium-browser: Improper privilege management in UIbuild de las 07:11 UTC
CVE-2026-106288
baja
chromium-browser: Missing authorization in Browserbuild de las 07:11 UTC
CVE-2026-106287
baja
chromium-browser: Information loss in CORSbuild de las 07:11 UTC
CVE-2026-106285
baja
chromium-browser: UI misrepresentation in WebAppInstallsbuild de las 07:11 UTC
CVE-2026-106276
baja
chromium-browser: UI misrepresentation in Paymentsbuild de las 07:11 UTC
CVE-2026-106275
baja
chromium-browser: Uninitialized resource in GPUbuild de las 07:11 UTC
CVE-2026-106272
baja
chromium-browser: UI misrepresentation in Chromotingbuild de las 07:11 UTC
CVE-2026-106270
baja
chromium-browser: Incorrect authorization in WebAppInstallsbuild de las 07:11 UTC
CVE-2026-106269
baja
chromium-browser: Use after free in CSSbuild de las 07:11 UTC
CVE-2026-106264
baja
chromium-browser: Missing authorization in Web Authentication (Passkeys & Security Keys)build de las 07:11 UTC
CVE-2026-106260
baja
chromium-browser: Incorrect authorization in DevToolsbuild de las 07:11 UTC
CVE-2026-106259
baja
chromium-browser: Incorrect authorization in PermissionElementbuild de las 07:11 UTC
CVE-2026-106256
baja
chromium-browser: Information leak in Passwordsbuild de las 07:11 UTC
CVE-2026-106252
baja
chromium-browser: Incorrect comparison in Fontsbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.