{"metadata": {"count": 304389, "page": 1, "per_page": 100}, "data": [{"meta_source": "microsoft_vex", "current_release_date": "2026-10-13T07:00:00.000Z", "cve": "CVE-2026-69896", "id": "msrc_CVE-2026-69896", "initial_release_date": "2026-09-08T07:00:00.000Z", "source": "Microsoft CSAF VEX", "status": "final", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-69896.json", "version": "2", "product_status": {"fixed": 8, "known_affected": 8}, "imported": 1791874800.0, "vulnerability_id": "CVE-2026-69896", "vulnerability_url": "/vuln/CVE-2026-69896"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T04:09:35+00:00", "cve": "CVE-2025-68121", "id": "CVE-2025-68121", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68121.json", "version": "3", "product_status": {"fixed": 8230, "known_affected": 186, "known_not_affected": 9015, "under_investigation": 42}, "imported": 1791173375.0, "vulnerability_id": "CVE-2025-68121", "vulnerability_url": "/vuln/CVE-2025-68121"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T04:09:33+00:00", "cve": "CVE-2025-61728", "id": "CVE-2025-61728", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61728.json", "version": "3", "product_status": {"fixed": 7014, "known_affected": 113, "known_not_affected": 4133}, "imported": 1791173373.0, "vulnerability_id": "CVE-2025-61728", "vulnerability_url": "/vuln/CVE-2025-61728"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:07:00+00:00", "cve": "CVE-2026-30922", "id": "CVE-2026-30922", "initial_release_date": "2026-03-18T02:29:45.857000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json", "version": "3", "product_status": {"fixed": 1724, "known_affected": 26, "known_not_affected": 2541}, "imported": 1791173220.0, "vulnerability_id": "CVE-2026-30922", "vulnerability_url": "/vuln/CVE-2026-30922"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:06:55+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 1345, "known_affected": 178, "known_not_affected": 13996}, "imported": 1791173215.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:06:38+00:00", "cve": "CVE-2026-25681", "id": "CVE-2026-25681", "initial_release_date": "2026-05-22T15:01:21.975000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25681.json", "version": "3", "product_status": {"fixed": 1332, "known_affected": 240, "known_not_affected": 8613}, "imported": 1791173198.0, "vulnerability_id": "CVE-2026-25681", "vulnerability_url": "/vuln/CVE-2026-25681"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:06:29+00:00", "cve": "CVE-2025-66506", "id": "CVE-2025-66506", "initial_release_date": "2025-12-04T22:04:41.637000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66506.json", "version": "3", "product_status": {"fixed": 329, "known_affected": 42, "known_not_affected": 1297}, "imported": 1791173189.0, "vulnerability_id": "CVE-2025-66506", "vulnerability_url": "/vuln/CVE-2025-66506"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:06:19+00:00", "cve": "CVE-2025-66471", "id": "CVE-2025-66471", "initial_release_date": "2025-12-05T16:06:08.531000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 Streaming API improperly handles highly compressed data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66471.json", "version": "3", "product_status": {"fixed": 1965, "known_affected": 125, "known_not_affected": 3876}, "imported": 1791173179.0, "vulnerability_id": "CVE-2025-66471", "vulnerability_url": "/vuln/CVE-2025-66471"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:06:11+00:00", "cve": "CVE-2025-66418", "id": "CVE-2025-66418", "initial_release_date": "2025-12-05T16:02:15.271000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66418.json", "version": "3", "product_status": {"fixed": 1992, "known_affected": 379, "known_not_affected": 2959}, "imported": 1791173171.0, "vulnerability_id": "CVE-2025-66418", "vulnerability_url": "/vuln/CVE-2025-66418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:06:09+00:00", "cve": "CVE-2025-64756", "id": "CVE-2025-64756", "initial_release_date": "2025-11-17T17:29:08.029000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64756.json", "version": "3", "product_status": {"fixed": 171, "known_affected": 115, "known_not_affected": 1099}, "imported": 1791173169.0, "vulnerability_id": "CVE-2025-64756", "vulnerability_url": "/vuln/CVE-2025-64756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:46+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 8116, "known_affected": 434, "known_not_affected": 5144}, "imported": 1791173146.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:34+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 11002, "known_affected": 442, "known_not_affected": 17464}, "imported": 1791173134.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:26+00:00", "cve": "CVE-2025-52881", "id": "CVE-2025-52881", "initial_release_date": "2025-11-05T09:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-52881.json", "version": "3", "product_status": {"fixed": 2419, "known_affected": 40, "known_not_affected": 4478}, "imported": 1791173126.0, "vulnerability_id": "CVE-2025-52881", "vulnerability_url": "/vuln/CVE-2025-52881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:19+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3866, "known_affected": 68, "known_not_affected": 13220}, "imported": 1791173119.