Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-113315 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113314 high	chromium-browser: chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113305 high	chromium-browser: chromium-browser: Use after free in Privacy	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113295 high	chromium-browser: angle: Out of bounds read in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113293 high	chromium-browser: angle: Use after free in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113285 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113278 high	chromium-browser: chromium-browser: Use after free in Extensions	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113274 high	chromium-browser: chromium-browser: Use after free in ReadingMode	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113273 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113266 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113264 high	Improper input validation in Extensions in Google Chrome prior to 156. ...	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113252 high	chromium-browser: angle: Improper input validation in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113242 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113234 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113233 high	chromium-browser: chromium-browser: Out of bounds read in Core	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113217 high	chromium-browser: chromium-browser: Use after free in WebAppInstalls	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113216 high	chromium-browser: chromium-browser: Use after free in Navigation	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113210 high	chromium-browser: angle: Use after free in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113207 high	chromium-browser: chromium-browser: Use after free in SiteIsolation	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113165 high	chromium-browser: chromium-browser: Use after free in Core	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113161 high	chromium-browser: chromium-browser: Use after free in WebRTC	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113143 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113137 high	Memory corruption in Extensions in Google Chrome prior to 156.0.8078.4 ...	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113134 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113130 high	chromium-browser: chromium-browser: Use after free in Actor	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113128 high	Missing authorization in Animation in Google Chrome prior to 156.0.807 ...	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113117 high	chromium-browser: angle: Improper input validation in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113115 high	chromium-browser: chromium-browser: Use after free in Transactions Platform	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113113 high	chromium-browser: chromium-browser: Use after free in Extensions	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113091 high	chromium-browser: chromium-browser: Use after free in PerformanceAPIs	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113082 high	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113081 high	chromium-browser: chromium-browser: Use after free in Compositing	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113074 high	chromium-browser: chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113073 high	chromium-browser: chromium-browser: Use after free in Browser	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113068 high	chromium-browser: chromium-browser: Use after free in Input	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113057 high	Improper access control in ComputePressure in Google Chrome prior to 1 ...	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113043 high	chromium-browser: chromium-browser: Use after free in iOSWeb	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113039 high	chromium-browser: chromium-browser: Use after free in Bookmarks	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113037 high	chromium-browser: chromium-browser: Use after free in WebSockets	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113033 high	chromium-browser: chromium-browser: Use after free in Streaming	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113030 high	Improper access control in V8 in Google Chrome prior to 156.0.8078.47 ...	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113025 high	chromium-browser: chromium-browser: Use after free in Input	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113017 high	chromium-browser: chromium-browser: Use after free in Views	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113011 high	chromium-browser: chromium-browser: Use after free in CredentialProvider	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113006 high	chromium-browser: chromium-browser: Out of bounds read in Navigation	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-112993 high	chromium-browser: chromium-browser: Use after free in Input	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101797 high	mysql: mysql: system takeover via mysqldump component	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101796 high	mysql: mysql: Complete server takeover via replication component	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101786 high	mysql: mysql: Server takeover by a privileged network attacker	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101785 high	mysql: MySQL: Unauthorized data modification in JSON component	since at least 24 Oct 202607:11 UTC build	20 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.