VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-15772 | redhat_vex | chromium-browser: chromium-browser: Use after free in GPU | known not affected: 1 | 2026-07-28T12:04:07+00:00 | Vulnerability · Source |
| CVE-2026-15127 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in WebGL | known not affected: 1 | 2026-07-28T12:04:03+00:00 | Vulnerability · Source |
| CVE-2026-15125 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in Forms | known not affected: 1 | 2026-07-28T12:03:42+00:00 | Vulnerability · Source |
| CVE-2026-15773 | redhat_vex | chromium-browser: chromium-browser: Use after free in Core | known not affected: 1 | 2026-07-28T12:03:27+00:00 | Vulnerability · Source |
| CVE-2026-15132 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in V8 | known not affected: 1 | 2026-07-28T12:03:14+00:00 | Vulnerability · Source |
| CVE-2026-15122 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in Codecs | known not affected: 1 | 2026-07-28T12:02:48+00:00 | Vulnerability · Source |
| CVE-2026-15777 | redhat_vex | chromium-browser: chromium-browser: Use after free in UI | known not affected: 1 | 2026-07-28T12:02:45+00:00 | Vulnerability · Source |
| CVE-2026-15121 | redhat_vex | chromium-browser: chromium-browser: Use after free in WebRTC | known not affected: 1 | 2026-07-28T12:02:31+00:00 | Vulnerability · Source |
| CVE-2026-64248 | redhat_vex | kernel: MIPS: smp: report dying CPU to RCU in stop_this_cpu() | known not affected: 274 | 2026-07-28T11:57:52+00:00 | Vulnerability · Source |
| CVE-2026-64211 | redhat_vex | kernel: srcu: Don't queue workqueue handlers to never-online CPUs | known not affected: 274 | 2026-07-28T11:48:54+00:00 | Vulnerability · Source |
| CVE-2026-64223 | redhat_vex | kernel: wifi: mac80211: consume only present negotiated TTLM maps | known affected: 198 known not affected: 76 | 2026-07-28T11:38:32+00:00 | Vulnerability · Source |
| CVE-2026-58023 | redhat_vex | thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read | known affected: 6 known not affected: 1 | 2026-07-28T11:35:03+00:00 | Vulnerability · Source |
| CVE-2026-9088 | redhat_vex | keycloak: Keycloak: Information disclosure due to user profile permission bypass | fixed: 20 | 2026-07-28T11:23:35+00:00 | Vulnerability · Source |
| CVE-2026-8830 | redhat_vex | keycloak: org.keycloak/keycloak-services: Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation | fixed: 20 | 2026-07-28T11:23:33+00:00 | Vulnerability · Source |
| CVE-2026-9792 | redhat_vex | keycloak: Keycloak: Security restriction bypass allows unauthorized ROPC token acquisition | fixed: 20 | 2026-07-28T11:23:30+00:00 | Vulnerability · Source |
| CVE-2026-9705 | redhat_vex | keycloak: Keycloak: Attacker can re-enable and take over disabled clients via Registration Access Token | fixed: 20 | 2026-07-28T11:23:26+00:00 | Vulnerability · Source |
| CVE-2026-9791 | redhat_vex | keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak | fixed: 20 | 2026-07-28T11:23:26+00:00 | Vulnerability · Source |
| CVE-2026-9083 | redhat_vex | keycloak: Keycloak: Information disclosure through arbitrary filesystem path probing | fixed: 20 | 2026-07-28T11:23:25+00:00 | Vulnerability · Source |
| CVE-2026-9801 | redhat_vex | keycloak: Keycloak: Denial of Service via malformed LDAP password policy response | fixed: 20 | 2026-07-28T11:23:22+00:00 | Vulnerability · Source |
| CVE-2026-9704 | redhat_vex | keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT | fixed: 20 | 2026-07-28T11:23:20+00:00 | Vulnerability · Source |
| CVE-2026-9799 | redhat_vex | keycloak: Keycloak: Unauthorized access to resources via UMA permission ticket bypass | fixed: 20 | 2026-07-28T11:23:17+00:00 | Vulnerability · Source |
| CVE-2026-9802 | redhat_vex | keycloak: Keycloak: Unauthorized account access via replayed refresh tokens after cluster restart | fixed: 20 | 2026-07-28T11:23:15+00:00 | Vulnerability · Source |
| CVE-2026-8922 | redhat_vex | org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: Security flaw in org.keycloak/keycloak-services | fixed: 20 | 2026-07-28T11:23:12+00:00 | Vulnerability · Source |
| CVE-2026-9803 | redhat_vex | keycloak: Keycloak: Denial of Service via malformed Authorization header | fixed: 20 | 2026-07-28T11:23:10+00:00 | Vulnerability · Source |
| CVE-2026-7500 | redhat_vex | org.keycloak.keycloak-services: Improper Access Control on Keycloak Server when the account Account API feature is disabled | fixed: 20 | 2026-07-28T11:23:07+00:00 | Vulnerability · Source |
