Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98423
moyenne
kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stoppingbuild de 07:11 UTC
CVE-2026-98420
moyenne
kernel: ksmbd: follow SMB2 session expiration semanticsbuild de 07:11 UTC
CVE-2026-98419
moyenne
kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()build de 07:11 UTC
CVE-2026-98418
moyenne
kernel: sched/core: Avoid false migration warning for proxy donorsbuild de 07:11 UTC
CVE-2026-98416
moyenne
kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()build de 07:11 UTC
CVE-2026-98415
moyenne
kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator nodebuild de 07:11 UTC
CVE-2026-98413
moyenne
kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()build de 07:11 UTC
CVE-2026-98412
moyenne
kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()build de 07:11 UTC
CVE-2026-98411
moyenne
kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()build de 07:11 UTC
CVE-2026-98410
moyenne
kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdogbuild de 07:11 UTC
CVE-2026-98409
moyenne
kernel: watchdog: rtd119x: Avoid division by zerobuild de 07:11 UTC
CVE-2026-98408
moyenne
kernel: watchdog: rzv2h: Avoid division by zerobuild de 07:11 UTC
CVE-2026-98407
moyenne
kernel: wifi: rsi: fix heap OOB write on key removalbuild de 07:11 UTC
CVE-2026-98403
moyenne
kernel: s390/boot: Avoid IPL parameter append past command linebuild de 07:11 UTC
CVE-2026-98401
moyenne
kernel: net: iptunnel: fix stale transport header during tunnel decapsulationbuild de 07:11 UTC
CVE-2026-98397
moyenne
kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardownbuild de 07:11 UTC
CVE-2026-98396
moyenne
kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()build de 07:11 UTC
CVE-2026-98395
moyenne
kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exitbuild de 07:11 UTC
CVE-2026-98392
moyenne
kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-onebuild de 07:11 UTC
CVE-2026-109968
moyenne
clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable filebuild de 07:11 UTC
CVE-2026-88829
moyenne
busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxybuild de 07:11 UTC
CVE-2026-109971
moyenne
clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-toolbuild de 07:11 UTC
CVE-2026-109970
moyenne
clevis: clevis: PKCS#11 token PIN written to world-readable filebuild de 07:11 UTC
CVE-2026-109969
moyenne
clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umaskbuild de 07:11 UTC
CVE-2026-84790
moyenne
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to ...build de 07:11 UTC
CVE-2026-77207
moyenne
libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTSbuild de 07:11 UTC
CVE-2026-77206
moyenne
libreswan: IKEv2 pre-authentication Null Pointer deref in EAP codebuild de 07:11 UTC
CVE-2026-110142
moyenne
chromium-browser: Use after free in FileSystembuild de 07:11 UTC
CVE-2026-56826
moyenne
Shopping privilege escalation through missing authorization in Settings componentsbuild de 07:11 UTC
GHSA-86xp-94pg-8r6r
moyenne
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerabilitybuild de 07:11 UTC
CVE-2026-96303
moyenne
Microsoft PowerShell Security Feature Bypass Vulnerabilitybuild de 07:11 UTC
CVE-2026-96238
moyenne
dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerabilitybuild de 07:11 UTC
CVE-2026-96234
moyenne
dotnet: .NET Information Disclosure Vulnerabilitybuild de 07:11 UTC
CVE-2026-96229
moyenne
dotnet: .NET Information Disclosure Vulnerabilitybuild de 07:11 UTC
CVE-2026-85790
moyenne
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerabilitybuild de 07:11 UTC
CVE-2026-85747
moyenne
Distribution is a toolkit to pack, ship, store, and deliver container ...build de 07:11 UTC
CVE-2026-70196
moyenne
dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerabilitybuild de 07:11 UTC
CVE-2026-70194
moyenne
dotnet: .NET Framework Security Feature Bypass Vulnerabilitybuild de 07:11 UTC
CVE-2026-70165
moyenne
dotnet: dotnet: Local privilege escalation via improper link resolutionbuild de 07:11 UTC
CVE-2026-70162
moyenne
dotnet: dotnet: Denial of Service via specially crafted web requestsbuild de 07:11 UTC
CVE-2026-66822
moyenne
dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerabilitybuild de 07:11 UTC
CVE-2026-93294
moyenne
grafana: Grafana: Information disclosure via Azure Monitor resource proxybuild de 07:11 UTC
CVE-2026-33374
moyenne
grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion APIbuild de 07:11 UTC
CVE-2026-15577
moyenne
grafana: Grafana: Unauthorized configuration modification via status subresourcebuild de 07:11 UTC
CVE-2026-88838
moyenne
busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictionsbuild de 07:11 UTC
CVE-2026-88833
moyenne
busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of servicebuild de 07:11 UTC
CVE-2026-109828
moyenne
libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsingbuild de 07:11 UTC
CVE-2026-104250
moyenne
unstructured: Stored XSS via unescaped HTML generationbuild de 07:11 UTC
CVE-2026-79611
moyenne
xen: xen: Denial of Service of guest virtual machines via VM entry failurebuild de 07:11 UTC
CVE-2026-79609
moyenne
xen: Xen: Denial of Service via guest page table access beyond direct memory mappingbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.