Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 13:12 UTC

23critical, last 7 days 298high, last 7 days 633medium, last 7 days 139low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-100763 medium	Incorrect boundary conditions in the Graphics: WebGPU component. ...	27 Oct 202613:12 UTC build	29 Sep 2026
CVE-2026-92034 medium	Site isolation issue in the Graphics component. This vulnerabilit ...	27 Oct 202613:12 UTC build	15 Sep 2026
CVE-2026-84134 medium	Other issue in the Profile Backup component. This vulnerability w ...	27 Oct 202613:12 UTC build	1 Sep 2026
CVE-2026-72137 medium	In the Linux kernel, the following vulnerability has been resolved: x ...	27 Oct 202613:12 UTC build	15 Aug 2026
CVE-2026-107080 medium	openjpeg2: openjpeg2: Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_v	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-92171 medium	infinispan-operator: Infinispan Operator: Sensitive information disclosure due pod args store	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-116497 medium	gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemon	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-116262 medium	libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web Inspector	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-115718 medium	builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_prompt	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-115717 medium	builder: builder: Information disclosure via Server-Side Request Forgery in convert_to_webp	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-99082 medium	kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cache	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99081 medium	kernel: bnxt_en: fix DMA mapping length for padded small packets	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99079 medium	kernel: net/mlx5e: Prevent stale XSK buffer release on refill retry	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99074 medium	kernel: ipv4: stop PMTU walk when nexthop group shrinks	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-99073 medium	kernel: ipv4: stop exception dump when nexthop group shrinks	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98903 medium	kernel: mailbox: imx: Add a channel shutdown field	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98902 medium	kernel: md/raid5: let stripe batch bm_seq comparison wrap-safe	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98900 medium	kernel: xen/gntalloc: validate grant count before allocation	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98898 medium	kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98897 medium	kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ack	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98896 medium	kernel: thunderbolt: Keep the domain reference while processing hotplug	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98895 medium	kernel: net/mlx5: HWS, Handle destroying table that has a miss table	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98894 medium	kernel: drm/amd/ras: reset CPER ring on corrupt entry size	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98893 medium	kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload size	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98892 medium	kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98891 medium	kernel: wifi: mac80211: validate deauth frame length before reason access	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98890 medium	kernel: wifi: libertas: reject short monitor TX frames	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98889 medium	kernel: wifi: iwlwifi: mvm: fix sched scan IE sizing	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98888 medium	kernel: arm64: kprobes: Allow reentering kprobes while single-stepping	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98887 medium	kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98886 medium	kernel: drm/gma500: return errors from Oaktrail HDMI I2C reads	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98884 medium	kernel: mmc: core: Add validation for host-provided max_segs	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98883 medium	kernel: serial: 8250_port: recognize UPIO_AU	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98882 medium	kernel: media: chips-media: wave5: Add range checks for dec_output_info	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98881 medium	kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98880 medium	kernel: ntfs3: handle set_blocksize failures	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98879 medium	kernel: isofs: handle set_blocksize failures	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98878 medium	kernel: irqchip/gic-v5: Immediately exec priority drop following activate	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-98877 medium	kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed	27 Oct 202607:13 UTC build	23 Oct 2026
CVE-2026-115360 medium	github.com/openbao/openbao: OpenBao: Open redirect via OIDC identity provider user interface	27 Oct 202607:13 UTC build	22 Oct 2026
CVE-2026-93237 medium	kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definition	27 Oct 202607:13 UTC build	24 Sep 2026
CVE-2026-80728 medium	kernel: Revert "drm/amdgpu: fix aperture mapping leak"	27 Oct 202607:13 UTC build	3 Sep 2026
CVE-2026-43670 medium	A Content Security Policy bypass was addressed with improved enforceme ...	27 Oct 202607:13 UTC build	25 Aug 2026
CVE-2024-43768 medium	In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...	27 Oct 202607:13 UTC build	3 Jan 2025
CVE-2026-18054 medium	Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemu	27 Oct 202607:13 UTC build
CVE-2026-50624 medium	Amazon Linux 2 2017.12 - ALAS2-2026-4009: medium priority package update for qemu	27 Oct 202607:13 UTC build
CVE-2026-61476 medium	Title Not Available	27 Oct 202607:13 UTC build
CVE-2026-63320 medium	ELSA-2026-500245: qemu-kvm security update (IMPORTANT)	27 Oct 202607:13 UTC build
CVE-2026-63322 medium	Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemu	27 Oct 202607:13 UTC build
CVE-2026-116152 medium	ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder	27 Oct 202601:25 UTC build	25 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.