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:12+00:00", "cve": "CVE-2025-22869", "id": "CVE-2025-22869", "initial_release_date": "2025-02-26T03:07:48.855000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22869.json", "version": "3", "product_status": {"fixed": 2839, "known_affected": 56, "known_not_affected": 6264, "under_investigation": 1}, "imported": 1791173112.0, "vulnerability_id": "CVE-2025-22869", "vulnerability_url": "/vuln/CVE-2025-22869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:08+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 2199, "known_affected": 93, "known_not_affected": 8426}, "imported": 1791173108.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T04:05:07+00:00", "cve": "CVE-2025-12816", "id": "CVE-2025-12816", "initial_release_date": "2025-11-25T19:15:50.243000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12816.json", "version": "3", "product_status": {"fixed": 460, "known_affected": 37, "known_not_affected": 2169}, "imported": 1791173107.0, "vulnerability_id": "CVE-2025-12816", "vulnerability_url": "/vuln/CVE-2025-12816"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:59:41+00:00", "cve": "CVE-2026-42502", "id": "CVE-2026-42502", "initial_release_date": "2026-05-22T15:01:21.649000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42502.json", "version": "3", "product_status": {"fixed": 788, "known_affected": 238, "known_not_affected": 5662}, "imported": 1791172781.0, "vulnerability_id": "CVE-2026-42502", "vulnerability_url": "/vuln/CVE-2026-42502"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:59:41+00:00", "cve": "CVE-2026-39825", "id": "CVE-2026-39825", "initial_release_date": "2026-05-07T19:41:18.453000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39825.json", "version": "3", "product_status": {"fixed": 890, "known_affected": 332, "known_not_affected": 321}, "imported": 1791172781.0, "vulnerability_id": "CVE-2026-39825", "vulnerability_url": "/vuln/CVE-2026-39825"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:54:41+00:00", "cve": "CVE-2024-24786", "id": "CVE-2024-24786", "initial_release_date": "2024-03-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-24786.json", "version": "3", "product_status": {"fixed": 2152, "known_affected": 112, "known_not_affected": 11937, "under_investigation": 57}, "imported": 1791172481.0, "vulnerability_id": "CVE-2024-24786", "vulnerability_url": "/vuln/CVE-2024-24786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-10-05T03:54:37+00:00", "cve": "CVE-2026-75604", "id": "CVE-2026-75604", "initial_release_date": "2026-09-01T21:23:30.859000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "next: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75604.json", "version": "3", "product_status": {"known_not_affected": 20}, "imported": 1791172477.0, "vulnerability_id": "CVE-2026-75604", "vulnerability_url": "/vuln/CVE-2026-75604"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:53:43+00:00", "cve": "CVE-2023-48795", "id": "CVE-2023-48795", "initial_release_date": "2023-12-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ssh: Prefix truncation attack on Binary Packet Protocol (BPP)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48795.json", "version": "3", "product_status": {"fixed": 1933, "known_affected": 153, "known_not_affected": 12358}, "imported": 1791172423.0, "vulnerability_id": "CVE-2023-48795", "vulnerability_url": "/vuln/CVE-2023-48795"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:52:34+00:00", "cve": "CVE-2026-56860", "id": "CVE-2026-56860", "initial_release_date": "2026-08-13T21:58:53.731000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56860.json", "version": "3", "product_status": {"fixed": 7334, "known_affected": 274, "known_not_affected": 3610}, "imported": 1791172354.0, "vulnerability_id": "CVE-2026-56860", "vulnerability_url": "/vuln/CVE-2026-56860"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:51:36+00:00", "cve": "CVE-2026-56859", "id": "CVE-2026-56859", "initial_release_date": "2026-08-13T21:58:52.959000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56859.json", "version": "3", "product_status": {"fixed": 6850, "known_affected": 248, "known_not_affected": 3466}, "imported": 1791172296.0, "vulnerability_id": "CVE-2026-56859", "vulnerability_url": "/vuln/CVE-2026-56859"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:50:53+00:00", "cve": "CVE-2026-56858", "id": "CVE-2026-56858", "initial_release_date": "2026-08-13T21:58:53.354000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56858.json", "version": "3", "product_status": {"fixed": 6774, "known_affected": 215, "known_not_affected": 3326}, "imported": 1791172253.0, "vulnerability_id": "CVE-2026-56858", "vulnerability_url": "/vuln/CVE-2026-56858"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:50:23+00:00", "cve": "CVE-2026-56853", "id": "CVE-2026-56853", "initial_release_date": "2026-08-13T21:58:53.092000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56853.json", "version": "3", "product_status": {"fixed": 2408, "known_affected": 258, "known_not_affected": 2081}, "imported": 1791172223.0, "vulnerability_id": "CVE-2026-56853", "vulnerability_url": "/vuln/CVE-2026-56853"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:50:00+00:00", "cve": "CVE-2026-56852", "id": "CVE-2026-56852", "initial_release_date": "2026-07-21T19:18:59.951000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56852.json", "version": "3", "product_status": {"fixed": 766, "known_affected": 97, "known_not_affected": 8659, "under_investigation": 237}, "imported": 1791172200.0, "vulnerability_id": "CVE-2026-56852", "vulnerability_url": "/vuln/CVE-2026-56852"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:48:54+00:00", "cve": "CVE-2026-41178", "id": "CVE-2026-41178", "initial_release_date": "2026-06-04T14:38:23.707000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41178.json", "version": "3", "product_status": {"fixed": 