Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-106251
faible
chromium-browser: UI misrepresentation in Chromotingbuild de 07:11 UTC
CVE-2026-106249
faible
chromium-browser: Incorrect authorization in Autofillbuild de 07:11 UTC
CVE-2026-106247
faible
chromium-browser: angle: Buffer overflow in ANGLEbuild de 07:11 UTC
CVE-2026-106236
faible
chromium-browser: UI misrepresentation in Chromotingbuild de 07:11 UTC
CVE-2026-106234
faible
chromium-browser: Use after free in Networkbuild de 07:11 UTC
CVE-2026-106220
faible
chromium-browser: Information leak in Passwordsbuild de 07:11 UTC
CVE-2026-106192
faible
chromium-browser: Information leak in Mobilebuild de 07:11 UTC
CVE-2026-106191
faible
chromium-browser: Missing authorization in Actorbuild de 07:11 UTC
CVE-2026-106187
faible
chromium-browser: Missing authorization in Permissionsbuild de 07:11 UTC
CVE-2026-106186
faible
chromium-browser: Uncontrolled search path element in CredentialProviderbuild de 07:11 UTC
CVE-2026-106179
faible
chromium-browser: UI misrepresentation in WebAppInstallsbuild de 07:11 UTC
CVE-2026-106101
faible
Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Servicebuild de 07:11 UTC
CVE-2026-105800
faible
i18next-http-backend: i18next-http-backend: Server-Side Request Forgery via crafted path template parametersbuild de 07:11 UTC
CVE-2026-105799
faible
LangChain: RediSearch Filter Injection via Unescaped Tag/Text Valuesbuild de 07:11 UTC
CVE-2026-105795
faible
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsbuild de 07:11 UTC
CVE-2026-75820
faible
aspell: aspell: Denial of Service via integer truncation in wordlist processingbuild de 07:11 UTC
CVE-2026-75818
faible
aspell: aspell: Denial of Service via crafted compressed file in prezip-binbuild de 07:11 UTC
CVE-2026-98363
faible
kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPSbuild de 07:11 UTC
CVE-2026-98362
faible
kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_ratebuild de 07:11 UTC
CVE-2026-98346
faible
kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevsbuild de 07:11 UTC
CVE-2026-98345
faible
kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d()build de 07:11 UTC
CVE-2026-98344
faible
kernel: dmaengine: Fix device kref underflow in dma_chan_put()build de 07:11 UTC
CVE-2026-98338
faible
kernel: wifi: cfg80211: ibss: ref BSS entry for joined eventbuild de 07:11 UTC
CVE-2026-98337
faible
kernel: wifi: mac80211: don't start a ROC while scanningbuild de 07:11 UTC
CVE-2026-98334
faible
kernel: wifi: mac80211: reset state when starting AP failsbuild de 07:11 UTC
CVE-2026-98332
faible
kernel: wifi: mac80211: only operate on TDLS peers in the TDLS codebuild de 07:11 UTC
CVE-2026-98329
faible
kernel: wifi: mac80211: don't allow injecting frames wider than the chanctxbuild de 07:11 UTC
CVE-2026-98328
faible
kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems lenbuild de 07:11 UTC
CVE-2026-98326
faible
kernel: wifi: mac80211: mesh: release the channel if start failsbuild de 07:11 UTC
CVE-2026-98325
faible
kernel: wifi: mac80211: set up the TX info early to fix failure pathsbuild de 07:11 UTC
CVE-2026-98321
faible
kernel: netfilter: nf_nat: unregister and release hooks on errorbuild de 07:11 UTC
CVE-2026-98319
faible
kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptrbuild de 07:11 UTC
CVE-2026-98317
faible
kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MSbuild de 07:11 UTC
CVE-2026-98308
faible
kernel: ALSA: hda: trace PCM open only after assigning a streambuild de 07:11 UTC
CVE-2026-98307
faible
kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()build de 07:11 UTC
CVE-2026-98304
faible
kernel: net: bcmgenet: restore the hardware filters on openbuild de 07:11 UTC
CVE-2026-98297
faible
kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drainedbuild de 07:11 UTC
CVE-2026-98289
faible
kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()build de 07:11 UTC
CVE-2026-98285
faible
kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errorsbuild de 07:11 UTC
CVE-2026-98278
faible
kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop checkbuild de 07:11 UTC
CVE-2026-98270
faible
kernel: drm/amdgpu: check ras and obj before dereferencebuild de 07:11 UTC
CVE-2026-98268
faible
kernel: perf: Fix null pointer access in is_include_guest_event()build de 07:11 UTC
CVE-2026-98263
faible
kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->typebuild de 07:11 UTC
CVE-2026-98259
faible
kernel: fs/dax: check zero or empty entry before converting xarray entrybuild de 07:11 UTC
CVE-2026-98240
faible
kernel: net: ip_tunnel: initialize `options_len` before referencing optionsbuild de 07:11 UTC
CVE-2026-98237
faible
kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chainbuild de 07:11 UTC
CVE-2026-98235
faible
kernel: net/sched: act_api: release tail references on DELACTION failurebuild de 07:11 UTC
CVE-2026-98234
faible
kernel: net/sched: hhf: cap hh_flows_limit at change timebuild de 07:11 UTC
CVE-2026-98233
faible
kernel: net/packet: clear RX owner on VNET header errorbuild de 07:11 UTC
CVE-2026-98224
faible
kernel: mm/vma: correctly unaccount on mmap_prepare() failurebuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.