VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9802 | redhat_vex | keycloak: Keycloak: Unauthorized account access via replayed refresh tokens after cluster restart | fixed: 20 | 2026-07-28T11:23:15+00:00 | Vulnerability · Source |
| CVE-2026-8922 | redhat_vex | org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: Security flaw in org.keycloak/keycloak-services | fixed: 20 | 2026-07-28T11:23:12+00:00 | Vulnerability · Source |
| CVE-2026-9803 | redhat_vex | keycloak: Keycloak: Denial of Service via malformed Authorization header | fixed: 20 | 2026-07-28T11:23:10+00:00 | Vulnerability · Source |
| CVE-2026-7500 | redhat_vex | org.keycloak.keycloak-services: Improper Access Control on Keycloak Server when the account Account API feature is disabled | fixed: 20 | 2026-07-28T11:23:07+00:00 | Vulnerability · Source |
| CVE-2026-9794 | redhat_vex | keycloak: Keycloak: Information disclosure via SAML ECP endpoint | fixed: 20 | 2026-07-28T11:23:01+00:00 | Vulnerability · Source |
| CVE-2026-55970 | redhat_vex | thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability | known affected: 51 | 2026-07-28T11:17:35+00:00 | Vulnerability · Source |
| CVE-2026-53668 | redhat_vex | react-router: react-router-dom: React Router: Cross-Site Scripting (XSS) via open redirects | known affected: 37 known not affected: 171 | 2026-07-28T10:27:08+00:00 | Vulnerability · Source |
| CVE-2026-34059 | redhat_vex | httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:24:06+00:00 | Vulnerability · Source |
| CVE-2026-34032 | redhat_vex | httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:24:02+00:00 | Vulnerability · Source |
| CVE-2026-33857 | redhat_vex | httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:23:57+00:00 | Vulnerability · Source |
| CVE-2026-33007 | redhat_vex | httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash | fixed: 512 known affected: 15 known not affected: 38 | 2026-07-28T10:23:56+00:00 | Vulnerability · Source |
| CVE-2026-22013 | redhat_vex | openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04) | fixed: 3262 known affected: 39 | 2026-07-28T10:23:23+00:00 | Vulnerability · Source |
| CVE-2026-28780 | redhat_vex | Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow | fixed: 508 known affected: 15 known not affected: 38 | 2026-07-28T10:19:55+00:00 | Vulnerability · Source |
| CVE-2026-4367 | redhat_vex | libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing | fixed: 3 known affected: 13 | 2026-07-28T09:33:47+00:00 | Vulnerability · Source |
| CVE-2026-64209 | redhat_vex | kernel: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config | known not affected: 274 | 2026-07-28T09:28:13+00:00 | Vulnerability · Source |
| CVE-2026-64215 | redhat_vex | kernel: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table | known not affected: 274 | 2026-07-28T09:28:12+00:00 | Vulnerability · Source |
| CVE-2026-64255 | redhat_vex | kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | known affected: 184 known not affected: 90 | 2026-07-28T09:17:46+00:00 | Vulnerability · Source |
| CVE-2026-64238 | redhat_vex | kernel: gpio: shared: fix deadlock on shared proxy's parent removal | known affected: 3 known not affected: 274 | 2026-07-28T09:13:44+00:00 | Vulnerability · Source |
| CVE-2026-64451 | redhat_vex | kernel: tracing: Fix NULL pointer dereference in func_set_flag() | known not affected: 274 | 2026-07-28T08:27:26+00:00 | Vulnerability · Source |
| CVE-2026-64418 | redhat_vex | kernel: mm: shrinker: fix shrinker_info teardown race with expansion | known affected: 76 known not affected: 198 | 2026-07-28T08:08:49+00:00 | Vulnerability · Source |
| CVE-2026-53006 | redhat_vex | kernel: ipv6: fix possible UAF in icmpv6_rcv() | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2026-46086 | redhat_vex | kernel: net: bridge: use a stable FDB dst snapshot in RCU readers | fixed: 762 known affected: 64 | 2026-07-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-59922 | redhat_vex | mistune: Mistune: Denial of Service via crafted input | known affected: 24 | 2026-07-28T07:08:37+00:00 | Vulnerability · Source |
| CVE-2026-59924 | redhat_vex | mistune: Mistune: Information disclosure via crafted include paths | known affected: 24 | 2026-07-28T06:32:25+00:00 | Vulnerability · Source |
| CVE-2026-16419 | redhat_vex | chromium-browser: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access | known not affected: 1 | 2026-07-28T05:47:20+00:00 | Vulnerability · Source |
