VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-98314 | suse_vex | SUSE CVE CVE-2026-98314 | known affected: 269 known not affected: 78 | 2026-10-16T16:29:12+00:00 | Vulnerability · Source |
| CVE-2026-98335 | suse_vex | SUSE CVE CVE-2026-98335 | known affected: 282 known not affected: 65 | 2026-10-16T16:29:10+00:00 | Vulnerability · Source |
| CVE-2026-103111 | suse_vex | SUSE CVE CVE-2026-103111 | known affected: 595 recommended: 24 | 2026-10-16T16:28:23+00:00 | Vulnerability · Source |
| CVE-2026-103261 | suse_vex | SUSE CVE CVE-2026-103261 | known affected: 60 known not affected: 83 | 2026-10-16T16:28:18+00:00 | Vulnerability · Source |
| CVE-2026-103262 | suse_vex | SUSE CVE CVE-2026-103262 | known affected: 52 known not affected: 91 recommended: 2 | 2026-10-16T16:28:16+00:00 | Vulnerability · Source |
| CVE-2026-103263 | suse_vex | SUSE CVE CVE-2026-103263 | known affected: 52 known not affected: 91 | 2026-10-16T16:28:14+00:00 | Vulnerability · Source |
| CVE-2026-104031 | suse_vex | SUSE CVE CVE-2026-104031 | known affected: 939 | 2026-10-16T16:28:09+00:00 | Vulnerability · Source |
| CVE-2026-104032 | suse_vex | SUSE CVE CVE-2026-104032 | known affected: 939 | 2026-10-16T16:28:07+00:00 | Vulnerability · Source |
| CVE-2026-104033 | suse_vex | SUSE CVE CVE-2026-104033 | known affected: 939 | 2026-10-16T16:28:05+00:00 | Vulnerability · Source |
| CVE-2026-104034 | suse_vex | SUSE CVE CVE-2026-104034 | known affected: 558 known not affected: 381 | 2026-10-16T16:28:02+00:00 | Vulnerability · Source |
| CVE-2026-104035 | suse_vex | SUSE CVE CVE-2026-104035 | known affected: 558 known not affected: 381 | 2026-10-16T16:27:59+00:00 | Vulnerability · Source |
| CVE-2026-104036 | suse_vex | SUSE CVE CVE-2026-104036 | known affected: 939 | 2026-10-16T16:27:57+00:00 | Vulnerability · Source |
| CVE-2026-104037 | suse_vex | SUSE CVE CVE-2026-104037 | known affected: 939 | 2026-10-16T16:27:54+00:00 | Vulnerability · Source |
| CVE-2026-104041 | suse_vex | SUSE CVE CVE-2026-104041 | known affected: 939 | 2026-10-16T16:27:47+00:00 | Vulnerability · Source |
| CVE-2026-104045 | suse_vex | SUSE CVE CVE-2026-104045 | known affected: 939 | 2026-10-16T16:27:45+00:00 | Vulnerability · Source |
| CVE-2026-105111 | suse_vex | SUSE CVE CVE-2026-105111 | known affected: 47 recommended: 8 | 2026-10-16T16:27:40+00:00 | Vulnerability · Source |
| CVE-2026-105922 | suse_vex | SUSE CVE CVE-2026-105922 | recommended: 1 | 2026-10-16T16:27:38+00:00 | Vulnerability · Source |
| CVE-2026-106564 | suse_vex | SUSE CVE CVE-2026-106564 | known affected: 369 known not affected: 8 recommended: 63 | 2026-10-16T16:27:31+00:00 | Vulnerability · Source |
| CVE-2026-106576 | suse_vex | SUSE CVE CVE-2026-106576 | known affected: 369 known not affected: 8 recommended: 63 | 2026-10-16T16:27:07+00:00 | Vulnerability · Source |
| CVE-2024-37371 | redhat_vex | krb5: GSS message token handling | fixed: 1014 known affected: 10 known not affected: 66 | 2026-10-16T16:06:25+00:00 | Vulnerability · Source |
| CVE-2026-9673 | redhat_vex | json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass. | fixed: 2 known not affected: 7 | 2026-10-16T16:00:58+00:00 | Vulnerability · Source |
| CVE-2026-89778 | redhat_vex | kernel: isofs: fix out-of-bounds page array access on empty zisofs block | known affected: 77 known not affected: 200 | 2026-10-16T15:41:58+00:00 | Vulnerability · Source |
| CVE-2026-18874 | redhat_vex | volsync-addon-controller: volsync-addon-controller: annotation values rendered into YAML via text/template without escaping allows YAML injection into Subscription | fixed: 24 known not affected: 1048 | 2026-10-16T15:37:09+00:00 | Vulnerability · Source |
| CVE-2026-12542 | redhat_vex | foreman: command injection in foreman-tail | fixed: 103 known affected: 17 known not affected: 222 | 2026-10-16T15:37:04+00:00 | Vulnerability · Source |
| CVE-2026-64927 | redhat_vex | multicloud-operators-channel: multicloud-operators-channel: cross-namespace Secret and ConfigMap mutation via spec.secretRef.namespace confused deputy | fixed: 24 known not affected: 1048 | 2026-10-16T15:36:42+00:00 | Vulnerability · Source |
| CVE-2026-47582 | redhat_vex | nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module | known not affected: 19 | 2026-10-16T15:36:37+00:00 | Vulnerability · Source |
| CVE-2026-47579 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode driver | known not affected: 19 | 2026-10-16T15:36:34+00:00 | Vulnerability · Source |
