{"metadata": {"count": 314782, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:18:43+00:00", "cve": "CVE-2026-53103", "id": "CVE-2026-53103", "initial_release_date": "2026-06-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53103.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1793571523.0, "vulnerability_id": "CVE-2026-53103", "vulnerability_url": "/vuln/CVE-2026-53103"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:18:43+00:00", "cve": "CVE-2026-53035", "id": "CVE-2026-53035", "initial_release_date": "2026-06-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf, sockmap: Fix af_unix iter deadlock", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53035.json", "version": "3", "product_status": {"known_affected": 200, "known_not_affected": 76}, "imported": 1793571523.0, "vulnerability_id": "CVE-2026-53035", "vulnerability_url": "/vuln/CVE-2026-53035"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:14:03+00:00", "cve": "CVE-2026-53317", "id": "CVE-2026-53317", "initial_release_date": "2026-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: mt76: mt7921: Place upper limit on station AID", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53317.json", "version": "3", "product_status": {"known_affected": 234, "known_not_affected": 42}, "imported": 1793571243.0, "vulnerability_id": "CVE-2026-53317", "vulnerability_url": "/vuln/CVE-2026-53317"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:14:03+00:00", "cve": "CVE-2026-53293", "id": "CVE-2026-53293", "initial_release_date": "2026-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53293.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793571243.0, "vulnerability_id": "CVE-2026-53293", "vulnerability_url": "/vuln/CVE-2026-53293"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:09:01+00:00", "cve": "CVE-2026-53292", "id": "CVE-2026-53292", "initial_release_date": "2026-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53292.json", "version": "3", "product_status": {"known_affected": 14, "known_not_affected": 262}, "imported": 1793570941.0, "vulnerability_id": "CVE-2026-53292", "vulnerability_url": "/vuln/CVE-2026-53292"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:09:01+00:00", "cve": "CVE-2026-53287", "id": "CVE-2026-53287", "initial_release_date": "2026-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: audit: fix incorrect inheritable capability in CAPSET records", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53287.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793570941.0, "vulnerability_id": "CVE-2026-53287", "vulnerability_url": "/vuln/CVE-2026-53287"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T22:04:07+00:00", "cve": "CVE-2026-53323", "id": "CVE-2026-53323", "initial_release_date": "2026-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53323.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1793570647.0, "vulnerability_id": "CVE-2026-53323", "vulnerability_url": "/vuln/CVE-2026-53323"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T22:04:07+00:00", "cve": "CVE-2026-116591", "id": "CVE-2026-116591", "initial_release_date": "2026-10-26T21:54:33.109000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116591.json", "version": "3", "product_status": {"fixed": 114, "known_affected": 595, "known_not_affected": 9}, "imported": 1793570647.0, "vulnerability_id": "CVE-2026-116591", "vulnerability_url": "/vuln/CVE-2026-116591"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:59:15+00:00", "cve": "CVE-2026-53146", "id": "CVE-2026-53146", "initial_release_date": "2026-06-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: kernel: Information disclosure in Thunderbolt XDomain response handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53146.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1793570355.0, "vulnerability_id": "CVE-2026-53146", "vulnerability_url": "/vuln/CVE-2026-53146"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:59:15+00:00", "cve": "CVE-2026-53321", "id": "CVE-2026-53321", "initial_release_date": "2026-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: io_uring/napi: cap busy_poll_to 10 msec", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53321.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1793570355.0, "vulnerability_id": "CVE-2026-53321", "vulnerability_url": "/vuln/CVE-2026-53321"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:53:16+00:00", "cve": "CVE-2026-53206", "id": "CVE-2026-53206", "initial_release_date": "2026-06-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: accel/ivpu: Add bounds check for firmware runtime memory", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53206.json", "version": "3", "product_status": {"known_affected": 107, "known_not_affected": 169}, "imported": 1793569996.0, "vulnerability_id": "CVE-2026-53206", "vulnerability_url": "/vuln/CVE-2026-53206"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:48:18+00:00", "cve": "CVE-2026-63868", "id": "CVE-2026-63868", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63868.json", "version": "3", "product_status": {"known_affected": 262, "known_not_affected": 14}, "imported": 1793569698.0, "vulnerability_id": "CVE-2026-63868", "vulnerability_url": "/vuln/CVE-2026-63868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:48:18+00:00", "cve": "CVE-2026-53371", "id": "CVE-2026-53371", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: RDMA/ionic: bound node_desc sysfs read with %.64s", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53371.