Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-100763
media
Incorrect boundary conditions in the Graphics: WebGPU component. ...build de las 13:12 UTC
CVE-2026-92034
media
Site isolation issue in the Graphics component. This vulnerabilit ...build de las 13:12 UTC
CVE-2026-84134
media
Other issue in the Profile Backup component. This vulnerability w ...build de las 13:12 UTC
CVE-2026-72137
media
In the Linux kernel, the following vulnerability has been resolved: x ...build de las 13:12 UTC
CVE-2026-107080
media
openjpeg2: openjpeg2: Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_vbuild de las 07:13 UTC
CVE-2026-92171
media
infinispan-operator: Infinispan Operator: Sensitive information disclosure due pod args storebuild de las 07:13 UTC
CVE-2026-116497
media
gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemonbuild de las 07:13 UTC
CVE-2026-116262
media
libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web Inspectorbuild de las 07:13 UTC
CVE-2026-115718
media
builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_promptbuild de las 07:13 UTC
CVE-2026-115717
media
builder: builder: Information disclosure via Server-Side Request Forgery in convert_to_webpbuild de las 07:13 UTC
CVE-2026-99082
media
kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cachebuild de las 07:13 UTC
CVE-2026-99081
media
kernel: bnxt_en: fix DMA mapping length for padded small packetsbuild de las 07:13 UTC
CVE-2026-99079
media
kernel: net/mlx5e: Prevent stale XSK buffer release on refill retrybuild de las 07:13 UTC
CVE-2026-99074
media
kernel: ipv4: stop PMTU walk when nexthop group shrinksbuild de las 07:13 UTC
CVE-2026-99073
media
kernel: ipv4: stop exception dump when nexthop group shrinksbuild de las 07:13 UTC
CVE-2026-98903
media
kernel: mailbox: imx: Add a channel shutdown fieldbuild de las 07:13 UTC
CVE-2026-98902
media
kernel: md/raid5: let stripe batch bm_seq comparison wrap-safebuild de las 07:13 UTC
CVE-2026-98900
media
kernel: xen/gntalloc: validate grant count before allocationbuild de las 07:13 UTC
CVE-2026-98898
media
kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initializedbuild de las 07:13 UTC
CVE-2026-98897
media
kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ackbuild de las 07:13 UTC
CVE-2026-98896
media
kernel: thunderbolt: Keep the domain reference while processing hotplugbuild de las 07:13 UTC
CVE-2026-98895
media
kernel: net/mlx5: HWS, Handle destroying table that has a miss tablebuild de las 07:13 UTC
CVE-2026-98894
media
kernel: drm/amd/ras: reset CPER ring on corrupt entry sizebuild de las 07:13 UTC
CVE-2026-98893
media
kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload sizebuild de las 07:13 UTC
CVE-2026-98892
media
kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizebuild de las 07:13 UTC
CVE-2026-98891
media
kernel: wifi: mac80211: validate deauth frame length before reason accessbuild de las 07:13 UTC
CVE-2026-98890
media
kernel: wifi: libertas: reject short monitor TX framesbuild de las 07:13 UTC
CVE-2026-98889
media
kernel: wifi: iwlwifi: mvm: fix sched scan IE sizingbuild de las 07:13 UTC
CVE-2026-98888
media
kernel: arm64: kprobes: Allow reentering kprobes while single-steppingbuild de las 07:13 UTC
CVE-2026-98887
media
kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFObuild de las 07:13 UTC
CVE-2026-98886
media
kernel: drm/gma500: return errors from Oaktrail HDMI I2C readsbuild de las 07:13 UTC
CVE-2026-98884
media
kernel: mmc: core: Add validation for host-provided max_segsbuild de las 07:13 UTC
CVE-2026-98883
media
kernel: serial: 8250_port: recognize UPIO_AUbuild de las 07:13 UTC
CVE-2026-98882
media
kernel: media: chips-media: wave5: Add range checks for dec_output_infobuild de las 07:13 UTC
CVE-2026-98881
media
kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()build de las 07:13 UTC
CVE-2026-98880
media
kernel: ntfs3: handle set_blocksize failuresbuild de las 07:13 UTC
CVE-2026-98879
media
kernel: isofs: handle set_blocksize failuresbuild de las 07:13 UTC
CVE-2026-98878
media
kernel: irqchip/gic-v5: Immediately exec priority drop following activatebuild de las 07:13 UTC
CVE-2026-98877
media
kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probedbuild de las 07:13 UTC
CVE-2026-115360
media
github.com/openbao/openbao: OpenBao: Open redirect via OIDC identity provider user interfacebuild de las 07:13 UTC
CVE-2026-93237
media
kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definitionbuild de las 07:13 UTC
CVE-2026-80728
media
kernel: Revert "drm/amdgpu: fix aperture mapping leak"build de las 07:13 UTC
CVE-2026-43670
media
A Content Security Policy bypass was addressed with improved enforceme ...build de las 07:13 UTC
CVE-2024-43768
media
In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...build de las 07:13 UTC
CVE-2026-18054
media
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemubuild de las 07:13 UTC
CVE-2026-50624
media
Amazon Linux 2 2017.12 - ALAS2-2026-4009: medium priority package update for qemubuild de las 07:13 UTC
CVE-2026-61476
media
Title Not Availablebuild de las 07:13 UTC
CVE-2026-63320
media
ELSA-2026-500245: qemu-kvm security update (IMPORTANT)build de las 07:13 UTC
CVE-2026-63322
media
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemubuild de las 07:13 UTC
CVE-2026-116152
media
ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoderbuild de las 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.