VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290590 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-68184 | redhat_vex | kernel: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL | known affected: 275 known not affected: 1 | 2026-08-13T09:16:29+00:00 | Vulnerability · Source |
| CVE-2026-68248 | redhat_vex | kernel: drm/i915: Return NULL on error in active_instance | known affected: 232 known not affected: 44 | 2026-08-13T09:16:07+00:00 | Vulnerability · Source |
| CVE-2026-66484 | redhat_vex | cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives. | fixed: 3 known affected: 7 | 2026-08-13T09:11:13+00:00 | Vulnerability · Source |
| CVE-2026-19163 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use-after-free in Media component | known not affected: 1 | 2026-08-13T08:35:57+00:00 | Vulnerability · Source |
| CVE-2026-10090 | redhat_vex | multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped ClusterRoleBinding and become cluster-admin via Application Subscription | known affected: 1 | 2026-08-13T07:07:55+00:00 | Vulnerability · Source |
| CVE-2026-19149 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use-after-free vulnerability in Aura | known not affected: 1 | 2026-08-13T07:07:19+00:00 | Vulnerability · Source |
| CVE-2026-19165 | redhat_vex | chromium-browser: Google Chrome Extensions: Arbitrary code execution via use-after-free vulnerability | known not affected: 1 | 2026-08-13T07:07:18+00:00 | Vulnerability · Source |
| CVE-2026-19166 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape due to use-after-free in Web Authentication | known not affected: 1 | 2026-08-13T07:07:17+00:00 | Vulnerability · Source |
| CVE-2026-19145 | redhat_vex | chromium-browser: Chromium: Arbitrary code execution via use-after-free in Translate component | known not affected: 1 | 2026-08-13T07:07:13+00:00 | Vulnerability · Source |
| CVE-2026-19171 | redhat_vex | chromium-browser: Chromium: Sandbox escape via use-after-free in Media component | known not affected: 1 | 2026-08-13T07:07:03+00:00 | Vulnerability · Source |
| CVE-2026-19147 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use-after-free vulnerability in Aura | known not affected: 1 | 2026-08-13T07:07:00+00:00 | Vulnerability · Source |
| CVE-2026-19142 | redhat_vex | chromium-browser: Google Chrome: Remote code execution via use after free in Views | known not affected: 1 | 2026-08-13T07:06:58+00:00 | Vulnerability · Source |
| CVE-2026-19144 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-08-13T07:06:54+00:00 | Vulnerability · Source |
| CVE-2026-19140 | redhat_vex | chromium-browser: Google Chrome GPU: Sandbox escape via use after free vulnerability in crafted HTML. | known not affected: 1 | 2026-08-13T07:06:49+00:00 | Vulnerability · Source |
| CVE-2025-68158 | redhat_vex | Authlib: Authlib: Cross-Site Request Forgery due to improper session management in state storage | fixed: 12 known affected: 1 known not affected: 54 | 2026-08-13T06:34:15+00:00 | Vulnerability · Source |
| CVE-2025-5988 | redhat_vex | aap-gateway: CSRF origin checking is disabled | fixed: 2 known not affected: 70 | 2026-08-13T06:33:09+00:00 | Vulnerability · Source |
| CVE-2025-9909 | redhat_vex | aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration | fixed: 309 known not affected: 409 | 2026-08-13T05:44:26+00:00 | Vulnerability · Source |
| CVE-2026-10579 | redhat_vex | picketlink-federation: auth bypass in Picketlink SAML unsolicited-response | fixed: 102 known not affected: 1 | 2026-08-13T05:44:24+00:00 | Vulnerability · Source |
| CVE-2026-12481 | redhat_vex | keras: Keras: Arbitrary code execution via deserialization vulnerability | known affected: 2 known not affected: 7 | 2026-08-13T05:04:54+00:00 | Vulnerability · Source |
| CVE-2026-14180 | redhat_vex | undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap | known affected: 26 | 2026-08-13T04:31:11+00:00 | Vulnerability · Source |
| CVE-2026-16243 | redhat_vex | Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD | fixed: 52 | 2026-08-13T04:31:02+00:00 | Vulnerability · Source |
| CVE-2026-14615 | redhat_vex | keycloak-services: keycloak: FGAP v2 parent group children endpoint bypasses per-child view permission filter | fixed: 20 | 2026-08-13T04:30:52+00:00 | Vulnerability · Source |
| CVE-2026-13717 | redhat_vex | RHOAI MaaS: llm-d: MaaS/llm-d inference Gateway: default allowedRoutes.namespaces.from: All allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs) | fixed: 4 known affected: 5 known not affected: 128 | 2026-08-13T04:30:24+00:00 | Vulnerability · Source |