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1793569698.0, "vulnerability_id": "CVE-2026-53371", "vulnerability_url": "/vuln/CVE-2026-53371"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:43:21+00:00", "cve": "CVE-2026-63863", "id": "CVE-2026-63863", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63863.json", "version": "3", "product_status": {"known_affected": 107, "known_not_affected": 169}, "imported": 1793569401.0, "vulnerability_id": "CVE-2026-63863", "vulnerability_url": "/vuln/CVE-2026-63863"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:43:21+00:00", "cve": "CVE-2026-63867", "id": "CVE-2026-63867", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mptcp: close TOCTOU race while computing rcv_wnd", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63867.json", "version": "3", "product_status": {"known_affected": 234, "known_not_affected": 42}, "imported": 1793569401.0, "vulnerability_id": "CVE-2026-63867", "vulnerability_url": "/vuln/CVE-2026-63867"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-01T21:39:47+00:00", "cve": "CVE-2026-98432", "id": "CVE-2026-98432", "initial_release_date": "2026-10-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98432.json", "version": "3", "product_status": {"fixed": 120, "known_affected": 206, "known_not_affected": 42}, "imported": 1793569187.0, "vulnerability_id": "CVE-2026-98432", "vulnerability_url": "/vuln/CVE-2026-98432"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:37:57+00:00", "cve": "CVE-2026-63847", "id": "CVE-2026-63847", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63847.json", "version": "3", "product_status": {"known_affected": 200, "known_not_affected": 76}, "imported": 1793569077.0, "vulnerability_id": "CVE-2026-63847", "vulnerability_url": "/vuln/CVE-2026-63847"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:32:55+00:00", "cve": "CVE-2026-63848", "id": "CVE-2026-63848", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63848.json", "version": "3", "product_status": {"known_affected": 200, "known_not_affected": 76}, "imported": 1793568775.0, "vulnerability_id": "CVE-2026-63848", "vulnerability_url": "/vuln/CVE-2026-63848"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:32:55+00:00", "cve": "CVE-2026-63865", "id": "CVE-2026-63865", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63865.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1793568775.0, "vulnerability_id": "CVE-2026-63865", "vulnerability_url": "/vuln/CVE-2026-63865"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:27:55+00:00", "cve": "CVE-2026-63838", "id": "CVE-2026-63838", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63838.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793568475.0, "vulnerability_id": "CVE-2026-63838", "vulnerability_url": "/vuln/CVE-2026-63838"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:27:55+00:00", "cve": "CVE-2026-63856", "id": "CVE-2026-63856", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63856.json", "version": "3", "product_status": {"known_affected": 200, "known_not_affected": 76}, "imported": 1793568475.0, "vulnerability_id": "CVE-2026-63856", "vulnerability_url": "/vuln/CVE-2026-63856"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:25:16+00:00", "cve": "CVE-2026-63854", "id": "CVE-2026-63854", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63854.json", "version": "3", "product_status": {"known_affected": 200, "known_not_affected": 76}, "imported": 1793568316.0, "vulnerability_id": "CVE-2026-63854", "vulnerability_url": "/vuln/CVE-2026-63854"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:25:16+00:00", "cve": "CVE-2026-63841", "id": "CVE-2026-63841", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63841.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793568316.0, "vulnerability_id": "CVE-2026-63841", "vulnerability_url": "/vuln/CVE-2026-63841"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:20:09+00:00", "cve": "CVE-2026-63850", "id": "CVE-2026-63850", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63850.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793568009.0, "vulnerability_id": "CVE-2026-63850", "vulnerability_url": "/vuln/CVE-2026-63850"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:20:09+00:00", "cve": "CVE-2026-63837", "id": "CVE-2026-63837", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: ena: PHC: Check return code before setting timestamp output", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63837.