Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-47558 high	nvidia-driver: nvidia-driver: Privilege escalation via double-free of imported memory state	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47556 high	nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47554 high	nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressure	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47553 high	nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47552 high	nvidia-driver: nvidia-driver: Privilege escalation via authorization check bypass	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47551 high	nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-free	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47550 high	nvidia-driver: nvidia-driver: Privilege escalation via untrusted pointer dereference	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47548 high	nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47545 high	nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds read	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47540 high	nvidia-driver: nvidia-driver: Arbitrary code execution via integer underflow in the kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47530 high	nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47528 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via uninitialized pointer access	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47523 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47519 high	nvidia-vgpu-software: nvidia-vgpu-software: Arbitrary code execution via kernel-mode out-of-bounds read	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47516 high	nvidia-driver: xorg-x11-drv-nvidia: NVIDIA GPU Display Driver: Arbitrary code execution via use-after-free	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47514 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel stack disclosure	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47513 high	nvidia-driver: nvidia-driver: arbitrary code execution via kernel heap out-of-bounds read	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47512 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via out-of-bounds read in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47511 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via kernel-mode out-of-bounds write	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47510 high	nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47508 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via incorrect numeric type conversion	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47507 high	nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds array access in the kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47505 high	nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47504 high	nvidia-driver: nvidia-driver: Arbitrary code execution via type confusion in the NGX updater	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47501 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setup	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47500 high	nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode layer	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47496 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via crafted RPC in Virtual GPU Manager	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47494 high	nvidia-driver: nvidia-driver: Arbitrary code execution via format string flaw	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47491 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via improper memory release	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-47489 high	nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissions	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
GHSA-3q6v-r5mr-hxv8 high	league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-102984 high	Astro: Malformed port in the Host header can crash the Node adapter	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
GHSA-9c5c-9qcx-q35q high	@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-88920 high	org.apache.wss4j/wss4j-ws-security-dom: Apache WSS4J: Authentication bypass via unsigned SAML sender-vouches assertion	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-62146 high	cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socket	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-94002 high	org.apache.sshd/sshd-sftp: Apache MINA SSHD: Denial of Service via unsolicited SFTP replies	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-93994 high	org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentation	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-77185 high	org.apache.sshd/sshd-core: Apache MINA SSHD: Asynchronous authentication can bypass signature verification	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-102578 high	Moodle: sql injection in question bank web service	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-92871 high	pgpool-II: pgpool-II: Denial of Service via NULL pointer dereference in watchdog process	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-92870 high	pgpool-II: pgpool-II: Denial of Service via stack-based buffer overflow	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-92867 high	pgpool-II: Pgpool-II: arbitrary code execution via out-of-bounds write	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
CVE-2026-103111 high	pcre2: pcre2: Out-of-bounds write via crafted regular expression	since at least 24 Oct 202607:11 UTC build	30 Sep 2026
GHSA-v53p-9fqp-m79j high	Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service	since at least 24 Oct 202607:11 UTC build	29 Sep 2026
GHSA-8238-w5pm-2374 high	adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)	since at least 24 Oct 202607:11 UTC build	29 Sep 2026
CVE-2026-102937 high	virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation script	since at least 24 Oct 202607:11 UTC build	29 Sep 2026
CVE-2026-102930 high	virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels	since at least 24 Oct 202607:11 UTC build	29 Sep 2026
CVE-2026-102925 high	virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scripts	since at least 24 Oct 202607:11 UTC build	29 Sep 2026
CVE-2026-102253 high	iperf3: iperf3: Denial of Service via UDP receive worker infinite loop	since at least 24 Oct 202607:11 UTC build	29 Sep 2026
CVE-2026-67987 high	Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability	since at least 24 Oct 202607:11 UTC build	29 Sep 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.