| CVE-2026-16417 | redhat_vex | chromium-browser: Chromium: Information disclosure via uninitialized use in Skia | known not affected: 1 | 2026-07-28T05:47:20+00:00 | Vulnerability · Source |
| CVE-2026-16416 | redhat_vex | chromium-browser: Google Chrome Chromecast: Sandbox Escape via Integer Overflow | known not affected: 1 | 2026-07-28T05:47:18+00:00 | Vulnerability · Source |
| CVE-2026-16414 | redhat_vex | chromium-browser: Chromecast: Chromecast in Google Chrome: Sandbox escape via malicious network traffic | known not affected: 1 | 2026-07-28T05:47:10+00:00 | Vulnerability · Source |
| CVE-2026-16422 | redhat_vex | chromium-browser: Google Chrome: Domain spoofing via insufficient certificate validation | known not affected: 1 | 2026-07-28T05:47:08+00:00 | Vulnerability · Source |
| CVE-2026-16423 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via crafted HTML and UI gestures | known not affected: 1 | 2026-07-28T05:42:30+00:00 | Vulnerability · Source |
| CVE-2026-16415 | redhat_vex | chromium-browser: Google Chrome Extensions: Omnibox spoofing via crafted HTML page | known not affected: 1 | 2026-07-28T05:42:25+00:00 | Vulnerability · Source |
| CVE-2026-16421 | redhat_vex | chromium-browser: Chromium: Arbitrary code execution in WebAudio via a crafted HTML page | known not affected: 1 | 2026-07-28T05:42:19+00:00 | Vulnerability · Source |
| CVE-2026-16418 | redhat_vex | chromium-browser: Chromium: Remote code execution via stack buffer overflow in V8 | known not affected: 1 | 2026-07-28T05:42:19+00:00 | Vulnerability · Source |
| CVE-2026-16424 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape vulnerability in GPU | known not affected: 1 | 2026-07-28T05:42:09+00:00 | Vulnerability · Source |
| CVE-2026-16420 | redhat_vex | chromium-browser: Google Chrome WebAudio: Arbitrary code execution via type confusion in crafted HTML | known not affected: 1 | 2026-07-28T05:42:08+00:00 | Vulnerability · Source |
| CVE-2026-16413 | redhat_vex | chromium-browser: Chromium: Sandbox escape via out-of-bounds write in ANGLE | known not affected: 1 | 2026-07-28T05:41:58+00:00 | Vulnerability · Source |
| CVE-2026-16389 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Libraries component in NSS | known not affected: 24 | 2026-07-28T03:00:11+00:00 | Vulnerability · Source |
| CVE-2026-64427 | redhat_vex | kernel: HID: logitech-dj: Fix maxfield check in DJ short report validation | known not affected: 274 | 2026-07-28T03:00:11+00:00 | Vulnerability · Source |
| CVE-2026-64509 | redhat_vex | kernel: rust: block: fix GenDisk cleanup paths | known not affected: 274 | 2026-07-28T03:00:07+00:00 | Vulnerability · Source |
| CVE-2026-64512 | redhat_vex | kernel: ACPI: CPPC: Suppress UBSAN warning caused by field misuse | known affected: 184 known not affected: 90 | 2026-07-28T03:00:06+00:00 | Vulnerability · Source |
| CVE-2026-64398 | redhat_vex | kernel: ksmbd: add a permission check for FSCTL_SET_ZERO_DATA | known not affected: 275 | 2026-07-28T03:00:06+00:00 | Vulnerability · Source |
| CVE-2026-4430 | redhat_vex | LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents | fixed: 3182 known affected: 133 | 2026-07-28T03:00:05+00:00 | Vulnerability · Source |
| CVE-2026-16366 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Navigation component | known not affected: 18 | 2026-07-28T03:00:05+00:00 | Vulnerability · Source |
| CVE-2026-46529 | redhat_vex | atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen | fixed: 451 known affected: 5 | 2026-07-28T03:00:03+00:00 | Vulnerability · Source |
| CVE-2026-64293 | redhat_vex | kernel: iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read | known affected: 184 known not affected: 91 | 2026-07-28T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-64384 | redhat_vex | kernel: smb: client: fix change notify replay double-free | known affected: 184 known not affected: 91 | 2026-07-28T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-8357 | redhat_vex | libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation | fixed: 3182 known affected: 133 | 2026-07-28T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-64515 | redhat_vex | kernel: wifi: mac80211: fix MLE defragmentation | known affected: 184 known not affected: 90 | 2026-07-28T03:00:00+00:00 | Vulnerability · Source |
| CVE-2003-1605 | suse_vex | SUSE CVE CVE-2003-1605 | known not affected: 124 | 2026-07-28T00:22:48+00:00 | Vulnerability · Source |
| CVE-2005-1918 | suse_vex | SUSE CVE CVE-2005-1918 | known not affected: 106 recommended: 18 | 2026-07-28T00:22:46+00:00 | Vulnerability · Source |