1083, "known_affected": 213, "known_not_affected": 6482}, "imported": 1791172134.0, "vulnerability_id": "CVE-2026-41178", "vulnerability_url": "/vuln/CVE-2026-41178"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:48:25+00:00", "cve": "CVE-2026-39835", "id": "CVE-2026-39835", "initial_release_date": "2026-05-22T02:31:26.982000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "version": "3", "product_status": {"fixed": 950, "known_affected": 88, "known_not_affected": 5149}, "imported": 1791172105.0, "vulnerability_id": "CVE-2026-39835", "vulnerability_url": "/vuln/CVE-2026-39835"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:48:15+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2999, "known_affected": 144, "known_not_affected": 16904}, "imported": 1791172095.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:48:05+00:00", "cve": "CVE-2026-33818", "id": "CVE-2026-33818", "initial_release_date": "2026-08-13T21:58:52.821000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33818.json", "version": "3", "product_status": {"fixed": 7256, "known_affected": 200, "known_not_affected": 2994}, "imported": 1791172085.0, "vulnerability_id": "CVE-2026-33818", "vulnerability_url": "/vuln/CVE-2026-33818"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:47:50+00:00", "cve": "CVE-2026-33814", "id": "CVE-2026-33814", "initial_release_date": "2026-05-07T19:41:17.631000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "version": "3", "product_status": {"fixed": 2322, "known_affected": 380, "known_not_affected": 27856, "under_investigation": 496}, "imported": 1791172070.0, "vulnerability_id": "CVE-2026-33814", "vulnerability_url": "/vuln/CVE-2026-33814"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:47:39+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 3352, "known_affected": 364, "known_not_affected": 39263}, "imported": 1791172059.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:46:49+00:00", "cve": "CVE-2023-39325", "id": "CVE-2023-39325", "initial_release_date": "2023-10-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39325.json", "version": "3", "product_status": {"fixed": 6046, "known_affected": 223, "known_not_affected": 30360}, "imported": 1791172009.0, "vulnerability_id": "CVE-2023-39325", "vulnerability_url": "/vuln/CVE-2023-39325"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:46:47+00:00", "cve": "CVE-2022-30631", "id": "CVE-2022-30631", "initial_release_date": "2022-07-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: compress/gzip: stack exhaustion in Reader.Read", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-30631.json", "version": "3", "product_status": {"fixed": 4253, "known_affected": 91, "known_not_affected": 2159}, "imported": 1791172007.0, "vulnerability_id": "CVE-2022-30631", "vulnerability_url": "/vuln/CVE-2022-30631"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:54+00:00", "cve": "CVE-2026-64438", "id": "CVE-2026-64438", "initial_release_date": "2026-07-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64438.json", "version": "3", "product_status": {"fixed": 1457, "known_affected": 22, "known_not_affected": 91}, "imported": 1791171354.0, "vulnerability_id": "CVE-2026-64438", "vulnerability_url": "/vuln/CVE-2026-64438"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:47+00:00", "cve": "CVE-2026-64368", "id": "CVE-2026-64368", "initial_release_date": "2026-07-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64368.json", "version": "3", "product_status": {"fixed": 1457, "known_affected": 22, "known_not_affected": 91}, "imported": 1791171347.0, "vulnerability_id": "CVE-2026-64368", "vulnerability_url": "/vuln/CVE-2026-64368"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:38+00:00", "cve": "CVE-2026-63919", "id": "CVE-2026-63919", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xfrm: input: hold netns during deferred transport reinjection", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63919.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 36, "known_not_affected": 28}, "imported": 1791171338.0, "vulnerability_id": "CVE-2026-63919", "vulnerability_url": "/vuln/CVE-2026-63919"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:32+00:00", "cve": "CVE-2026-53239", "id": "CVE-2026-53239", "initial_release_date": "2026-06-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53239.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 36, "known_not_affected": 28}, "imported": 1791171332.0, "vulnerability_id": "CVE-2026-53239", "vulnerability_url": "/vuln/CVE-2026-53239"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:26+00:00", "cve": "CVE-2026-43493", "id": "CVE-2026-43493", "initial_release_date": "2026-05-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43493.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 50, "known_not_affected": 14}, "imported": 1791171326.0, "vulnerability_id": "CVE-2026-43493", "vulnerability_url": "/vuln/CVE-2026-43493"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:15+00:00", "cve": "CVE-2026-31663", "id": "CVE-2026-31663", "initial_release_date": "2026-04-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xfrm: hold dev ref until after transport_finish NF_HOOK", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31663.