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1793568009.0, "vulnerability_id": "CVE-2026-63837", "vulnerability_url": "/vuln/CVE-2026-63837"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:15:21+00:00", "cve": "CVE-2026-111814", "id": "CVE-2026-111814", "initial_release_date": "2026-10-21T19:13:06.888000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111814.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567721.0, "vulnerability_id": "CVE-2026-111814", "vulnerability_url": "/vuln/CVE-2026-111814"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:15:21+00:00", "cve": "CVE-2026-111816", "id": "CVE-2026-111816", "initial_release_date": "2026-10-21T18:26:32.566000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111816.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567721.0, "vulnerability_id": "CVE-2026-111816", "vulnerability_url": "/vuln/CVE-2026-111816"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:15:21+00:00", "cve": "CVE-2026-63852", "id": "CVE-2026-63852", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63852.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793567721.0, "vulnerability_id": "CVE-2026-63852", "vulnerability_url": "/vuln/CVE-2026-63852"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:15:21+00:00", "cve": "CVE-2026-63842", "id": "CVE-2026-63842", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63842.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793567721.0, "vulnerability_id": "CVE-2026-63842", "vulnerability_url": "/vuln/CVE-2026-63842"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:10:32+00:00", "cve": "CVE-2026-111812", "id": "CVE-2026-111812", "initial_release_date": "2026-10-21T19:18:19.526000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111812.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567432.0, "vulnerability_id": "CVE-2026-111812", "vulnerability_url": "/vuln/CVE-2026-111812"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:10:29+00:00", "cve": "CVE-2026-111809", "id": "CVE-2026-111809", "initial_release_date": "2026-10-21T19:16:16.439000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111809.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567429.0, "vulnerability_id": "CVE-2026-111809", "vulnerability_url": "/vuln/CVE-2026-111809"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:10:23+00:00", "cve": "CVE-2025-31699", "id": "CVE-2025-31699", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31699.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567423.0, "vulnerability_id": "CVE-2025-31699", "vulnerability_url": "/vuln/CVE-2025-31699"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:10:23+00:00", "cve": "CVE-2026-111813", "id": "CVE-2026-111813", "initial_release_date": "2026-10-21T18:20:22.104000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111813.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567423.0, "vulnerability_id": "CVE-2026-111813", "vulnerability_url": "/vuln/CVE-2026-111813"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:10:23+00:00", "cve": "CVE-2026-64046", "id": "CVE-2026-64046", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: tls: prevent chain-after-chain in plain text SG", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64046.json", "version": "3", "product_status": {"known_affected": 234, "known_not_affected": 42}, "imported": 1793567423.0, "vulnerability_id": "CVE-2026-64046", "vulnerability_url": "/vuln/CVE-2026-64046"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T21:10:23+00:00", "cve": "CVE-2026-111811", "id": "CVE-2026-111811", "initial_release_date": "2026-10-21T19:17:32.448000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "trafficserver: Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111811.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793567423.0, "vulnerability_id": "CVE-2026-111811", "vulnerability_url": "/vuln/CVE-2026-111811"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:02:52+00:00", "cve": "CVE-2026-63878", "id": "CVE-2026-63878", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63878.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793566972.0, "vulnerability_id": "CVE-2026-63878", "vulnerability_url": "/vuln/CVE-2026-63878"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T21:02:52+00:00", "cve": "CVE-2026-64127", "id": "CVE-2026-64127", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64127.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1793566972.0, "vulnerability_id": "CVE-2026-64127", "vulnerability_url": "/vuln/CVE-2026-64127"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:57:53+00:00", "cve": "CVE-2026-63900", "id": "CVE-2026-63900", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: USB: serial: keyspan: fix missing indat transfer sanity check", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63900.