VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
100518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9673 | redhat_vex | json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass. | fixed: 2 known not affected: 7 | 2026-10-16T16:00:58+00:00 | Vulnerability · Source |
| CVE-2026-89778 | redhat_vex | kernel: isofs: fix out-of-bounds page array access on empty zisofs block | known affected: 77 known not affected: 200 | 2026-10-16T15:41:58+00:00 | Vulnerability · Source |
| CVE-2026-18874 | redhat_vex | volsync-addon-controller: volsync-addon-controller: annotation values rendered into YAML via text/template without escaping allows YAML injection into Subscription | fixed: 24 known not affected: 1048 | 2026-10-16T15:37:09+00:00 | Vulnerability · Source |
| CVE-2026-12542 | redhat_vex | foreman: command injection in foreman-tail | fixed: 103 known affected: 17 known not affected: 222 | 2026-10-16T15:37:04+00:00 | Vulnerability · Source |
| CVE-2026-64927 | redhat_vex | multicloud-operators-channel: multicloud-operators-channel: cross-namespace Secret and ConfigMap mutation via spec.secretRef.namespace confused deputy | fixed: 24 known not affected: 1048 | 2026-10-16T15:36:42+00:00 | Vulnerability · Source |
| CVE-2026-47582 | redhat_vex | nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module | known not affected: 19 | 2026-10-16T15:36:37+00:00 | Vulnerability · Source |
| CVE-2026-47579 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode driver | known not affected: 19 | 2026-10-16T15:36:34+00:00 | Vulnerability · Source |
| CVE-2026-76827 | redhat_vex | search-indexer: search-indexer: UPDATE/DELETE operations not scoped to caller's cluster (cross-tenant data tampering) | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:59+00:00 | Vulnerability · Source |
| CVE-2026-75485 | redhat_vex | must-gather: /tmp/kubeconfig retention | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:47+00:00 | Vulnerability · Source |
| CVE-2026-73834 | redhat_vex | must-gather: must-gather: embedded Secret data in ACM wrapper CRs collected without redaction | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:39+00:00 | Vulnerability · Source |
| CVE-2026-71468 | redhat_vex | acm-search-v2-api-rhel9: search-v2-api: Cross-user bearer-token reuse via global federation-config cache | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:28+00:00 | Vulnerability · Source |
| CVE-2026-44250 | redhat_vex | netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays | fixed: 308 known affected: 1 known not affected: 2192 | 2026-10-16T15:34:43+00:00 | Vulnerability · Source |
| CVE-2026-42504 | redhat_vex | mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header | fixed: 4955 known affected: 79 known not affected: 6629 | 2026-10-16T15:34:38+00:00 | Vulnerability · Source |
| CVE-2026-18617 | redhat_vex | data-science-pipelines-operator: DSPO: MySQL DSN parameter injection via CustomExtraParams enables LOCAL INFILE file exfiltration from operator pod | fixed: 19 known not affected: 831 | 2026-10-16T15:34:03+00:00 | Vulnerability · Source |
| CVE-2026-18608 | redhat_vex | data-science-pipelines-operator: DSPO: Operator ClusterRole grants pods/exec:*, kubeflow.org */*, and ClusterRole/Binding CRUD cluster-wide | fixed: 19 known not affected: 831 | 2026-10-16T15:34:00+00:00 | Vulnerability · Source |
| CVE-2026-15055 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bc-fips: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of service due to unbounded KDF cost in PKCS#8 / PBES2 decryptors | known affected: 42 known not affected: 6 | 2026-10-16T15:33:58+00:00 | Vulnerability · Source |
| CVE-2026-89965 | redhat_vex | kernel: nvdimm/btt: reject an arena whose nfree is below the lane count | known affected: 186 known not affected: 91 | 2026-10-16T15:33:25+00:00 | Vulnerability · Source |
| CVE-2026-90414 | redhat_vex | kernel: IB/isert: reject PDUs declaring more data than was received | known affected: 263 known not affected: 14 | 2026-10-16T15:33:23+00:00 | Vulnerability · Source |
| CVE-2026-89930 | redhat_vex | kernel: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | known affected: 235 known not affected: 42 | 2026-10-16T15:33:19+00:00 | Vulnerability · Source |
| CVE-2026-89786 | redhat_vex | kernel: ext4: fix out-of-bounds read in ext4_read_inline_dir() | known affected: 263 known not affected: 14 | 2026-10-16T15:33:15+00:00 | Vulnerability · Source |
| CVE-2026-89779 | redhat_vex | kernel: fs/ntfs3: validate ef->size covers the record's name and value | known not affected: 277 | 2026-10-16T15:33:09+00:00 | Vulnerability · Source |
| CVE-2026-89407 | redhat_vex | com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking | fixed: 2 known affected: 141 known not affected: 2109 | 2026-10-16T15:33:08+00:00 | Vulnerability · Source |
| CVE-2026-105820 | redhat_vex | vault: Vault: Privilege escalation via path traversal in ACL policy cache | under investigation: 3 | 2026-10-16T15:32:49+00:00 | Vulnerability · Source |
