Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-106422 low	chromium-browser: Incorrect authorization in API	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106418 low	chromium-browser: Missing authorization in Network	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106417 low	chromium-browser: Integer overflow in Media	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106413 low	chromium-browser: Race condition in Browser	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106399 low	chromium-browser: skia: Out of bounds read in Skia	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106394 low	chromium-browser: Incomplete cleanup in Glic	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106390 low	chromium-browser: Incorrect provision of specified functionality in SanitizerAPI	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106385 low	chromium-browser: Race condition in Chromoting	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106380 low	chromium-browser: UI misrepresentation in UI	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106374 low	chromium-browser: Type confusion in V8	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106371 low	chromium-browser: Incorrect authorization in Transactions Platform	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106368 low	chromium-browser: UI misrepresentation in UI	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106362 low	chromium-browser: Missing authorization in DevTools	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106359 low	chromium-browser: Confused deputy in DeviceBoundSessionCredentials	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106355 low	chromium-browser: Missing authorization in Media	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106353 low	chromium-browser: Improper input validation in Mobile	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106350 low	chromium-browser: Incorrect authorization in Browser	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106345 low	chromium-browser: Use of released resource in Session	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106344 low	chromium-browser: Missing authorization in Permissions	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106343 low	chromium-browser: Improper state validation in Autofill AI	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106340 low	chromium-browser: Missing authorization in CredentialProvider	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106339 low	chromium-browser: Use of released resource in Core	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106338 low	chromium-browser: UI misrepresentation in PictureInPicture	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106334 low	chromium-browser: Information leak in Payments	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106331 low	chromium-browser: Improper input validation in Extensions	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106325 low	chromium-browser: Incorrect reference resolution in Core	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106320 low	chromium-browser: Use of released resource in UI	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106317 low	chromium-browser: UI misrepresentation in FullScreen	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106316 low	chromium-browser: UI misrepresentation in Chromoting	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106312 low	chromium-browser: Missing authorization in SignIn	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106310 low	chromium-browser: Use of released resource in FontAccess	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106309 low	chromium-browser: Incorrect authorization in Selection	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106306 low	chromium-browser: Incorrect authorization in DevTools	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106305 low	chromium-browser: UI misrepresentation in Mobile	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106299 low	chromium-browser: Improper input validation in WebAudio	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106297 low	chromium-browser: Incorrect authorization in Scheduling	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106296 low	chromium-browser: Improper privilege management in UI	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106288 low	chromium-browser: Missing authorization in Browser	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106287 low	chromium-browser: Information loss in CORS	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106285 low	chromium-browser: UI misrepresentation in WebAppInstalls	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106276 low	chromium-browser: UI misrepresentation in Payments	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106275 low	chromium-browser: Uninitialized resource in GPU	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106272 low	chromium-browser: UI misrepresentation in Chromoting	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106270 low	chromium-browser: Incorrect authorization in WebAppInstalls	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106269 low	chromium-browser: Use after free in CSS	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106264 low	chromium-browser: Missing authorization in Web Authentication (Passkeys & Security Keys)	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106260 low	chromium-browser: Incorrect authorization in DevTools	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106259 low	chromium-browser: Incorrect authorization in PermissionElement	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106256 low	chromium-browser: Information leak in Passwords	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106252 low	chromium-browser: Incorrect comparison in Fonts	since at least 24 Oct 202607:11 UTC build	6 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.