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793566673.0, "vulnerability_id": "CVE-2026-63900", "vulnerability_url": "/vuln/CVE-2026-63900"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:57:53+00:00", "cve": "CVE-2026-64170", "id": "CVE-2026-64170", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: spi: qup: fix error pointer deref after DMA setup failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64170.json", "version": "3", "product_status": {"known_affected": 234, "known_not_affected": 42}, "imported": 1793566673.0, "vulnerability_id": "CVE-2026-64170", "vulnerability_url": "/vuln/CVE-2026-64170"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:52:52+00:00", "cve": "CVE-2026-64181", "id": "CVE-2026-64181", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64181.json", "version": "3", "product_status": {"known_affected": 14, "known_not_affected": 262}, "imported": 1793566372.0, "vulnerability_id": "CVE-2026-64181", "vulnerability_url": "/vuln/CVE-2026-64181"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:47:50+00:00", "cve": "CVE-2026-64159", "id": "CVE-2026-64159", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfs: Fix zeropoint update where i_size > remote_i_size", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64159.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793566070.0, "vulnerability_id": "CVE-2026-64159", "vulnerability_url": "/vuln/CVE-2026-64159"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:47:50+00:00", "cve": "CVE-2026-64177", "id": "CVE-2026-64177", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: phonet/pep: disable BH around forwarded sk_receive_skb()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64177.json", "version": "3", "product_status": {"known_affected": 14, "known_not_affected": 262}, "imported": 1793566070.0, "vulnerability_id": "CVE-2026-64177", "vulnerability_url": "/vuln/CVE-2026-64177"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:43:04+00:00", "cve": "CVE-2026-64133", "id": "CVE-2026-64133", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ALSA: asihpi: Fix potential OOB array access at reading cache", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64133.json", "version": "3", "product_status": {"known_affected": 262, "known_not_affected": 14}, "imported": 1793565784.0, "vulnerability_id": "CVE-2026-64133", "vulnerability_url": "/vuln/CVE-2026-64133"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:38:23+00:00", "cve": "CVE-2026-64156", "id": "CVE-2026-64156", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfs, afs: Fix write skipping in dir/link writepages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64156.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793565503.0, "vulnerability_id": "CVE-2026-64156", "vulnerability_url": "/vuln/CVE-2026-64156"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:38:19+00:00", "cve": "CVE-2026-63904", "id": "CVE-2026-63904", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: usbtmc: check URB actual_length for interrupt-IN notifications", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63904.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793565499.0, "vulnerability_id": "CVE-2026-63904", "vulnerability_url": "/vuln/CVE-2026-63904"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:35:14+00:00", "cve": "CVE-2026-64130", "id": "CVE-2026-64130", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64130.json", "version": "3", "product_status": {"known_affected": 14, "known_not_affected": 262}, "imported": 1793565314.0, "vulnerability_id": "CVE-2026-64130", "vulnerability_url": "/vuln/CVE-2026-64130"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:35:12+00:00", "cve": "CVE-2026-63927", "id": "CVE-2026-63927", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: dwc2: Fix use after free in debug code", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63927.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793565312.0, "vulnerability_id": "CVE-2026-63927", "vulnerability_url": "/vuln/CVE-2026-63927"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:30:26+00:00", "cve": "CVE-2026-64178", "id": "CVE-2026-64178", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: Bluetooth: bnep: Fix UAF read of dev->name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64178.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793565026.0, "vulnerability_id": "CVE-2026-64178", "vulnerability_url": "/vuln/CVE-2026-64178"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:30:21+00:00", "cve": "CVE-2026-64036", "id": "CVE-2026-64036", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: cgroup/rstat: validate cpu before css_rstat_cpu() access", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64036.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 78}, "imported": 1793565021.0, "vulnerability_id": "CVE-2026-64036", "vulnerability_url": "/vuln/CVE-2026-64036"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T20:30:15+00:00", "cve": "CVE-2026-49442", "id": "CVE-2026-49442", "initial_release_date": "2026-10-23T14:45:13.062000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cacti: cacti: User enumeration via discrepant login error messages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49442.