| CVE-2026-67567 | redhat_vex | multicloud-operators-subscription: multicloud-operators-subscription: HelmRelease chart applied with controller SA without GVK or namespace restriction | fixed: 24 known not affected: 1048 | 2026-10-16T15:32:34+00:00 | Vulnerability · Source |
| CVE-2026-66878 | redhat_vex | multicloud-operators-subscription: multicloud-operators-subscription: FetchChannelReferences honours Channel.spec.secretRef.namespace enabling cross-namespace Secret exfiltration | fixed: 24 known not affected: 1048 | 2026-10-16T15:32:33+00:00 | Vulnerability · Source |
| CVE-2026-50011 | redhat_vex | netty-codec-redis: Netty: Denial of Service via malicious Redis array header | fixed: 308 known affected: 2 known not affected: 2191 | 2026-10-16T15:32:25+00:00 | Vulnerability · Source |
| CVE-2026-48006 | redhat_vex | netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator | fixed: 308 known affected: 2 known not affected: 2191 | 2026-10-16T15:32:20+00:00 | Vulnerability · Source |
| CVE-2026-47602 | redhat_vex | nvidia-driver: nvidia-driver: Denial of Service via untrusted pointer dereference | known not affected: 19 | 2026-10-16T15:32:18+00:00 | Vulnerability · Source |
| CVE-2026-47600 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource | known not affected: 19 | 2026-10-16T15:32:14+00:00 | Vulnerability · Source |
| CVE-2026-47601 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via improper memory access permissions in DMA-BUF import | known not affected: 19 | 2026-10-16T15:32:14+00:00 | Vulnerability · Source |
| CVE-2026-47592 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer | known not affected: 19 | 2026-10-16T15:32:12+00:00 | Vulnerability · Source |
| CVE-2026-47596 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via unpreserved memory permissions | known not affected: 19 | 2026-10-16T15:32:12+00:00 | Vulnerability · Source |
| CVE-2026-47588 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free | known not affected: 19 | 2026-10-16T15:32:06+00:00 | Vulnerability · Source |
| CVE-2026-47583 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via type confusion in the kernel module | known not affected: 19 | 2026-10-16T15:32:03+00:00 | Vulnerability · Source |
| CVE-2026-47558 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via double-free of imported memory state | known not affected: 19 | 2026-10-16T15:32:00+00:00 | Vulnerability · Source |
| CVE-2026-47556 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow | known not affected: 19 | 2026-10-16T15:31:59+00:00 | Vulnerability · Source |
| CVE-2026-47554 | redhat_vex | nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressure | known not affected: 19 | 2026-10-16T15:31:56+00:00 | Vulnerability · Source |
| CVE-2026-47551 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-free | known not affected: 19 | 2026-10-16T15:31:55+00:00 | Vulnerability · Source |
| CVE-2026-47550 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via untrusted pointer dereference | known not affected: 19 | 2026-10-16T15:31:53+00:00 | Vulnerability · Source |
| CVE-2026-47548 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layer | known not affected: 19 | 2026-10-16T15:31:49+00:00 | Vulnerability · Source |
| CVE-2026-47545 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds read | known not affected: 19 | 2026-10-16T15:31:47+00:00 | Vulnerability · Source |
| CVE-2026-47540 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via integer underflow in the kernel mode layer | known not affected: 19 | 2026-10-16T15:31:45+00:00 | Vulnerability · Source |
| CVE-2026-47530 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer | known not affected: 19 | 2026-10-16T15:31:43+00:00 | Vulnerability · Source |
| CVE-2026-47513 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via kernel heap out-of-bounds read | known not affected: 19 | 2026-10-16T15:31:41+00:00 | Vulnerability · Source |
| CVE-2026-47510 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layer | known not affected: 19 | 2026-10-16T15:31:38+00:00 | Vulnerability · Source |
| CVE-2026-47507 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds array access in the kernel mode layer | known not affected: 19 | 2026-10-16T15:31:35+00:00 | Vulnerability · Source |
| CVE-2026-47505 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer | known not affected: 19 | 2026-10-16T15:31:32+00:00 | Vulnerability · Source |
| CVE-2026-46340 | redhat_vex | netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments | fixed: 308 known affected: 2 known not affected: 2192 | 2026-10-16T15:31:28+00:00 | Vulnerability · Source |
| CVE-2026-44890 | redhat_vex | netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads | fixed: 308 known affected: 1 known not affected: 2192 | 2026-10-16T15:31:25+00:00 | Vulnerability · Source |
| CVE-2026-78669 | redhat_vex | net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames | known affected: 284 known not affected: 65 | 2026-10-16T15:31:18+00:00 | Vulnerability · Source |