VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291709 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-14209 | redhat_vex | keycloak-admin-ui: keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions | fixed: 20 known affected: 1 | 2026-08-05T18:45:13+00:00 | Vulnerability · Source |
| CVE-2026-53404 | redhat_vex | Apache Tomcat: Apache Tomcat: Incorrect control flow in rewrite valve allows unexpected rule processing | fixed: 72 known affected: 78 | 2026-08-05T18:45:09+00:00 | Vulnerability · Source |
| CVE-2026-50031 | redhat_vex | freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client | fixed: 573 known affected: 4 | 2026-08-05T18:44:58+00:00 | Vulnerability · Source |
| CVE-2026-33554 | redhat_vex | freeipmi: buffer overflows on response messages via ipmi-oem | fixed: 707 known affected: 4 | 2026-08-05T18:44:57+00:00 | Vulnerability · Source |
| CVE-2021-42252 | redhat_vex | kernel: memory overwrite in the kernel with potential privileges execution | known not affected: 197 | 2026-08-05T18:43:58+00:00 | Vulnerability · Source |
| CVE-2026-45411 | redhat_vex | vm2: vm2: Arbitrary Code Execution due to sandbox escape vulnerability | fixed: 1 known not affected: 1 | 2026-08-05T18:22:30+00:00 | Vulnerability · Source |
| CVE-2026-44009 | redhat_vex | vm2: vm2: Arbitrary Code Execution via Sandbox Escape | fixed: 1 known not affected: 1 | 2026-08-05T18:22:24+00:00 | Vulnerability · Source |
| CVE-2026-44008 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox escape | fixed: 1 known not affected: 1 | 2026-08-05T18:22:20+00:00 | Vulnerability · Source |
| CVE-2026-44007 | redhat_vex | vm2: vm2: Arbitrary code execution via nested NodeVM bypass | fixed: 1 known not affected: 1 | 2026-08-05T18:22:16+00:00 | Vulnerability · Source |
| CVE-2026-44006 | redhat_vex | vm2: vm2: Sandbox escape via arbitrary prototype access leading to arbitrary code execution | fixed: 1 known not affected: 1 | 2026-08-05T18:22:11+00:00 | Vulnerability · Source |
| CVE-2026-44005 | redhat_vex | vm2: vm2: Sandbox Escape leading to Arbitrary Code Execution | fixed: 1 known not affected: 1 | 2026-08-05T18:22:05+00:00 | Vulnerability · Source |
| CVE-2026-44004 | redhat_vex | vm2: vm2: Denial of Service via host memory exhaustion | fixed: 1 known not affected: 1 | 2026-08-05T18:22:01+00:00 | Vulnerability · Source |
| CVE-2026-44001 | redhat_vex | vm2: vm2: Sandbox escape leads to Denial of Service | fixed: 1 known not affected: 1 | 2026-08-05T18:21:58+00:00 | Vulnerability · Source |
| CVE-2026-43999 | redhat_vex | vm2: vm2: Remote code execution via NodeVM builtin allowlist bypass | fixed: 1 known not affected: 1 | 2026-08-05T18:21:52+00:00 | Vulnerability · Source |
| CVE-2026-43998 | redhat_vex | vm2: vm2: Remote code execution due to path restriction bypass via symlinks | fixed: 1 known not affected: 1 | 2026-08-05T18:21:50+00:00 | Vulnerability · Source |
| CVE-2026-43997 | redhat_vex | vm2: vm2: Arbitrary code execution via sandbox escape | fixed: 1 known not affected: 1 | 2026-08-05T18:21:47+00:00 | Vulnerability · Source |
| CVE-2026-1002 | redhat_vex | io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files | fixed: 30 known affected: 19 known not affected: 322 | 2026-08-05T18:21:01+00:00 | Vulnerability · Source |
| CVE-2026-9800 | redhat_vex | keycloak-policy-enforcer: Keycloak Policy Enforcer: Authorization bypass via incorrect URI comparison | fixed: 30 known affected: 2 known not affected: 1 | 2026-08-05T18:12:34+00:00 | Vulnerability · Source |
| CVE-2026-15572 | redhat_vex | keycloak-services: keycloak-services: DCR protocol mapper type-swap policy bypass allows privilege escalation | fixed: 20 | 2026-08-05T18:11:37+00:00 | Vulnerability · Source |
| CVE-2026-51992 | redhat_vex | ClickHouse Server: ClickHouse Server: Arbitrary code execution via SQL Injection in create dictionaries function | known not affected: 1 | 2026-08-05T17:24:05+00:00 | Vulnerability · Source |
| CVE-2024-56656 | redhat_vex | kernel: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips | known not affected: 198 | 2026-08-05T16:31:45+00:00 | Vulnerability · Source |
| CVE-2024-56688 | redhat_vex | kernel: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport | fixed: 305 known affected: 112 | 2026-08-05T16:31:42+00:00 | Vulnerability · Source |
| CVE-2025-22004 | redhat_vex | kernel: net: atm: fix use after free in lec_send() | fixed: 1497 known affected: 36 known not affected: 76 | 2026-08-05T16:26:59+00:00 | Vulnerability · Source |
| CVE-2024-56704 | redhat_vex | kernel: 9p/xen: fix release of IRQ | known not affected: 198 | 2026-08-05T16:19:47+00:00 | Vulnerability · Source |
| CVE-2026-67301 | redhat_vex | FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders | known affected: 26 known not affected: 5 | 2026-08-05T16:16:56+00:00 | Vulnerability · Source |