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793565015.0, "vulnerability_id": "CVE-2026-49442", "vulnerability_url": "/vuln/CVE-2026-49442"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T20:30:13+00:00", "cve": "CVE-2026-46531", "id": "CVE-2026-46531", "initial_release_date": "2026-10-23T14:42:27.937000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cacti: cacti: information disclosure via SQL injection in automation tree rules", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46531.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793565013.0, "vulnerability_id": "CVE-2026-46531", "vulnerability_url": "/vuln/CVE-2026-46531"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-01T20:28:27+00:00", "cve": "CVE-2026-39902", "id": "CVE-2026-39902", "initial_release_date": "2026-10-23T14:42:45.710000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cacti: Cacti: Arbitrary command execution via incomplete character blocklist", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39902.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793564907.0, "vulnerability_id": "CVE-2026-39902", "vulnerability_url": "/vuln/CVE-2026-39902"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:24:19+00:00", "cve": "CVE-2026-64063", "id": "CVE-2026-64063", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfs: Fix streaming write being overwritten", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64063.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793564659.0, "vulnerability_id": "CVE-2026-64063", "vulnerability_url": "/vuln/CVE-2026-64063"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:24:19+00:00", "cve": "CVE-2026-64150", "id": "CVE-2026-64150", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfilter: nft_inner: release local_lock before re-enabling softirqs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64150.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793564659.0, "vulnerability_id": "CVE-2026-64150", "vulnerability_url": "/vuln/CVE-2026-64150"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:24:19+00:00", "cve": "CVE-2026-63983", "id": "CVE-2026-63983", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/sched: fix packet loop on netem when duplicate is on", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63983.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793564659.0, "vulnerability_id": "CVE-2026-63983", "vulnerability_url": "/vuln/CVE-2026-63983"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:15:43+00:00", "cve": "CVE-2026-63897", "id": "CVE-2026-63897", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63897.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793564143.0, "vulnerability_id": "CVE-2026-63897", "vulnerability_url": "/vuln/CVE-2026-63897"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:15:43+00:00", "cve": "CVE-2026-64067", "id": "CVE-2026-64067", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfs: Fix missing barriers when accessing stream->subrequests locklessly", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64067.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793564143.0, "vulnerability_id": "CVE-2026-64067", "vulnerability_url": "/vuln/CVE-2026-64067"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:15:43+00:00", "cve": "CVE-2026-64064", "id": "CVE-2026-64064", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64064.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793564143.0, "vulnerability_id": "CVE-2026-64064", "vulnerability_url": "/vuln/CVE-2026-64064"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:15:43+00:00", "cve": "CVE-2026-63274", "id": "CVE-2026-63274", "initial_release_date": "2026-09-22T11:10:19.486000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libreoffice: heap buffer overflow in PDF import stream handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63274.json", "version": "3", "product_status": {"fixed": 735, "known_affected": 316}, "imported": 1793564143.0, "vulnerability_id": "CVE-2026-63274", "vulnerability_url": "/vuln/CVE-2026-63274"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:05:04+00:00", "cve": "CVE-2026-63903", "id": "CVE-2026-63903", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: USB: serial: belkin_sa: validate interrupt status length", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63903.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793563504.0, "vulnerability_id": "CVE-2026-63903", "vulnerability_url": "/vuln/CVE-2026-63903"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:05:04+00:00", "cve": "CVE-2026-63963", "id": "CVE-2026-63963", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63963.json", "version": "3", "product_status": {"known_affected": 234, "known_not_affected": 42}, "imported": 1793563504.0, "vulnerability_id": "CVE-2026-63963", "vulnerability_url": "/vuln/CVE-2026-63963"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T20:05:04+00:00", "cve": "CVE-2026-64065", "id": "CVE-2026-64065", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64065.