VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286601 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9088 | redhat_vex | keycloak: Keycloak: Information disclosure due to user profile permission bypass | fixed: 20 | 2026-07-28T11:23:35+00:00 | Vulnerability · Source |
| CVE-2026-8830 | redhat_vex | keycloak: org.keycloak/keycloak-services: Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation | fixed: 20 | 2026-07-28T11:23:33+00:00 | Vulnerability · Source |
| CVE-2026-9792 | redhat_vex | keycloak: Keycloak: Security restriction bypass allows unauthorized ROPC token acquisition | fixed: 20 | 2026-07-28T11:23:30+00:00 | Vulnerability · Source |
| CVE-2026-9705 | redhat_vex | keycloak: Keycloak: Attacker can re-enable and take over disabled clients via Registration Access Token | fixed: 20 | 2026-07-28T11:23:26+00:00 | Vulnerability · Source |
| CVE-2026-9791 | redhat_vex | keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak | fixed: 20 | 2026-07-28T11:23:26+00:00 | Vulnerability · Source |
| CVE-2026-9083 | redhat_vex | keycloak: Keycloak: Information disclosure through arbitrary filesystem path probing | fixed: 20 | 2026-07-28T11:23:25+00:00 | Vulnerability · Source |
| CVE-2026-9801 | redhat_vex | keycloak: Keycloak: Denial of Service via malformed LDAP password policy response | fixed: 20 | 2026-07-28T11:23:22+00:00 | Vulnerability · Source |
| CVE-2026-9704 | redhat_vex | keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT | fixed: 20 | 2026-07-28T11:23:20+00:00 | Vulnerability · Source |
| CVE-2026-9799 | redhat_vex | keycloak: Keycloak: Unauthorized access to resources via UMA permission ticket bypass | fixed: 20 | 2026-07-28T11:23:17+00:00 | Vulnerability · Source |
| CVE-2026-9802 | redhat_vex | keycloak: Keycloak: Unauthorized account access via replayed refresh tokens after cluster restart | fixed: 20 | 2026-07-28T11:23:15+00:00 | Vulnerability · Source |
| CVE-2026-8922 | redhat_vex | org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: Security flaw in org.keycloak/keycloak-services | fixed: 20 | 2026-07-28T11:23:12+00:00 | Vulnerability · Source |
| CVE-2026-9803 | redhat_vex | keycloak: Keycloak: Denial of Service via malformed Authorization header | fixed: 20 | 2026-07-28T11:23:10+00:00 | Vulnerability · Source |
| CVE-2026-7500 | redhat_vex | org.keycloak.keycloak-services: Improper Access Control on Keycloak Server when the account Account API feature is disabled | fixed: 20 | 2026-07-28T11:23:07+00:00 | Vulnerability · Source |
| CVE-2026-9794 | redhat_vex | keycloak: Keycloak: Information disclosure via SAML ECP endpoint | fixed: 20 | 2026-07-28T11:23:01+00:00 | Vulnerability · Source |
| CVE-2026-55970 | redhat_vex | thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability | known affected: 51 | 2026-07-28T11:17:35+00:00 | Vulnerability · Source |
| CVE-2026-64217 | redhat_vex | kernel: netfs: Fix overrun check in netfs_extract_user_iter() | known affected: 76 known not affected: 199 | 2026-07-28T11:17:24+00:00 | Vulnerability · Source |
| CVE-2026-64243 | redhat_vex | kernel: ASoC: codecs: simple-mux: Fix enum control bounds check | known affected: 184 known not affected: 90 | 2026-07-28T11:08:51+00:00 | Vulnerability · Source |
| CVE-2026-64220 | redhat_vex | kernel: device property: set fwnode->secondary to NULL in fwnode_init() | known affected: 246 known not affected: 28 | 2026-07-28T10:37:32+00:00 | Vulnerability · Source |
| CVE-2024-22019 | redhat_vex | nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks | fixed: 402 known affected: 1 | 2026-07-28T10:37:16+00:00 | Vulnerability · Source |
| CVE-2026-64252 | redhat_vex | kernel: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS | known not affected: 274 | 2026-07-28T10:32:18+00:00 | Vulnerability · Source |
| CVE-2026-53668 | redhat_vex | react-router: react-router-dom: React Router: Cross-Site Scripting (XSS) via open redirects | known affected: 37 known not affected: 171 | 2026-07-28T10:27:08+00:00 | Vulnerability · Source |
| CVE-2026-64214 | redhat_vex | kernel: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() | known affected: 90 known not affected: 184 | 2026-07-28T10:27:07+00:00 | Vulnerability · Source |
| CVE-2026-64213 | redhat_vex | kernel: hwmon: (lm90) Add lock protection to lm90_alert | known affected: 198 known not affected: 76 | 2026-07-28T10:25:33+00:00 | Vulnerability · Source |
| CVE-2026-64249 | redhat_vex | kernel: fpga: region: fix use-after-free in child_regions_with_firmware() | known not affected: 274 | 2026-07-28T10:25:27+00:00 | Vulnerability · Source |
