Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-100763
moyenne
Incorrect boundary conditions in the Graphics: WebGPU component. ...build de 13:12 UTC
CVE-2026-92034
moyenne
Site isolation issue in the Graphics component. This vulnerabilit ...build de 13:12 UTC
CVE-2026-84134
moyenne
Other issue in the Profile Backup component. This vulnerability w ...build de 13:12 UTC
CVE-2026-72137
moyenne
In the Linux kernel, the following vulnerability has been resolved: x ...build de 13:12 UTC
CVE-2026-107080
moyenne
openjpeg2: openjpeg2: Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_vbuild de 07:13 UTC
CVE-2026-92171
moyenne
infinispan-operator: Infinispan Operator: Sensitive information disclosure due pod args storebuild de 07:13 UTC
CVE-2026-116497
moyenne
gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemonbuild de 07:13 UTC
CVE-2026-116262
moyenne
libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web Inspectorbuild de 07:13 UTC
CVE-2026-115718
moyenne
builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_promptbuild de 07:13 UTC
CVE-2026-115717
moyenne
builder: builder: Information disclosure via Server-Side Request Forgery in convert_to_webpbuild de 07:13 UTC
CVE-2026-99082
moyenne
kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cachebuild de 07:13 UTC
CVE-2026-99081
moyenne
kernel: bnxt_en: fix DMA mapping length for padded small packetsbuild de 07:13 UTC
CVE-2026-99079
moyenne
kernel: net/mlx5e: Prevent stale XSK buffer release on refill retrybuild de 07:13 UTC
CVE-2026-99074
moyenne
kernel: ipv4: stop PMTU walk when nexthop group shrinksbuild de 07:13 UTC
CVE-2026-99073
moyenne
kernel: ipv4: stop exception dump when nexthop group shrinksbuild de 07:13 UTC
CVE-2026-98903
moyenne
kernel: mailbox: imx: Add a channel shutdown fieldbuild de 07:13 UTC
CVE-2026-98902
moyenne
kernel: md/raid5: let stripe batch bm_seq comparison wrap-safebuild de 07:13 UTC
CVE-2026-98900
moyenne
kernel: xen/gntalloc: validate grant count before allocationbuild de 07:13 UTC
CVE-2026-98898
moyenne
kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initializedbuild de 07:13 UTC
CVE-2026-98897
moyenne
kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ackbuild de 07:13 UTC
CVE-2026-98896
moyenne
kernel: thunderbolt: Keep the domain reference while processing hotplugbuild de 07:13 UTC
CVE-2026-98895
moyenne
kernel: net/mlx5: HWS, Handle destroying table that has a miss tablebuild de 07:13 UTC
CVE-2026-98894
moyenne
kernel: drm/amd/ras: reset CPER ring on corrupt entry sizebuild de 07:13 UTC
CVE-2026-98893
moyenne
kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload sizebuild de 07:13 UTC
CVE-2026-98892
moyenne
kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizebuild de 07:13 UTC
CVE-2026-98891
moyenne
kernel: wifi: mac80211: validate deauth frame length before reason accessbuild de 07:13 UTC
CVE-2026-98890
moyenne
kernel: wifi: libertas: reject short monitor TX framesbuild de 07:13 UTC
CVE-2026-98889
moyenne
kernel: wifi: iwlwifi: mvm: fix sched scan IE sizingbuild de 07:13 UTC
CVE-2026-98888
moyenne
kernel: arm64: kprobes: Allow reentering kprobes while single-steppingbuild de 07:13 UTC
CVE-2026-98887
moyenne
kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFObuild de 07:13 UTC
CVE-2026-98886
moyenne
kernel: drm/gma500: return errors from Oaktrail HDMI I2C readsbuild de 07:13 UTC
CVE-2026-98884
moyenne
kernel: mmc: core: Add validation for host-provided max_segsbuild de 07:13 UTC
CVE-2026-98883
moyenne
kernel: serial: 8250_port: recognize UPIO_AUbuild de 07:13 UTC
CVE-2026-98882
moyenne
kernel: media: chips-media: wave5: Add range checks for dec_output_infobuild de 07:13 UTC
CVE-2026-98881
moyenne
kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()build de 07:13 UTC
CVE-2026-98880
moyenne
kernel: ntfs3: handle set_blocksize failuresbuild de 07:13 UTC
CVE-2026-98879
moyenne
kernel: isofs: handle set_blocksize failuresbuild de 07:13 UTC
CVE-2026-98878
moyenne
kernel: irqchip/gic-v5: Immediately exec priority drop following activatebuild de 07:13 UTC
CVE-2026-98877
moyenne
kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probedbuild de 07:13 UTC
CVE-2026-115360
moyenne
github.com/openbao/openbao: OpenBao: Open redirect via OIDC identity provider user interfacebuild de 07:13 UTC
CVE-2026-93237
moyenne
kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definitionbuild de 07:13 UTC
CVE-2026-80728
moyenne
kernel: Revert "drm/amdgpu: fix aperture mapping leak"build de 07:13 UTC
CVE-2026-43670
moyenne
A Content Security Policy bypass was addressed with improved enforceme ...build de 07:13 UTC
CVE-2024-43768
moyenne
In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...build de 07:13 UTC
CVE-2026-18054
moyenne
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemubuild de 07:13 UTC
CVE-2026-50624
moyenne
Amazon Linux 2 2017.12 - ALAS2-2026-4009: medium priority package update for qemubuild de 07:13 UTC
CVE-2026-61476
moyenne
Title Not Availablebuild de 07:13 UTC
CVE-2026-63320
moyenne
ELSA-2026-500245: qemu-kvm security update (IMPORTANT)build de 07:13 UTC
CVE-2026-63322
moyenne
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemubuild de 07:13 UTC
CVE-2026-116152
moyenne
ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoderbuild de 01:25 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.