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1793563504.0, "vulnerability_id": "CVE-2026-64065", "vulnerability_url": "/vuln/CVE-2026-64065"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:57:19+00:00", "cve": "CVE-2026-64038", "id": "CVE-2026-64038", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: hwmon: (lm90) Stop work before releasing hwmon device", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64038.json", "version": "3", "product_status": {"known_affected": 91, "known_not_affected": 185}, "imported": 1793563039.0, "vulnerability_id": "CVE-2026-64038", "vulnerability_url": "/vuln/CVE-2026-64038"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:57:16+00:00", "cve": "CVE-2026-63942", "id": "CVE-2026-63942", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: parport: Fix race between port and client registration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63942.json", "version": "3", "product_status": {"known_affected": 248, "known_not_affected": 28}, "imported": 1793563036.0, "vulnerability_id": "CVE-2026-63942", "vulnerability_url": "/vuln/CVE-2026-63942"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:57:14+00:00", "cve": "CVE-2026-63902", "id": "CVE-2026-63902", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: USB: serial: cypress_m8: validate interrupt packet headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63902.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1793563034.0, "vulnerability_id": "CVE-2026-63902", "vulnerability_url": "/vuln/CVE-2026-63902"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:57:12+00:00", "cve": "CVE-2026-13883", "id": "CVE-2026-13883", "initial_release_date": "2026-06-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Type Confusion in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13883.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563032.0, "vulnerability_id": "CVE-2026-13883", "vulnerability_url": "/vuln/CVE-2026-13883"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:57:10+00:00", "cve": "CVE-2026-11061", "id": "CVE-2026-11061", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Out of bounds read in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11061.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563030.0, "vulnerability_id": "CVE-2026-11061", "vulnerability_url": "/vuln/CVE-2026-11061"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:57:09+00:00", "cve": "CVE-2026-11024", "id": "CVE-2026-11024", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11024.json", "version": "3", "product_status": {"fixed": 222, "known_affected": 9, "known_not_affected": 21}, "imported": 1793563029.0, "vulnerability_id": "CVE-2026-11024", "vulnerability_url": "/vuln/CVE-2026-11024"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-01T19:57:06+00:00", "cve": "CVE-2026-79142", "id": "CVE-2026-79142", "initial_release_date": "2026-08-25T20:10:04.957000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-79142.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563026.0, "vulnerability_id": "CVE-2026-79142", "vulnerability_url": "/vuln/CVE-2026-79142"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-01T19:57:02+00:00", "cve": "CVE-2026-79130", "id": "CVE-2026-79130", "initial_release_date": "2026-08-25T20:10:03.828000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-79130.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563022.0, "vulnerability_id": "CVE-2026-79130", "vulnerability_url": "/vuln/CVE-2026-79130"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-01T19:57:01+00:00", "cve": "CVE-2026-78905", "id": "CVE-2026-78905", "initial_release_date": "2026-08-25T20:10:32.796000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78905.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563021.0, "vulnerability_id": "CVE-2026-78905", "vulnerability_url": "/vuln/CVE-2026-78905"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-01T19:56:58+00:00", "cve": "CVE-2026-78904", "id": "CVE-2026-78904", "initial_release_date": "2026-08-25T20:10:09.288000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78904.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563018.0, "vulnerability_id": "CVE-2026-78904", "vulnerability_url": "/vuln/CVE-2026-78904"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:57+00:00", "cve": "CVE-2026-76046", "id": "CVE-2026-76046", "initial_release_date": "2026-08-18T20:31:27.388000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76046.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793563017.0, "vulnerability_id": "CVE-2026-76046", "vulnerability_url": "/vuln/CVE-2026-76046"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:54+00:00", "cve": "CVE-2026-65351", "id": "CVE-2026-65351", "initial_release_date": "2026-08-17T21:31:25.582000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65351.