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 28, "known_not_affected": 36}, "imported": 1791171315.0, "vulnerability_id": "CVE-2026-31663", "vulnerability_url": "/vuln/CVE-2026-31663"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:08+00:00", "cve": "CVE-2026-31581", "id": "CVE-2026-31581", "initial_release_date": "2026-04-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ALSA: 6fire: fix use-after-free on disconnect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31581.json", "version": "3", "product_status": {"fixed": 1302, "known_affected": 50, "known_not_affected": 14}, "imported": 1791171308.0, "vulnerability_id": "CVE-2026-31581", "vulnerability_url": "/vuln/CVE-2026-31581"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:35:01+00:00", "cve": "CVE-2026-31467", "id": "CVE-2026-31467", "initial_release_date": "2026-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: Linux kernel: Denial of Service in erofs filesystem", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31467.json", "version": "3", "product_status": {"fixed": 616, "known_not_affected": 198}, "imported": 1791171301.0, "vulnerability_id": "CVE-2026-31467", "vulnerability_url": "/vuln/CVE-2026-31467"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:34:53+00:00", "cve": "CVE-2026-22984", "id": "CVE-2026-22984", "initial_release_date": "2026-01-23T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22984.json", "version": "3", "product_status": {"fixed": 1980, "known_affected": 22, "known_not_affected": 42}, "imported": 1791171293.0, "vulnerability_id": "CVE-2026-22984", "vulnerability_url": "/vuln/CVE-2026-22984"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T03:33:56+00:00", "cve": "CVE-2021-20329", "id": "CVE-2021-20329", "initial_release_date": "2021-03-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mongo-go-driver: specific cstrings input may not be properly validated", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-20329.json", "version": "3", "product_status": {"fixed": 252, "known_affected": 69, "known_not_affected": 3782}, "imported": 1791171236.0, "vulnerability_id": "CVE-2021-20329", "vulnerability_url": "/vuln/CVE-2021-20329"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:32:39+00:00", "cve": "CVE-2026-72130", "id": "CVE-2026-72130", "initial_release_date": "2026-08-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nvmet-auth: reject short AUTH_RECEIVE buffers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72130.json", "version": "3", "product_status": {"fixed": 919, "known_affected": 22, "known_not_affected": 90}, "imported": 1791171159.0, "vulnerability_id": "CVE-2026-72130", "vulnerability_url": "/vuln/CVE-2026-72130"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:32:30+00:00", "cve": "CVE-2026-68426", "id": "CVE-2026-68426", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68426.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 22, "known_not_affected": 42}, "imported": 1791171150.0, "vulnerability_id": "CVE-2026-68426", "vulnerability_url": "/vuln/CVE-2026-68426"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:32:27+00:00", "cve": "CVE-2026-64017", "id": "CVE-2026-64017", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: blk-mq: pop cached request if it is usable", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64017.json", "version": "3", "product_status": {"fixed": 1224, "known_affected": 22, "known_not_affected": 90}, "imported": 1791171147.0, "vulnerability_id": "CVE-2026-64017", "vulnerability_url": "/vuln/CVE-2026-64017"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:32:17+00:00", "cve": "CVE-2026-63921", "id": "CVE-2026-63921", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63921.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 50, "known_not_affected": 15}, "imported": 1791171137.0, "vulnerability_id": "CVE-2026-63921", "vulnerability_url": "/vuln/CVE-2026-63921"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:32:08+00:00", "cve": "CVE-2026-63917", "id": "CVE-2026-63917", "initial_release_date": "2026-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63917.json", "version": "3", "product_status": {"fixed": 1374, "known_affected": 50, "known_not_affected": 14}, "imported": 1791171128.0, "vulnerability_id": "CVE-2026-63917", "vulnerability_url": "/vuln/CVE-2026-63917"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:32:06+00:00", "cve": "CVE-2026-52993", "id": "CVE-2026-52993", "initial_release_date": "2026-06-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: tipc: fix double-free in tipc_buf_append()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52993.json", "version": "3", "product_status": {"fixed": 2122, "known_affected": 22, "known_not_affected": 42}, "imported": 1791171126.0, "vulnerability_id": "CVE-2026-52993", "vulnerability_url": "/vuln/CVE-2026-52993"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:31:58+00:00", "cve": "CVE-2026-74746", "id": "CVE-2026-74746", "initial_release_date": "2026-08-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfilter: flowtable: publish GC-visible tuple last", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74746.json", "version": "3", "product_status": {"fixed": 845, "known_affected": 232, "known_not_affected": 42}, "imported": 1791171118.0, "vulnerability_id": "CVE-2026-74746", "vulnerability_url": "/vuln/CVE-2026-74746"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:31:51+00:00", "cve": "CVE-2026-72098", "id": "CVE-2026-72098", "initial_release_date": "2026-08-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: dm-verity: fix buffer overflow in FEC calculation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72098.json", "version": "3", "product_status": {"fixed": 1607, "known_affected": 