Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-47558
élevée
nvidia-driver: nvidia-driver: Privilege escalation via double-free of imported memory statebuild de 07:11 UTC
CVE-2026-47556
élevée
nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflowbuild de 07:11 UTC
CVE-2026-47554
élevée
nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressurebuild de 07:11 UTC
CVE-2026-47553
élevée
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layerbuild de 07:11 UTC
CVE-2026-47552
élevée
nvidia-driver: nvidia-driver: Privilege escalation via authorization check bypassbuild de 07:11 UTC
CVE-2026-47551
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-freebuild de 07:11 UTC
CVE-2026-47550
élevée
nvidia-driver: nvidia-driver: Privilege escalation via untrusted pointer dereferencebuild de 07:11 UTC
CVE-2026-47548
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layerbuild de 07:11 UTC
CVE-2026-47545
élevée
nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds readbuild de 07:11 UTC
CVE-2026-47540
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via integer underflow in the kernel mode layerbuild de 07:11 UTC
CVE-2026-47530
élevée
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layerbuild de 07:11 UTC
CVE-2026-47528
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via uninitialized pointer accessbuild de 07:11 UTC
CVE-2026-47523
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layerbuild de 07:11 UTC
CVE-2026-47519
élevée
nvidia-vgpu-software: nvidia-vgpu-software: Arbitrary code execution via kernel-mode out-of-bounds readbuild de 07:11 UTC
CVE-2026-47516
élevée
nvidia-driver: xorg-x11-drv-nvidia: NVIDIA GPU Display Driver: Arbitrary code execution via use-after-freebuild de 07:11 UTC
CVE-2026-47514
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel stack disclosurebuild de 07:11 UTC
CVE-2026-47513
élevée
nvidia-driver: nvidia-driver: arbitrary code execution via kernel heap out-of-bounds readbuild de 07:11 UTC
CVE-2026-47512
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via out-of-bounds read in kernel mode layerbuild de 07:11 UTC
CVE-2026-47511
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via kernel-mode out-of-bounds writebuild de 07:11 UTC
CVE-2026-47510
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layerbuild de 07:11 UTC
CVE-2026-47508
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via incorrect numeric type conversionbuild de 07:11 UTC
CVE-2026-47507
élevée
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds array access in the kernel mode layerbuild de 07:11 UTC
CVE-2026-47505
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layerbuild de 07:11 UTC
CVE-2026-47504
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via type confusion in the NGX updaterbuild de 07:11 UTC
CVE-2026-47501
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setupbuild de 07:11 UTC
CVE-2026-47500
élevée
nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode layerbuild de 07:11 UTC
CVE-2026-47496
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via crafted RPC in Virtual GPU Managerbuild de 07:11 UTC
CVE-2026-47494
élevée
nvidia-driver: nvidia-driver: Arbitrary code execution via format string flawbuild de 07:11 UTC
CVE-2026-47491
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via improper memory releasebuild de 07:11 UTC
CVE-2026-47489
élevée
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissionsbuild de 07:11 UTC
GHSA-3q6v-r5mr-hxv8
élevée
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanbuild de 07:11 UTC
CVE-2026-102984
élevée
Astro: Malformed port in the Host header can crash the Node adapterbuild de 07:11 UTC
GHSA-9c5c-9qcx-q35q
élevée
@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targetsbuild de 07:11 UTC
CVE-2026-88920
élevée
org.apache.wss4j/wss4j-ws-security-dom: Apache WSS4J: Authentication bypass via unsigned SAML sender-vouches assertionbuild de 07:11 UTC
CVE-2026-62146
élevée
cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socketbuild de 07:11 UTC
CVE-2026-94002
élevée
org.apache.sshd/sshd-sftp: Apache MINA SSHD: Denial of Service via unsolicited SFTP repliesbuild de 07:11 UTC
CVE-2026-93994
élevée
org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentationbuild de 07:11 UTC
CVE-2026-77185
élevée
org.apache.sshd/sshd-core: Apache MINA SSHD: Asynchronous authentication can bypass signature verificationbuild de 07:11 UTC
CVE-2026-102578
élevée
Moodle: sql injection in question bank web servicebuild de 07:11 UTC
CVE-2026-92871
élevée
pgpool-II: pgpool-II: Denial of Service via NULL pointer dereference in watchdog processbuild de 07:11 UTC
CVE-2026-92870
élevée
pgpool-II: pgpool-II: Denial of Service via stack-based buffer overflowbuild de 07:11 UTC
CVE-2026-92867
élevée
pgpool-II: Pgpool-II: arbitrary code execution via out-of-bounds writebuild de 07:11 UTC
CVE-2026-103111
élevée
pcre2: pcre2: Out-of-bounds write via crafted regular expressionbuild de 07:11 UTC
GHSA-v53p-9fqp-m79j
élevée
Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of servicebuild de 07:11 UTC
GHSA-8238-w5pm-2374
élevée
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)build de 07:11 UTC
CVE-2026-102937
élevée
virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation scriptbuild de 07:11 UTC
CVE-2026-102930
élevée
virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheelsbuild de 07:11 UTC
CVE-2026-102925
élevée
virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scriptsbuild de 07:11 UTC
CVE-2026-102253
élevée
iperf3: iperf3: Denial of Service via UDP receive worker infinite loopbuild de 07:11 UTC
CVE-2026-67987
élevée
Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerabilitybuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.