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563014.0, "vulnerability_id": "CVE-2026-65351", "vulnerability_url": "/vuln/CVE-2026-65351"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:53+00:00", "cve": "CVE-2026-65341", "id": "CVE-2026-65341", "initial_release_date": "2026-08-17T21:30:42.172000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65341.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563013.0, "vulnerability_id": "CVE-2026-65341", "vulnerability_url": "/vuln/CVE-2026-65341"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:52+00:00", "cve": "CVE-2026-65340", "id": "CVE-2026-65340", "initial_release_date": "2026-08-17T21:31:03.232000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65340.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563012.0, "vulnerability_id": "CVE-2026-65340", "vulnerability_url": "/vuln/CVE-2026-65340"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:50+00:00", "cve": "CVE-2026-65338", "id": "CVE-2026-65338", "initial_release_date": "2026-08-17T21:29:59.913000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65338.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563010.0, "vulnerability_id": "CVE-2026-65338", "vulnerability_url": "/vuln/CVE-2026-65338"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:48+00:00", "cve": "CVE-2026-65337", "id": "CVE-2026-65337", "initial_release_date": "2026-08-17T21:31:00.092000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65337.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563008.0, "vulnerability_id": "CVE-2026-65337", "vulnerability_url": "/vuln/CVE-2026-65337"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:46+00:00", "cve": "CVE-2026-65336", "id": "CVE-2026-65336", "initial_release_date": "2026-08-17T21:30:49.391000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65336.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563006.0, "vulnerability_id": "CVE-2026-65336", "vulnerability_url": "/vuln/CVE-2026-65336"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:44+00:00", "cve": "CVE-2026-65335", "id": "CVE-2026-65335", "initial_release_date": "2026-08-17T21:30:18.797000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65335.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563004.0, "vulnerability_id": "CVE-2026-65335", "vulnerability_url": "/vuln/CVE-2026-65335"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:42+00:00", "cve": "CVE-2026-65334", "id": "CVE-2026-65334", "initial_release_date": "2026-08-17T21:30:08.305000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65334.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793563002.0, "vulnerability_id": "CVE-2026-65334", "vulnerability_url": "/vuln/CVE-2026-65334"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:40+00:00", "cve": "CVE-2026-65333", "id": "CVE-2026-65333", "initial_release_date": "2026-08-17T21:29:42.566000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65333.json", "version": "3", "product_status": {"fixed": 240, "known_affected": 9, "known_not_affected": 5}, "imported": 1793563000.0, "vulnerability_id": "CVE-2026-65333", "vulnerability_url": "/vuln/CVE-2026-65333"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:39+00:00", "cve": "CVE-2026-65332", "id": "CVE-2026-65332", "initial_release_date": "2026-08-17T21:29:09.891000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65332.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562999.0, "vulnerability_id": "CVE-2026-65332", "vulnerability_url": "/vuln/CVE-2026-65332"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:36+00:00", "cve": "CVE-2026-65331", "id": "CVE-2026-65331", "initial_release_date": "2026-08-17T21:31:37.955000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-65331.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562996.0, "vulnerability_id": "CVE-2026-65331", "vulnerability_url": "/vuln/CVE-2026-65331"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:35+00:00", "cve": "CVE-2026-64784", "id": "CVE-2026-64784", "initial_release_date": "2026-08-17T21:30:45.212000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64784.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562995.0, "vulnerability_id": "CVE-2026-64784", "vulnerability_url": "/vuln/CVE-2026-64784"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:32+00:00", "cve": "CVE-2026-64757", "id": "CVE-2026-64757", "initial_release_date": "2026-08-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64757.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562992.0, "vulnerability_id": "CVE-2026-64757", "vulnerability_url": "/vuln/CVE-2026-64757"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:32+00:00", "cve": "CVE-2026-43795", "id": "CVE-2026-43795", "initial_release_date": "2026-08-17T21:31:14.573000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43795.