22, "known_not_affected": 42}, "imported": 1791171111.0, "vulnerability_id": "CVE-2026-72098", "vulnerability_url": "/vuln/CVE-2026-72098"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:31:42+00:00", "cve": "CVE-2026-68294", "id": "CVE-2026-68294", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: qrtr: restrict socket creation to the initial network namespace", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68294.json", "version": "3", "product_status": {"fixed": 1487, "known_affected": 54, "known_not_affected": 42}, "imported": 1791171102.0, "vulnerability_id": "CVE-2026-68294", "vulnerability_url": "/vuln/CVE-2026-68294"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:31:32+00:00", "cve": "CVE-2026-64191", "id": "CVE-2026-64191", "initial_release_date": "2026-07-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: i2c: stub: Reject I2C block transfers with invalid length", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64191.json", "version": "3", "product_status": {"fixed": 1575, "known_affected": 98, "known_not_affected": 14}, "imported": 1791171092.0, "vulnerability_id": "CVE-2026-64191", "vulnerability_url": "/vuln/CVE-2026-64191"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:28:28+00:00", "cve": "CVE-2026-83619", "id": "CVE-2026-83619", "initial_release_date": "2026-09-01T14:51:28.121000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "@xmldom/xmldom: xmldom: Denial of Service via crafted XML input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83619.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 18, "known_not_affected": 8}, "imported": 1791170908.0, "vulnerability_id": "CVE-2026-83619", "vulnerability_url": "/vuln/CVE-2026-83619"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:28:23+00:00", "cve": "CVE-2026-83617", "id": "CVE-2026-83617", "initial_release_date": "2026-09-01T14:47:46.526000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "@xmldom/xmldom: xmldom: XML injection via embedded line terminator in element/attribute names", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83617.json", "version": "3", "product_status": {"known_affected": 2, "known_not_affected": 23}, "imported": 1791170903.0, "vulnerability_id": "CVE-2026-83617", "vulnerability_url": "/vuln/CVE-2026-83617"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:28:17+00:00", "cve": "CVE-2026-83616", "id": "CVE-2026-83616", "initial_release_date": "2026-09-01T14:45:44.504000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xmldom: xmldom: XML Structure Injection via Unvalidated Processing Instruction Targets", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83616.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 3, "known_not_affected": 25}, "imported": 1791170897.0, "vulnerability_id": "CVE-2026-83616", "vulnerability_url": "/vuln/CVE-2026-83616"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:28:07+00:00", "cve": "CVE-2026-83615", "id": "CVE-2026-83615", "initial_release_date": "2026-09-01T14:44:05.884000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic memory consumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83615.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 2, "known_not_affected": 25}, "imported": 1791170887.0, "vulnerability_id": "CVE-2026-83615", "vulnerability_url": "/vuln/CVE-2026-83615"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:28:05+00:00", "cve": "CVE-2026-83613", "id": "CVE-2026-83613", "initial_release_date": "2026-09-01T14:38:49.617000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xmldom: @xmldom/xmldom: xmldom: Denial of Service due to quadratic-time attribute processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83613.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 3, "known_not_affected": 24}, "imported": 1791170885.0, "vulnerability_id": "CVE-2026-83613", "vulnerability_url": "/vuln/CVE-2026-83613"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:28:00+00:00", "cve": "CVE-2026-83609", "id": "CVE-2026-83609", "initial_release_date": "2026-09-01T14:29:40.475000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "@xmldom/xmldom: xmldom: Markup injection via embedded line terminators in XML names", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83609.json", "version": "3", "product_status": {"known_affected": 3, "known_not_affected": 22}, "imported": 1791170880.0, "vulnerability_id": "CVE-2026-83609", "vulnerability_url": "/vuln/CVE-2026-83609"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:27:47+00:00", "cve": "CVE-2026-76183", "id": "CVE-2026-76183", "initial_release_date": "2026-09-23T11:16:09.907000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Apache Tomcat: Authentication Bypass in WebSocket Endpoints", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76183.json", "version": "3", "product_status": {"fixed": 42, "known_affected": 79, "known_not_affected": 12}, "imported": 1791170867.0, "vulnerability_id": "CVE-2026-76183", "vulnerability_url": "/vuln/CVE-2026-76183"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:27:33+00:00", "cve": "CVE-2026-84445", "id": "CVE-2026-84445", "initial_release_date": "2026-09-14T16:11:41.401000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84445.json", "version": "3", "product_status": {"fixed": 178, "known_affected": 830, "known_not_affected": 2044}, "imported": 1791170853.0, "vulnerability_id": "CVE-2026-84445", "vulnerability_url": "/vuln/CVE-2026-84445"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:18:16+00:00", "cve": "CVE-2026-76561", "id": "CVE-2026-76561", "initial_release_date": "2026-09-07T23:59:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76561.json", "version": "3", "product_status": {"fixed": 