Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-110168 high	chromium-browser: Use after free in V8	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110167 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110166 high	chromium-browser: Buffer overflow in Animation	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110165 high	chromium-browser: Use after free in Core	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110164 high	chromium-browser: Use after free in DOM	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110163 high	chromium-browser: Use after free in DOM	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110162 high	chromium-browser: Use after free in Desktop	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110161 high	chromium-browser: Use after free in Network	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110160 high	chromium-browser: Missing authorization in ReadingMode	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110159 high	chromium-browser: Incorrect authorization in Updater	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110158 high	chromium-browser: Use after free in Passwords	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110157 high	chromium-browser: Use after free in SVG	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110156 high	chromium-browser: Incorrect reference resolution in Extensions	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110155 high	chromium-browser: Buffer overflow in PDFium	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110154 high	chromium-browser: Use after free in Canvas	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110153 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110152 high	chromium-browser: angle: Buffer overflow in ANGLE	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110151 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110150 high	chromium-browser: Privilege elevation in Installer	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110149 high	chromium-browser: Use after free in Browser	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110148 high	chromium-browser: Use after free in SVG	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110147 high	chromium-browser: Use after free in PDF	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110146 high	chromium-browser: Information leak in Passwords	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110145 high	chromium-browser: Use after free in Passwords	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110144 high	chromium-browser: Incorrect authorization in Mojo	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110143 high	chromium-browser: Use of uninitialized variable in ThirdParty lmza_sdk	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110141 high	chromium-browser: Observable discrepancy in Media	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110140 high	chromium-browser: Type confusion in V8	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110139 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110138 high	chromium-browser: Use after free in ShapeDetection	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110137 high	chromium-browser: Use after free in WebRTC	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96956 high	dotnet8.0: dotnet10.0: dotnet9.0: SQL Server Elevation of Privilege Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-55601 high	multitail: multitail: Arbitrary command execution via improper input escaping in execute-on-match feature	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-97801 high	dotnet: .NET Framework: Data tampering via improper input validation	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96960 high	dotnet: .NET: Denial of Service via asymmetric resource consumption	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96959 high	dotnet: .NET: Denial of Service via unthrottled resource allocation	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96958 high	dotnet: .NET Denial of Service Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96957 high	dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96251 high	Microsoft PowerShell Remote Code Execution Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96237 high	dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96236 high	dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96235 high	dotnet: .NET: arbitrary code execution via out-of-bounds write	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96233 high	dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96232 high	dotnet: .NET: Information disclosure via out-of-bounds read	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96231 high	dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96230 high	dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96225 high	dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96224 high	dotnet: .NET: arbitrary code execution via out-of-bounds write	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-96222 high	dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-87697 high	dotnet: dotnet: arbitrary code execution via untrusted data deserialization	since at least 24 Oct 202607:11 UTC build	13 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.