| CVE-2026-76827 | redhat_vex | search-indexer: search-indexer: UPDATE/DELETE operations not scoped to caller's cluster (cross-tenant data tampering) | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:59+00:00 | Vulnerability · Source |
| CVE-2026-75485 | redhat_vex | must-gather: /tmp/kubeconfig retention | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:47+00:00 | Vulnerability · Source |
| CVE-2026-73834 | redhat_vex | must-gather: must-gather: embedded Secret data in ACM wrapper CRs collected without redaction | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:39+00:00 | Vulnerability · Source |
| CVE-2026-71468 | redhat_vex | acm-search-v2-api-rhel9: search-v2-api: Cross-user bearer-token reuse via global federation-config cache | fixed: 24 known not affected: 1048 | 2026-10-16T15:35:28+00:00 | Vulnerability · Source |
| CVE-2026-18617 | redhat_vex | data-science-pipelines-operator: DSPO: MySQL DSN parameter injection via CustomExtraParams enables LOCAL INFILE file exfiltration from operator pod | fixed: 19 known not affected: 831 | 2026-10-16T15:34:03+00:00 | Vulnerability · Source |
| CVE-2026-18608 | redhat_vex | data-science-pipelines-operator: DSPO: Operator ClusterRole grants pods/exec:*, kubeflow.org */*, and ClusterRole/Binding CRUD cluster-wide | fixed: 19 known not affected: 831 | 2026-10-16T15:34:00+00:00 | Vulnerability · Source |
| CVE-2026-89965 | redhat_vex | kernel: nvdimm/btt: reject an arena whose nfree is below the lane count | known affected: 186 known not affected: 91 | 2026-10-16T15:33:25+00:00 | Vulnerability · Source |
| CVE-2026-90414 | redhat_vex | kernel: IB/isert: reject PDUs declaring more data than was received | known affected: 263 known not affected: 14 | 2026-10-16T15:33:23+00:00 | Vulnerability · Source |
| CVE-2026-89930 | redhat_vex | kernel: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | known affected: 235 known not affected: 42 | 2026-10-16T15:33:19+00:00 | Vulnerability · Source |
| CVE-2026-89786 | redhat_vex | kernel: ext4: fix out-of-bounds read in ext4_read_inline_dir() | known affected: 263 known not affected: 14 | 2026-10-16T15:33:15+00:00 | Vulnerability · Source |
| CVE-2026-89779 | redhat_vex | kernel: fs/ntfs3: validate ef->size covers the record's name and value | known not affected: 277 | 2026-10-16T15:33:09+00:00 | Vulnerability · Source |
| CVE-2026-105820 | redhat_vex | vault: Vault: Privilege escalation via path traversal in ACL policy cache | under investigation: 3 | 2026-10-16T15:32:49+00:00 | Vulnerability · Source |
| CVE-2026-67567 | redhat_vex | multicloud-operators-subscription: multicloud-operators-subscription: HelmRelease chart applied with controller SA without GVK or namespace restriction | fixed: 24 known not affected: 1048 | 2026-10-16T15:32:34+00:00 | Vulnerability · Source |
| CVE-2026-66878 | redhat_vex | multicloud-operators-subscription: multicloud-operators-subscription: FetchChannelReferences honours Channel.spec.secretRef.namespace enabling cross-namespace Secret exfiltration | fixed: 24 known not affected: 1048 | 2026-10-16T15:32:33+00:00 | Vulnerability · Source |
| CVE-2026-47602 | redhat_vex | nvidia-driver: nvidia-driver: Denial of Service via untrusted pointer dereference | known not affected: 19 | 2026-10-16T15:32:18+00:00 | Vulnerability · Source |
| CVE-2026-47600 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource | known not affected: 19 | 2026-10-16T15:32:14+00:00 | Vulnerability · Source |
| CVE-2026-47601 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via improper memory access permissions in DMA-BUF import | known not affected: 19 | 2026-10-16T15:32:14+00:00 | Vulnerability · Source |
| CVE-2026-47592 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer | known not affected: 19 | 2026-10-16T15:32:12+00:00 | Vulnerability · Source |
| CVE-2026-47596 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via unpreserved memory permissions | known not affected: 19 | 2026-10-16T15:32:12+00:00 | Vulnerability · Source |
| CVE-2026-47588 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free | known not affected: 19 | 2026-10-16T15:32:06+00:00 | Vulnerability · Source |
| CVE-2026-47583 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via type confusion in the kernel module | known not affected: 19 | 2026-10-16T15:32:03+00:00 | Vulnerability · Source |
| CVE-2026-47558 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via double-free of imported memory state | known not affected: 19 | 2026-10-16T15:32:00+00:00 | Vulnerability · Source |
| CVE-2026-47556 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow | known not affected: 19 | 2026-10-16T15:31:59+00:00 | Vulnerability · Source |