| CVE-2026-9794 | redhat_vex | keycloak: Keycloak: Information disclosure via SAML ECP endpoint | fixed: 20 | 2026-07-28T11:23:01+00:00 | Vulnerability · Source |
| CVE-2026-55970 | redhat_vex | thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability | known affected: 51 | 2026-07-28T11:17:35+00:00 | Vulnerability · Source |
| CVE-2026-53668 | redhat_vex | react-router: react-router-dom: React Router: Cross-Site Scripting (XSS) via open redirects | known affected: 37 known not affected: 171 | 2026-07-28T10:27:08+00:00 | Vulnerability · Source |
| CVE-2026-22013 | redhat_vex | openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04) | fixed: 3262 known affected: 39 | 2026-07-28T10:23:23+00:00 | Vulnerability · Source |
| CVE-2026-4367 | redhat_vex | libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing | fixed: 3 known affected: 13 | 2026-07-28T09:33:47+00:00 | Vulnerability · Source |
| CVE-2026-64209 | redhat_vex | kernel: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config | known not affected: 274 | 2026-07-28T09:28:13+00:00 | Vulnerability · Source |
| CVE-2026-64215 | redhat_vex | kernel: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table | known not affected: 274 | 2026-07-28T09:28:12+00:00 | Vulnerability · Source |
| CVE-2026-64255 | redhat_vex | kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | known affected: 184 known not affected: 90 | 2026-07-28T09:17:46+00:00 | Vulnerability · Source |
| CVE-2026-46086 | redhat_vex | kernel: net: bridge: use a stable FDB dst snapshot in RCU readers | fixed: 762 known affected: 64 | 2026-07-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-59922 | redhat_vex | mistune: Mistune: Denial of Service via crafted input | known affected: 24 | 2026-07-28T07:08:37+00:00 | Vulnerability · Source |
| CVE-2026-59924 | redhat_vex | mistune: Mistune: Information disclosure via crafted include paths | known affected: 24 | 2026-07-28T06:32:25+00:00 | Vulnerability · Source |
| CVE-2026-16419 | redhat_vex | chromium-browser: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access | known not affected: 1 | 2026-07-28T05:47:20+00:00 | Vulnerability · Source |
| CVE-2026-16417 | redhat_vex | chromium-browser: Chromium: Information disclosure via uninitialized use in Skia | known not affected: 1 | 2026-07-28T05:47:20+00:00 | Vulnerability · Source |
| CVE-2026-16416 | redhat_vex | chromium-browser: Google Chrome Chromecast: Sandbox Escape via Integer Overflow | known not affected: 1 | 2026-07-28T05:47:18+00:00 | Vulnerability · Source |
| CVE-2026-16414 | redhat_vex | chromium-browser: Chromecast: Chromecast in Google Chrome: Sandbox escape via malicious network traffic | known not affected: 1 | 2026-07-28T05:47:10+00:00 | Vulnerability · Source |
| CVE-2026-16422 | redhat_vex | chromium-browser: Google Chrome: Domain spoofing via insufficient certificate validation | known not affected: 1 | 2026-07-28T05:47:08+00:00 | Vulnerability · Source |
| CVE-2026-16423 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via crafted HTML and UI gestures | known not affected: 1 | 2026-07-28T05:42:30+00:00 | Vulnerability · Source |
| CVE-2026-16415 | redhat_vex | chromium-browser: Google Chrome Extensions: Omnibox spoofing via crafted HTML page | known not affected: 1 | 2026-07-28T05:42:25+00:00 | Vulnerability · Source |
| CVE-2026-16421 | redhat_vex | chromium-browser: Chromium: Arbitrary code execution in WebAudio via a crafted HTML page | known not affected: 1 | 2026-07-28T05:42:19+00:00 | Vulnerability · Source |
| CVE-2026-16418 | redhat_vex | chromium-browser: Chromium: Remote code execution via stack buffer overflow in V8 | known not affected: 1 | 2026-07-28T05:42:19+00:00 | Vulnerability · Source |
| CVE-2026-16424 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape vulnerability in GPU | known not affected: 1 | 2026-07-28T05:42:09+00:00 | Vulnerability · Source |
| CVE-2026-16420 | redhat_vex | chromium-browser: Google Chrome WebAudio: Arbitrary code execution via type confusion in crafted HTML | known not affected: 1 | 2026-07-28T05:42:08+00:00 | Vulnerability · Source |
| CVE-2026-16413 | redhat_vex | chromium-browser: Chromium: Sandbox escape via out-of-bounds write in ANGLE | known not affected: 1 | 2026-07-28T05:41:58+00:00 | Vulnerability · Source |
| CVE-2026-16389 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Libraries component in NSS | known not affected: 24 | 2026-07-28T03:00:11+00:00 | Vulnerability · Source |
| CVE-2026-64427 | redhat_vex | kernel: HID: logitech-dj: Fix maxfield check in DJ short report validation | known not affected: 274 | 2026-07-28T03:00:11+00:00 | Vulnerability · Source |