| CVE-2025-22040 | redhat_vex | kernel: ksmbd: fix session use-after-free in multichannel connection | known not affected: 274 | 2026-08-05T16:00:54+00:00 | Vulnerability · Source |
| CVE-2026-47763 | redhat_vex | pdm: pdm: Arbitrary File Overwrite via Symlink Following | known not affected: 1 | 2026-08-05T15:36:13+00:00 | Vulnerability · Source |
| CVE-2026-49331 | redhat_vex | openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths | known affected: 2 | 2026-08-05T15:36:13+00:00 | Vulnerability · Source |
| CVE-2026-67592 | redhat_vex | org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via uncontrolled incoming data transfers | known affected: 1 | 2026-08-05T15:36:12+00:00 | Vulnerability · Source |
| CVE-2026-42169 | redhat_vex | gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) | fixed: 24 known not affected: 29 | 2026-08-05T15:21:37+00:00 | Vulnerability · Source |
| CVE-2026-66758 | redhat_vex | gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images | fixed: 24 known affected: 29 | 2026-08-05T15:21:29+00:00 | Vulnerability · Source |
| CVE-2026-43164 | redhat_vex | kernel: udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb() | known affected: 14 known not affected: 260 | 2026-08-05T15:01:25+00:00 | Vulnerability · Source |
| CVE-2026-43126 | redhat_vex | kernel: ALSA: mixer: oss: Add card disconnect checkpoints | known not affected: 274 | 2026-08-05T15:01:25+00:00 | Vulnerability · Source |
| CVE-2026-43113 | redhat_vex | kernel: wifi: wl1251: validate packet IDs before indexing tx_frames | known affected: 14 known not affected: 260 | 2026-08-05T15:01:18+00:00 | Vulnerability · Source |
| CVE-2026-43464 | redhat_vex | kernel: net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ | known affected: 90 known not affected: 184 | 2026-08-05T14:55:37+00:00 | Vulnerability · Source |
| CVE-2026-43332 | redhat_vex | kernel: thermal: core: Fix thermal zone device registration error path | known affected: 184 known not affected: 90 | 2026-08-05T14:55:35+00:00 | Vulnerability · Source |
| CVE-2026-43226 | redhat_vex | kernel: net/rds: No shortcut out of RDS_CONN_ERROR | known affected: 14 known not affected: 260 | 2026-08-05T14:55:32+00:00 | Vulnerability · Source |
| CVE-2026-43230 | redhat_vex | kernel: net/rds: Clear reconnect pending bit | known affected: 14 known not affected: 260 | 2026-08-05T14:55:29+00:00 | Vulnerability · Source |
| CVE-2026-43465 | redhat_vex | kernel: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ | known affected: 90 known not affected: 184 | 2026-08-05T14:55:28+00:00 | Vulnerability · Source |
| CVE-2026-43280 | redhat_vex | kernel: drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise | known affected: 184 known not affected: 90 | 2026-08-05T14:55:26+00:00 | Vulnerability · Source |
| CVE-2026-43208 | redhat_vex | kernel: net: do not pass flow_id to set_rps_cpu() | known not affected: 274 | 2026-08-05T14:55:24+00:00 | Vulnerability · Source |
| CVE-2026-43339 | redhat_vex | kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() | known affected: 274 | 2026-08-05T14:55:21+00:00 | Vulnerability · Source |
| CVE-2026-43447 | redhat_vex | kernel: iavf: fix PTP use-after-free during reset | known affected: 182 known not affected: 92 | 2026-08-05T14:55:19+00:00 | Vulnerability · Source |
| CVE-2026-43334 | redhat_vex | kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response | known affected: 260 known not affected: 14 | 2026-08-05T14:55:15+00:00 | Vulnerability · Source |
| CVE-2026-43408 | redhat_vex | kernel: ceph: add a bunch of missing ceph_path_info initializers | known affected: 184 known not affected: 90 | 2026-08-05T14:55:13+00:00 | Vulnerability · Source |
| CVE-2026-45955 | redhat_vex | kernel: md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout | known affected: 108 known not affected: 166 | 2026-08-05T14:51:30+00:00 | Vulnerability · Source |
| CVE-2026-45862 | redhat_vex | kernel: iommu/vt-d: Flush cache for PASID table before using it | known affected: 232 known not affected: 42 | 2026-08-05T14:51:25+00:00 | Vulnerability · Source |
| CVE-2026-43502 | redhat_vex | kernel: net/rds: handle zerocopy send cleanup before the message is queued | known affected: 14 known not affected: 260 | 2026-08-05T14:51:24+00:00 | Vulnerability · Source |
| CVE-2026-45932 | redhat_vex | kernel: bpf: Fix tcx/netkit detach permissions when prog fd isn't given | known affected: 184 known not affected: 90 | 2026-08-05T14:51:21+00:00 | Vulnerability · Source |
| CVE-2026-46053 | redhat_vex | kernel: net: rds: fix MR cleanup on copy error | known not affected: 274 | 2026-08-05T14:51:19+00:00 | Vulnerability · Source |