97, "known_affected": 58}, "imported": 1791170296.0, "vulnerability_id": "CVE-2026-76561", "vulnerability_url": "/vuln/CVE-2026-76561"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-10-05T03:17:39+00:00", "cve": "CVE-2026-96512", "id": "CVE-2026-96512", "initial_release_date": "2026-09-23T12:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-96512.json", "version": "3", "product_status": {"fixed": 22, "known_affected": 9}, "imported": 1791170259.0, "vulnerability_id": "CVE-2026-96512", "vulnerability_url": "/vuln/CVE-2026-96512"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:28+00:00", "cve": "CVE-2026-95364", "id": "CVE-2026-95364", "initial_release_date": "2026-09-29T17:32:01.364000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Improper input validation in Passwords", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95364.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166288.0, "vulnerability_id": "CVE-2026-95364", "vulnerability_url": "/vuln/CVE-2026-95364"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:26+00:00", "cve": "CVE-2026-95352", "id": "CVE-2026-95352", "initial_release_date": "2026-09-29T17:31:57.500000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Incorrect authorization in DevTools", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95352.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166286.0, "vulnerability_id": "CVE-2026-95352", "vulnerability_url": "/vuln/CVE-2026-95352"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:26+00:00", "cve": "CVE-2026-95361", "id": "CVE-2026-95361", "initial_release_date": "2026-09-29T17:31:59.442000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Confused deputy in DevTools", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95361.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166286.0, "vulnerability_id": "CVE-2026-95361", "vulnerability_url": "/vuln/CVE-2026-95361"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:23+00:00", "cve": "CVE-2026-95342", "id": "CVE-2026-95342", "initial_release_date": "2026-09-29T17:32:00.150000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Missing authorization in V8", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95342.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166283.0, "vulnerability_id": "CVE-2026-95342", "vulnerability_url": "/vuln/CVE-2026-95342"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:20+00:00", "cve": "CVE-2026-95340", "id": "CVE-2026-95340", "initial_release_date": "2026-09-29T17:32:01.120000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Incorrect authorization in PictureInPicture", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95340.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166280.0, "vulnerability_id": "CVE-2026-95340", "vulnerability_url": "/vuln/CVE-2026-95340"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:19+00:00", "cve": "CVE-2026-95334", "id": "CVE-2026-95334", "initial_release_date": "2026-09-29T17:31:56.696000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Incorrect reference resolution in WebProtect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95334.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166279.0, "vulnerability_id": "CVE-2026-95334", "vulnerability_url": "/vuln/CVE-2026-95334"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:17+00:00", "cve": "CVE-2026-95328", "id": "CVE-2026-95328", "initial_release_date": "2026-09-29T17:32:00.879000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Confused deputy in Mobile", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95328.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166277.0, "vulnerability_id": "CVE-2026-95328", "vulnerability_url": "/vuln/CVE-2026-95328"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95347", "id": "CVE-2026-95347", "initial_release_date": "2026-09-29T17:31:54.611000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Use after free in Updater", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95347.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95347", "vulnerability_url": "/vuln/CVE-2026-95347"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95325", "id": "CVE-2026-95325", "initial_release_date": "2026-09-29T17:31:52.180000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: angle: Use after free in ANGLE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95325.json", "version": "3", "product_status": {"known_affected": 27, "known_not_affected": 18}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95325", "vulnerability_url": "/vuln/CVE-2026-95325"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95312", "id": "CVE-2026-95312", "initial_release_date": "2026-09-29T17:31:53.921000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Information leak in Passwords", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95312.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95312", "vulnerability_url": "/vuln/CVE-2026-95312"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95333", "id": "CVE-2026-95333", "initial_release_date": "2026-09-29T17:31:55.524000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Use after free in Metrics", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95333.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95333", "vulnerability_url": "/vuln/CVE-2026-95333"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95311", "id": "CVE-2026-95311", "initial_release_date": "2026-09-29T17:31:54.835000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Free of non-heap memory in Fonts", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95311.