Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-106251 low	chromium-browser: UI misrepresentation in Chromoting	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106249 low	chromium-browser: Incorrect authorization in Autofill	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106247 low	chromium-browser: angle: Buffer overflow in ANGLE	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106236 low	chromium-browser: UI misrepresentation in Chromoting	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106234 low	chromium-browser: Use after free in Network	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106220 low	chromium-browser: Information leak in Passwords	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106192 low	chromium-browser: Information leak in Mobile	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106191 low	chromium-browser: Missing authorization in Actor	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106187 low	chromium-browser: Missing authorization in Permissions	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106186 low	chromium-browser: Uncontrolled search path element in CredentialProvider	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106179 low	chromium-browser: UI misrepresentation in WebAppInstalls	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106101 low	Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-105800 low	i18next-http-backend: i18next-http-backend: Server-Side Request Forgery via crafted path template parameters	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-105799 low	LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-105795 low	Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-75820 low	aspell: aspell: Denial of Service via integer truncation in wordlist processing	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-75818 low	aspell: aspell: Denial of Service via crafted compressed file in prezip-bin	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98363 low	kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98362 low	kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98346 low	kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevs	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98345 low	kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d()	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98344 low	kernel: dmaengine: Fix device kref underflow in dma_chan_put()	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98338 low	kernel: wifi: cfg80211: ibss: ref BSS entry for joined event	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98337 low	kernel: wifi: mac80211: don't start a ROC while scanning	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98334 low	kernel: wifi: mac80211: reset state when starting AP fails	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98332 low	kernel: wifi: mac80211: only operate on TDLS peers in the TDLS code	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98329 low	kernel: wifi: mac80211: don't allow injecting frames wider than the chanctx	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98328 low	kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems len	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98326 low	kernel: wifi: mac80211: mesh: release the channel if start fails	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98325 low	kernel: wifi: mac80211: set up the TX info early to fix failure paths	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98321 low	kernel: netfilter: nf_nat: unregister and release hooks on error	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98319 low	kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98317 low	kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98308 low	kernel: ALSA: hda: trace PCM open only after assigning a stream	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98307 low	kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98304 low	kernel: net: bcmgenet: restore the hardware filters on open	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98297 low	kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98289 low	kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98285 low	kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errors	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98278 low	kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98270 low	kernel: drm/amdgpu: check ras and obj before dereference	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98268 low	kernel: perf: Fix null pointer access in is_include_guest_event()	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98263 low	kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98259 low	kernel: fs/dax: check zero or empty entry before converting xarray entry	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98240 low	kernel: net: ip_tunnel: initialize `options_len` before referencing options	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98237 low	kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98235 low	kernel: net/sched: act_api: release tail references on DELACTION failure	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98234 low	kernel: net/sched: hhf: cap hh_flows_limit at change time	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98233 low	kernel: net/packet: clear RX owner on VNET header error	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-98224 low	kernel: mm/vma: correctly unaccount on mmap_prepare() failure	since at least 24 Oct 202607:11 UTC build	6 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.