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562992.0, "vulnerability_id": "CVE-2026-43795", "vulnerability_url": "/vuln/CVE-2026-43795"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:31+00:00", "cve": "CVE-2026-28984", "id": "CVE-2026-28984", "initial_release_date": "2026-08-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28984.json", "version": "3", "product_status": {"fixed": 657, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562991.0, "vulnerability_id": "CVE-2026-28984", "vulnerability_url": "/vuln/CVE-2026-28984"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:26+00:00", "cve": "CVE-2026-17697", "id": "CVE-2026-17697", "initial_release_date": "2026-07-30T00:18:56.265000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: chromium-browser: Type Confusion in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-17697.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562986.0, "vulnerability_id": "CVE-2026-17697", "vulnerability_url": "/vuln/CVE-2026-17697"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:23+00:00", "cve": "CVE-2026-17687", "id": "CVE-2026-17687", "initial_release_date": "2026-07-30T00:18:53.310000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-17687.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562983.0, "vulnerability_id": "CVE-2026-17687", "vulnerability_url": "/vuln/CVE-2026-17687"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:22+00:00", "cve": "CVE-2026-10955", "id": "CVE-2026-10955", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Type Confusion in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10955.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562982.0, "vulnerability_id": "CVE-2026-10955", "vulnerability_url": "/vuln/CVE-2026-10955"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:18+00:00", "cve": "CVE-2026-10883", "id": "CVE-2026-10883", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Out of bounds write in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10883.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562978.0, "vulnerability_id": "CVE-2026-10883", "vulnerability_url": "/vuln/CVE-2026-10883"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:18+00:00", "cve": "CVE-2026-10929", "id": "CVE-2026-10929", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Heap buffer overflow in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10929.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562978.0, "vulnerability_id": "CVE-2026-10929", "vulnerability_url": "/vuln/CVE-2026-10929"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:18+00:00", "cve": "CVE-2026-7900", "id": "CVE-2026-7900", "initial_release_date": "2026-05-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Heap buffer overflow in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7900.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562978.0, "vulnerability_id": "CVE-2026-7900", "vulnerability_url": "/vuln/CVE-2026-7900"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-01T19:56:17+00:00", "cve": "CVE-2026-5879", "id": "CVE-2026-5879", "initial_release_date": "2026-04-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5879.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562977.0, "vulnerability_id": "CVE-2026-5879", "vulnerability_url": "/vuln/CVE-2026-5879"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:56:17+00:00", "cve": "CVE-2026-4448", "id": "CVE-2026-4448", "initial_release_date": "2026-03-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Heap buffer overflow in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4448.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562977.0, "vulnerability_id": "CVE-2026-4448", "vulnerability_url": "/vuln/CVE-2026-4448"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:54:38+00:00", "cve": "CVE-2026-83596", "id": "CVE-2026-83596", "initial_release_date": "2026-08-31T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83596.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 5}, "imported": 1793562878.0, "vulnerability_id": "CVE-2026-83596", "vulnerability_url": "/vuln/CVE-2026-83596"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-01T19:54:38+00:00", "cve": "CVE-2026-79230", "id": "CVE-2026-79230", "initial_release_date": "2026-08-25T20:10:39.849000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-79230.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562878.0, "vulnerability_id": "CVE-2026-79230", "vulnerability_url": "/vuln/CVE-2026-79230"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:54:33+00:00", "cve": "CVE-2026-9924", "id": "CVE-2026-9924", "initial_release_date": "2026-05-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Heap buffer overflow in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9924.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562873.0, "vulnerability_id": "CVE-2026-9924", "vulnerability_url": "/vuln/CVE-2026-9924"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-01T19:54:33+00:00", "cve": "CVE-2026-8554", "id": "CVE-2026-8554", "initial_release_date": "2026-05-14T19:52:27.539000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: chromium-browser: Type Confusion in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8554.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 4, "known_not_affected": 23}, "imported": 1793562873.0, "vulnerability_id": "CVE-2026-8554", "vulnerability_url": "/vuln/CVE-2026-8554"}]}