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95311", "vulnerability_url": "/vuln/CVE-2026-95311"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95332", "id": "CVE-2026-95332", "initial_release_date": "2026-09-29T17:31:53.677000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Use of uninitialized variable in Tint", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95332.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95332", "vulnerability_url": "/vuln/CVE-2026-95332"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95290", "id": "CVE-2026-95290", "initial_release_date": "2026-09-29T17:31:51.947000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Missing authorization in NFC", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95290.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95290", "vulnerability_url": "/vuln/CVE-2026-95290"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95319", "id": "CVE-2026-95319", "initial_release_date": "2026-09-29T17:31:58.729000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Use after free in Printing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95319.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95319", "vulnerability_url": "/vuln/CVE-2026-95319"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95344", "id": "CVE-2026-95344", "initial_release_date": "2026-09-29T17:31:54.170000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Race condition in DevTools", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95344.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95344", "vulnerability_url": "/vuln/CVE-2026-95344"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95278", "id": "CVE-2026-95278", "initial_release_date": "2026-09-29T17:31:56.220000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Missing authorization in WakeLock", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95278.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95278", "vulnerability_url": "/vuln/CVE-2026-95278"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95285", "id": "CVE-2026-95285", "initial_release_date": "2026-09-29T17:31:55.968000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Missing authorization in WebView", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95285.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95285", "vulnerability_url": "/vuln/CVE-2026-95285"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95354", "id": "CVE-2026-95354", "initial_release_date": "2026-09-29T17:31:51.213000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Use after free in Verifier", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95354.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95354", "vulnerability_url": "/vuln/CVE-2026-95354"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T02:11:16+00:00", "cve": "CVE-2026-95275", "id": "CVE-2026-95275", "initial_release_date": "2026-09-29T17:31:52.483000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: Incorrect reference resolution in MediaStream", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95275.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791166276.0, "vulnerability_id": "CVE-2026-95275", "vulnerability_url": "/vuln/CVE-2026-95275"}, {"meta_source": "redhat_vex", "current_release_date": "2026-10-05T00:58:07+00:00", "cve": "CVE-2026-102317", "id": "CVE-2026-102317", "initial_release_date": "2026-09-29T19:45:01.956000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "chromium-browser: chromium-browser: Improper privilege management in Mojo", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102317.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1791161887.0, "vulnerability_id": "CVE-2026-102317", "vulnerability_url": "/vuln/CVE-2026-102317"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-10-05T00:57:29+00:00", "cve": "CVE-2013-7440", "id": "CVE-2013-7440", "initial_release_date": "2013-08-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python: wildcard matching rules do not follow RFC 6125", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-7440.json", "version": "3", "product_status": {"fixed": 280, "known_affected": 30, "known_not_affected": 1872}, "imported": 1791161849.0, "vulnerability_id": "CVE-2013-7440", "vulnerability_url": "/vuln/CVE-2013-7440"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-10-04T23:41:15Z", "cve": "CVE-2017-7383", "id": "CVE-2017-7383", "initial_release_date": "2023-02-15T04:47:55Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2017-7383", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2017-7383.json", "version": "9", "product_status": {"known_affected": 6, "recommended": 28}, "imported": 1791157275.0, "vulnerability_id": "CVE-2017-7383", "vulnerability_url": "/vuln/CVE-2017-7383"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-04-13T08:38:24Z", "cve": "CVE-2019-14607", "id": "CVE-2019-14607", "initial_release_date": "2026-04-13T08:38:24Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2019-14607", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2019-14607.json", "version": "2", "product_status": {"known_not_affected": 28}, "imported": 