Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-106251
baja
chromium-browser: UI misrepresentation in Chromotingbuild de las 07:11 UTC
CVE-2026-106249
baja
chromium-browser: Incorrect authorization in Autofillbuild de las 07:11 UTC
CVE-2026-106247
baja
chromium-browser: angle: Buffer overflow in ANGLEbuild de las 07:11 UTC
CVE-2026-106236
baja
chromium-browser: UI misrepresentation in Chromotingbuild de las 07:11 UTC
CVE-2026-106234
baja
chromium-browser: Use after free in Networkbuild de las 07:11 UTC
CVE-2026-106220
baja
chromium-browser: Information leak in Passwordsbuild de las 07:11 UTC
CVE-2026-106192
baja
chromium-browser: Information leak in Mobilebuild de las 07:11 UTC
CVE-2026-106191
baja
chromium-browser: Missing authorization in Actorbuild de las 07:11 UTC
CVE-2026-106187
baja
chromium-browser: Missing authorization in Permissionsbuild de las 07:11 UTC
CVE-2026-106186
baja
chromium-browser: Uncontrolled search path element in CredentialProviderbuild de las 07:11 UTC
CVE-2026-106179
baja
chromium-browser: UI misrepresentation in WebAppInstallsbuild de las 07:11 UTC
CVE-2026-106101
baja
Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Servicebuild de las 07:11 UTC
CVE-2026-105800
baja
i18next-http-backend: i18next-http-backend: Server-Side Request Forgery via crafted path template parametersbuild de las 07:11 UTC
CVE-2026-105799
baja
LangChain: RediSearch Filter Injection via Unescaped Tag/Text Valuesbuild de las 07:11 UTC
CVE-2026-105795
baja
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsbuild de las 07:11 UTC
CVE-2026-75820
baja
aspell: aspell: Denial of Service via integer truncation in wordlist processingbuild de las 07:11 UTC
CVE-2026-75818
baja
aspell: aspell: Denial of Service via crafted compressed file in prezip-binbuild de las 07:11 UTC
CVE-2026-98363
baja
kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPSbuild de las 07:11 UTC
CVE-2026-98362
baja
kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_ratebuild de las 07:11 UTC
CVE-2026-98346
baja
kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevsbuild de las 07:11 UTC
CVE-2026-98345
baja
kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d()build de las 07:11 UTC
CVE-2026-98344
baja
kernel: dmaengine: Fix device kref underflow in dma_chan_put()build de las 07:11 UTC
CVE-2026-98338
baja
kernel: wifi: cfg80211: ibss: ref BSS entry for joined eventbuild de las 07:11 UTC
CVE-2026-98337
baja
kernel: wifi: mac80211: don't start a ROC while scanningbuild de las 07:11 UTC
CVE-2026-98334
baja
kernel: wifi: mac80211: reset state when starting AP failsbuild de las 07:11 UTC
CVE-2026-98332
baja
kernel: wifi: mac80211: only operate on TDLS peers in the TDLS codebuild de las 07:11 UTC
CVE-2026-98329
baja
kernel: wifi: mac80211: don't allow injecting frames wider than the chanctxbuild de las 07:11 UTC
CVE-2026-98328
baja
kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems lenbuild de las 07:11 UTC
CVE-2026-98326
baja
kernel: wifi: mac80211: mesh: release the channel if start failsbuild de las 07:11 UTC
CVE-2026-98325
baja
kernel: wifi: mac80211: set up the TX info early to fix failure pathsbuild de las 07:11 UTC
CVE-2026-98321
baja
kernel: netfilter: nf_nat: unregister and release hooks on errorbuild de las 07:11 UTC
CVE-2026-98319
baja
kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptrbuild de las 07:11 UTC
CVE-2026-98317
baja
kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MSbuild de las 07:11 UTC
CVE-2026-98308
baja
kernel: ALSA: hda: trace PCM open only after assigning a streambuild de las 07:11 UTC
CVE-2026-98307
baja
kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()build de las 07:11 UTC
CVE-2026-98304
baja
kernel: net: bcmgenet: restore the hardware filters on openbuild de las 07:11 UTC
CVE-2026-98297
baja
kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drainedbuild de las 07:11 UTC
CVE-2026-98289
baja
kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()build de las 07:11 UTC
CVE-2026-98285
baja
kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errorsbuild de las 07:11 UTC
CVE-2026-98278
baja
kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop checkbuild de las 07:11 UTC
CVE-2026-98270
baja
kernel: drm/amdgpu: check ras and obj before dereferencebuild de las 07:11 UTC
CVE-2026-98268
baja
kernel: perf: Fix null pointer access in is_include_guest_event()build de las 07:11 UTC
CVE-2026-98263
baja
kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->typebuild de las 07:11 UTC
CVE-2026-98259
baja
kernel: fs/dax: check zero or empty entry before converting xarray entrybuild de las 07:11 UTC
CVE-2026-98240
baja
kernel: net: ip_tunnel: initialize `options_len` before referencing optionsbuild de las 07:11 UTC
CVE-2026-98237
baja
kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chainbuild de las 07:11 UTC
CVE-2026-98235
baja
kernel: net/sched: act_api: release tail references on DELACTION failurebuild de las 07:11 UTC
CVE-2026-98234
baja
kernel: net/sched: hhf: cap hh_flows_limit at change timebuild de las 07:11 UTC
CVE-2026-98233
baja
kernel: net/packet: clear RX owner on VNET header errorbuild de las 07:11 UTC
CVE-2026-98224
baja
kernel: mm/vma: correctly unaccount on mmap_prepare() failurebuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.