| CVE-2026-14450 | redhat_vex | maas-billing: MaaS API: Privilege escalation via forged HTTP headers due to missing authentication | fixed: 4 known not affected: 130 | 2026-08-13T04:30:21+00:00 | Vulnerability · Source |
| CVE-2026-55957 | redhat_vex | tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration | fixed: 4 known affected: 64 under investigation: 14 | 2026-08-13T03:59:40+00:00 | Vulnerability · Source |
| CVE-2026-19519 | redhat_vex | claircore: claircore: denial of service via unchecked type assertion in RPM header parser | known affected: 11 | 2026-08-13T03:54:18+00:00 | Vulnerability · Source |
| CVE-2026-18663 | redhat_vex | 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical Session Tracking control | known affected: 8 known not affected: 25 | 2026-08-13T03:12:56+00:00 | Vulnerability · Source |
| CVE-2026-16439 | redhat_vex | Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments | fixed: 52 | 2026-08-13T03:12:53+00:00 | Vulnerability · Source |
| CVE-2026-18381 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address | known affected: 1 | 2026-08-13T03:07:48+00:00 | Vulnerability · Source |
| CVE-2026-18427 | redhat_vex | @fastify/static: @fastify/static: Information disclosure via route guard bypass | known affected: 12 known not affected: 1 | 2026-08-13T03:07:45+00:00 | Vulnerability · Source |
| CVE-2021-21148 | suse_vex | SUSE CVE CVE-2021-21148 | known not affected: 425 recommended: 47 | 2026-08-13T02:47:47+00:00 | Vulnerability · Source |
| CVE-2021-21299 | suse_vex | SUSE CVE CVE-2021-21299 | known not affected: 366 recommended: 3 | 2026-08-13T02:47:45+00:00 | Vulnerability · Source |
| CVE-2021-21348 | suse_vex | SUSE CVE CVE-2021-21348 | known affected: 394 recommended: 67 | 2026-08-13T02:47:42+00:00 | Vulnerability · Source |
| CVE-2021-21702 | suse_vex | SUSE CVE CVE-2021-21702 | known affected: 1060 known not affected: 673 recommended: 4281 | 2026-08-13T02:47:39+00:00 | Vulnerability · Source |
| CVE-2021-21775 | suse_vex | SUSE CVE CVE-2021-21775 | known affected: 1 known not affected: 117 recommended: 1090 | 2026-08-13T02:47:36+00:00 | Vulnerability · Source |
| CVE-2021-21779 | suse_vex | SUSE CVE CVE-2021-21779 | known affected: 1 known not affected: 117 recommended: 1078 | 2026-08-13T02:47:34+00:00 | Vulnerability · Source |
| CVE-2021-22004 | suse_vex | SUSE CVE CVE-2021-22004 | known not affected: 496 | 2026-08-13T02:47:33+00:00 | Vulnerability · Source |
| CVE-2021-22931 | suse_vex | SUSE CVE CVE-2021-22931 | known affected: 20 known not affected: 175 recommended: 359 | 2026-08-13T02:47:30+00:00 | Vulnerability · Source |
| CVE-2021-22940 | suse_vex | SUSE CVE CVE-2021-22940 | known not affected: 129 recommended: 371 | 2026-08-13T02:47:28+00:00 | Vulnerability · Source |
| CVE-2021-23214 | suse_vex | SUSE CVE CVE-2021-23214 | known affected: 612 known not affected: 1 recommended: 2156 | 2026-08-13T02:47:26+00:00 | Vulnerability · Source |
| CVE-2021-23362 | suse_vex | SUSE CVE CVE-2021-23362 | recommended: 549 | 2026-08-13T02:47:25+00:00 | Vulnerability · Source |
| CVE-2021-25313 | suse_vex | SUSE CVE CVE-2021-25313 | known not affected: 809 | 2026-08-13T02:47:18+00:00 | Vulnerability · Source |
| CVE-2021-26260 | suse_vex | SUSE CVE CVE-2021-26260 | known affected: 21 known not affected: 50 recommended: 148 | 2026-08-13T02:47:16+00:00 | Vulnerability · Source |
| CVE-2021-26341 | suse_vex | SUSE CVE CVE-2021-26341 | known affected: 219 known not affected: 72 recommended: 1489 | 2026-08-13T02:47:14+00:00 | Vulnerability · Source |
| CVE-2021-26347 | suse_vex | SUSE CVE CVE-2021-26347 | known affected: 11 known not affected: 1 recommended: 1292 | 2026-08-13T02:47:13+00:00 | Vulnerability · Source |
| CVE-2021-26931 | suse_vex | SUSE CVE CVE-2021-26931 | known affected: 298 known not affected: 137 recommended: 1607 | 2026-08-13T02:47:07+00:00 | Vulnerability · Source |
| CVE-2021-27290 | suse_vex | SUSE CVE CVE-2021-27290 | known affected: 54 known not affected: 83 recommended: 553 | 2026-08-13T02:47:06+00:00 | Vulnerability · Source |
| CVE-2021-27363 | suse_vex | SUSE CVE CVE-2021-27363 | known affected: 300 known not affected: 71 recommended: 1871 | 2026-08-13T02:47:04+00:00 | Vulnerability · Source |
| CVE-2021-28660 | suse_vex | SUSE CVE CVE-2021-28660 | known affected: 300 known not affected: 88 recommended: 1713 | 2026-08-13T02:47:01+00:00 | Vulnerability · Source |
| CVE-2021-28675 | suse_vex | SUSE CVE CVE-2021-28675 | known affected: 5 known not affected: 48 recommended: 12 | 2026-08-13T02:47:00+00:00 | Vulnerability · Source |