1791157243.0, "vulnerability_id": "CVE-2019-14607", "vulnerability_url": "/vuln/CVE-2019-14607"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-10-04T23:40:38Z", "cve": "CVE-2019-19227", "id": "CVE-2019-19227", "initial_release_date": "2023-02-15T04:06:21Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2019-19227", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2019-19227.json", "version": "27", "product_status": {"known_affected": 117, "known_not_affected": 61, "recommended": 634}, "imported": 1791157238.0, "vulnerability_id": "CVE-2019-19227", "vulnerability_url": "/vuln/CVE-2019-19227"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-04-13T08:31:26Z", "cve": "CVE-2020-10134", "id": "CVE-2020-10134", "initial_release_date": "2026-04-13T08:31:26Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2020-10134", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2020-10134.json", "version": "2", "product_status": {"known_affected": 3}, "imported": 1791157233.0, "vulnerability_id": "CVE-2020-10134", "vulnerability_url": "/vuln/CVE-2020-10134"}, {"meta_source": "suse_vex", "aggregate_severity": "important", "current_release_date": "2026-10-04T23:40:21Z", "cve": "CVE-2020-36385", "id": "CVE-2020-36385", "initial_release_date": "2023-02-15T03:50:44Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2020-36385", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2020-36385.json", "version": "45", "product_status": {"known_affected": 299, "known_not_affected": 156, "recommended": 1743}, "imported": 1791157221.0, "vulnerability_id": "CVE-2020-36385", "vulnerability_url": "/vuln/CVE-2020-36385"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-10-04T23:40:06Z", "cve": "CVE-2021-47055", "id": "CVE-2021-47055", "initial_release_date": "2024-03-02T05:48:52Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2021-47055", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47055.json", "version": "54", "product_status": {"known_affected": 388, "known_not_affected": 270, "recommended": 227}, "imported": 1791157206.0, "vulnerability_id": "CVE-2021-47055", "vulnerability_url": "/vuln/CVE-2021-47055"}, {"meta_source": "suse_vex", "aggregate_severity": "important", "current_release_date": "2026-10-04T23:40:02Z", "cve": "CVE-2021-47311", "id": "CVE-2021-47311", "initial_release_date": "2024-05-23T03:04:49Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2021-47311", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47311.json", "version": "62", "product_status": {"known_affected": 453, "known_not_affected": 276, "recommended": 253}, "imported": 1791157202.0, "vulnerability_id": "CVE-2021-47311", "vulnerability_url": "/vuln/CVE-2021-47311"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-10-04T23:39:59Z", "cve": "CVE-2021-47404", "id": "CVE-2021-47404", "initial_release_date": "2024-05-28T03:34:12Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2021-47404", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47404.json", "version": "60", "product_status": {"known_affected": 269, "known_not_affected": 166, "recommended": 685}, "imported": 1791157199.0, "vulnerability_id": "CVE-2021-47404", "vulnerability_url": "/vuln/CVE-2021-47404"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-10-04T23:39:53Z", "cve": "CVE-2022-0617", "id": "CVE-2022-0617", "initial_release_date": "2023-02-15T03:34:57Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2022-0617", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-0617.json", "version": "38", "product_status": {"known_affected": 207, "known_not_affected": 2, "recommended": 1629}, "imported": 1791157193.0, "vulnerability_id": "CVE-2022-0617", "vulnerability_url": "/vuln/CVE-2022-0617"}, {"meta_source": "suse_vex", "aggregate_severity": "important", "current_release_date": "2026-10-04T23:39:49Z", "cve": "CVE-2022-2991", "id": "CVE-2022-2991", "initial_release_date": "2023-02-15T03:32:06Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2022-2991", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-2991.json", "version": "47", "product_status": {"known_affected": 394, "known_not_affected": 59, "recommended": 266}, "imported": 1791157189.0, "vulnerability_id": "CVE-2022-2991", "vulnerability_url": "/vuln/CVE-2022-2991"}, {"meta_source": "suse_vex", "aggregate_severity": "moderate", "current_release_date": "2026-10-04T23:39:47Z", "cve": "CVE-2022-3169", "id": "CVE-2022-3169", "initial_release_date": "2023-02-15T03:31:47Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2022-3169", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-3169.json", "version": "44", "product_status": {"known_affected": 255, "known_not_affected": 2, "recommended": 1436}, "imported": 1791157187.0, "vulnerability_id": "CVE-2022-3169", "vulnerability_url": "/vuln/CVE-2022-3169"}, {"meta_source": "suse_vex", "aggregate_severity": "important", "current_release_date": "2025-12-19T01:50:49Z", "cve": "CVE-2022-25836", "id": "CVE-2022-25836", "initial_release_date": "2025-12-17T01:37:41Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2022-25836", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-25836.json", "version": "3", "product_status": {}, "imported": 1791157183.0, "vulnerability_id": "CVE-2022-25836", "vulnerability_url": "/vuln/CVE-2022-25836"}, {"meta_source": "suse_vex", "aggregate_severity": "important", "current_release_date": "2025-12-19T01:50:47Z", "cve": "CVE-2022-25837", "id": "CVE-2022-25837", "initial_release_date": "2025-12-17T01:37:40Z", "source": "SUSE CSAF VEX", "status": "interim", "title": "SUSE CVE CVE-2022-25837", "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-25837.json", "version": "3", "product_status": {}, "imported": 1791157182.0, "vulnerability_id": "CVE-2022-25837", "vulnerability_url": "/vuln/CVE-2022-25837"}]}