| CVE-2026-29169 | redhat_vex | httpd: NULL pointer dereference via specially crafted request | fixed: 342 known affected: 15 known not affected: 38 | 2026-07-28T10:25:23+00:00 | Vulnerability · Source |
| CVE-2026-64247 | redhat_vex | kernel: KVM: x86: hyper-v: Bound the bank index when querying sparse banks | known affected: 184 known not affected: 90 | 2026-07-28T10:25:19+00:00 | Vulnerability · Source |
| CVE-2026-34356 | redhat_vex | httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers | fixed: 314 known affected: 15 | 2026-07-28T10:24:19+00:00 | Vulnerability · Source |
| CVE-2024-42516 | redhat_vex | httpd: incomplete fix for CVE-2023-38709 | fixed: 310 known affected: 29 known not affected: 1 | 2026-07-28T10:24:15+00:00 | Vulnerability · Source |
| CVE-2026-34059 | redhat_vex | httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:24:06+00:00 | Vulnerability · Source |
| CVE-2026-34032 | redhat_vex | httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:24:02+00:00 | Vulnerability · Source |
| CVE-2026-33857 | redhat_vex | httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:23:57+00:00 | Vulnerability · Source |
| CVE-2026-33007 | redhat_vex | httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:23:56+00:00 | Vulnerability · Source |
| CVE-2026-22013 | redhat_vex | openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04) | fixed: 3262 known affected: 39 | 2026-07-28T10:23:23+00:00 | Vulnerability · Source |
| CVE-2026-44185 | redhat_vex | httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server | fixed: 314 known affected: 15 | 2026-07-28T10:20:09+00:00 | Vulnerability · Source |
| CVE-2026-42536 | redhat_vex | httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc | fixed: 314 known affected: 15 | 2026-07-28T10:20:05+00:00 | Vulnerability · Source |
| CVE-2026-34355 | redhat_vex | httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass | fixed: 314 known affected: 15 | 2026-07-28T10:20:01+00:00 | Vulnerability · Source |
| CVE-2026-28780 | redhat_vex | Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow | fixed: 508 known affected: 15 known not affected: 38 | 2026-07-28T10:19:55+00:00 | Vulnerability · Source |
| CVE-2025-66293 | redhat_vex | libpng: LIBPNG out-of-bounds read in png_image_read_composite | fixed: 510 known affected: 4 known not affected: 243 | 2026-07-28T10:18:01+00:00 | Vulnerability · Source |
| CVE-2026-64229 | redhat_vex | kernel: x86/mm: Disable broadcast TLB flush when PCID is disabled | known affected: 76 known not affected: 198 | 2026-07-28T10:07:44+00:00 | Vulnerability · Source |
| CVE-2026-64224 | redhat_vex | kernel: octeontx2-pf: fix double free in rvu_rep_rsrc_init() | known affected: 184 known not affected: 90 | 2026-07-28T10:07:40+00:00 | Vulnerability · Source |
| CVE-2026-64237 | redhat_vex | kernel: Input: elan_i2c - validate firmware size before use | known affected: 232 known not affected: 42 | 2026-07-28T10:02:54+00:00 | Vulnerability · Source |
| CVE-2026-64235 | redhat_vex | kernel: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines | known affected: 198 known not affected: 76 | 2026-07-28T09:58:20+00:00 | Vulnerability · Source |
| CVE-2026-64232 | redhat_vex | kernel: block: recompute nr_integrity_segments in blk_insert_cloned_request | known affected: 184 known not affected: 90 | 2026-07-28T09:53:36+00:00 | Vulnerability · Source |
| CVE-2026-64241 | redhat_vex | kernel: gpio: rockchip: teardown bugs and resource leaks | known not affected: 274 | 2026-07-28T09:47:41+00:00 | Vulnerability · Source |
| CVE-2026-64250 | redhat_vex | kernel: LoongArch: Report dying CPU to RCU in stop_this_cpu() | known not affected: 274 | 2026-07-28T09:42:35+00:00 | Vulnerability · Source |
| CVE-2026-64226 | redhat_vex | kernel: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path | known not affected: 274 | 2026-07-28T09:37:29+00:00 | Vulnerability · Source |
| CVE-2026-4367 | redhat_vex | libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing | fixed: 3 known affected: 13 | 2026-07-28T09:33:47+00:00 | Vulnerability · Source |
| CVE-2026-64209 | redhat_vex | kernel: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config | known not affected: 274 | 2026-07-28T09:28:13+00:00 | Vulnerability · Source |
| CVE-2026-64215 | redhat_vex | kernel: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table | known not affected: 274 | 2026-07-28T09:28:12+00:00 | Vulnerability · Source |
| CVE-2026-64255 | redhat_vex | kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | known affected: 184 known not affected: 90 | 2026-07-28T09:17:46+00:00 | Vulnerability · Source |