VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302895 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-95278 | redhat_vex | chromium-browser: chromium-browser: system access restriction bypass via crafted HTML page | known not affected: 1 | 2026-09-29T19:02:00+00:00 | Vulnerability · Source |
| CVE-2026-95316 | redhat_vex | chromium-browser: chromium-browser: Unchecked return value in Performance | known not affected: 1 | 2026-09-29T19:01:59+00:00 | Vulnerability · Source |
| CVE-2026-100690 | redhat_vex | github.com/gohugoio/hugo: Hugo: Arbitrary file read via symbolic link sandbox escape | fixed: 3 known affected: 5 known not affected: 4 | 2026-09-29T19:00:49+00:00 | Vulnerability · Source |
| CVE-2026-97918 | redhat_vex | kernel: tracing: Undo the registration when enabling the histogram trigger fails | known affected: 234 known not affected: 42 | 2026-09-29T19:00:45+00:00 | Vulnerability · Source |
| CVE-2026-97916 | redhat_vex | kernel: accel/ivpu: Validate firmware log buffer metadata | known affected: 76 known not affected: 200 | 2026-09-29T19:00:42+00:00 | Vulnerability · Source |
| CVE-2026-97917 | redhat_vex | kernel: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr | known affected: 183 known not affected: 93 | 2026-09-29T19:00:40+00:00 | Vulnerability · Source |
| CVE-2026-97476 | redhat_vex | kernel: rds: filter RDS_INFO_* getsockopt by caller's netns | known affected: 15 known not affected: 261 | 2026-09-29T19:00:39+00:00 | Vulnerability · Source |
| CVE-2026-97475 | redhat_vex | kernel: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration | known affected: 185 known not affected: 91 | 2026-09-29T19:00:34+00:00 | Vulnerability · Source |
| CVE-2026-97474 | redhat_vex | kernel: wifi: iwlwifi: mld: purge async notifications upon nic error | known affected: 183 known not affected: 93 | 2026-09-29T19:00:30+00:00 | Vulnerability · Source |
| CVE-2026-95366 | redhat_vex | chromium-browser: chromium-browser: Web origin policy bypass via use of released resource in Core | known not affected: 1 | 2026-09-29T19:00:27+00:00 | Vulnerability · Source |
| CVE-2026-95371 | redhat_vex | chromium-browser: chromium-browser: User interface spoofing via missing authorization in Views | known not affected: 1 | 2026-09-29T19:00:27+00:00 | Vulnerability · Source |
| CVE-2026-95364 | redhat_vex | chromium-browser: chromium-browser: User interface spoofing via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:24+00:00 | Vulnerability · Source |
| CVE-2026-95359 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-29T19:00:22+00:00 | Vulnerability · Source |
| CVE-2026-95344 | redhat_vex | chromium-browser: chromium-browser: Site isolation bypass via race condition in DevTools | known not affected: 1 | 2026-09-29T19:00:20+00:00 | Vulnerability · Source |
| CVE-2026-95317 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in MediaCapture | known not affected: 1 | 2026-09-29T19:00:20+00:00 | Vulnerability · Source |
| CVE-2026-95312 | redhat_vex | chromium-browser: chromium-browser: Cross-origin information disclosure via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:19+00:00 | Vulnerability · Source |
| CVE-2026-95297 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in Contextual Tasks | known not affected: 1 | 2026-09-29T19:00:15+00:00 | Vulnerability · Source |
| CVE-2026-95287 | redhat_vex | chromium-browser: Chromium: Site isolation bypass via missing authorization in Navigation | known not affected: 1 | 2026-09-29T19:00:14+00:00 | Vulnerability · Source |
| CVE-2026-95285 | redhat_vex | chromium-browser: chromium-browser: Web origin policy bypass via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:14+00:00 | Vulnerability · Source |
| CVE-2026-95275 | redhat_vex | chromium-browser: chromium-browser: Security policy bypass in MediaStream via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:14+00:00 | Vulnerability · Source |
| CVE-2026-95365 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution in IndexedDB via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:12+00:00 | Vulnerability · Source |
| CVE-2026-84501 | redhat_vex | zookeeper: Apache ZooKeeper: Operational log forgery via newline injection | known affected: 22 known not affected: 5 | 2026-09-29T19:00:12+00:00 | Vulnerability · Source |
| CVE-2026-95347 | redhat_vex | chromium-browser: chromium-browser: Use after free in Updater | known not affected: 1 | 2026-09-29T19:00:10+00:00 | Vulnerability · Source |
| CVE-2026-95356 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via WindowDialog use-after-free | known not affected: 1 | 2026-09-29T19:00:10+00:00 | Vulnerability · Source |
| CVE-2026-95372 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in Chromecast | known not affected: 1 | 2026-09-29T19:00:10+00:00 | Vulnerability · Source |
| CVE-2026-95343 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:09+00:00 | Vulnerability · Source |
| CVE-2026-95345 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:09+00:00 | Vulnerability · Source |
| CVE-2026-95335 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via use-after-free in HID | known not affected: 1 | 2026-09-29T19:00:07+00:00 | Vulnerability · Source |
| CVE-2026-95325 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:04+00:00 | Vulnerability · Source |
| CVE-2026-95334 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:04+00:00 | Vulnerability · Source |
| CVE-2026-95324 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-29T19:00:03+00:00 | Vulnerability · Source |
| CVE-2026-95322 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via out-of-bounds write in GPU component | known not affected: 1 | 2026-09-29T19:00:03+00:00 | Vulnerability · Source |
| CVE-2026-95319 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via use-after-free in printing | known not affected: 1 | 2026-09-29T19:00:01+00:00 | Vulnerability · Source |
| CVE-2026-95299 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution outside sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:01+00:00 | Vulnerability · Source |
| CVE-2026-95298 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via UI interaction | known not affected: 1 | 2026-09-29T19:00:01+00:00 | Vulnerability · Source |
| CVE-2026-95283 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in Tint | known not affected: 1 | 2026-09-29T19:00:00+00:00 | Vulnerability · Source |
| CVE-2026-95286 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution in sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:00+00:00 | Vulnerability · Source |
| CVE-2026-94184 | redhat_vex | fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) | known affected: 6 | 2026-09-29T18:59:54+00:00 | Vulnerability · Source |
| CVE-2026-84445 | redhat_vex | google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests | fixed: 141 known affected: 876 known not affected: 1691 | 2026-09-29T18:59:53+00:00 | Vulnerability · Source |
| CVE-2026-79657 | redhat_vex | nltk: NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization | known affected: 9 known not affected: 5 | 2026-09-29T18:59:43+00:00 | Vulnerability · Source |
| CVE-2026-53669 | redhat_vex | react-router: React Router: Open Redirect vulnerability via backslashes in navigation components | fixed: 6 known affected: 142 known not affected: 6 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-39821 | redhat_vex | golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing | fixed: 1964 known affected: 164 known not affected: 4296 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-76835 | redhat_vex | github.com/oauth2-proxy/oauth2-proxy: OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set | under investigation: 5 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-59969 | redhat_vex | zookeeper: Apache ZooKeeper: Improper certificate validation in FIPS mode allows quorum compromise | known affected: 31 known not affected: 5 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-97473 | redhat_vex | kernel: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() | known not affected: 1 | 2026-09-29T18:51:51+00:00 | Vulnerability · Source |
| CVE-2026-95308 | redhat_vex | chromium-browser: chromium-browser: Information disclosure outside the sandbox via integer overflow in Metrics | known not affected: 1 | 2026-09-29T18:51:50+00:00 | Vulnerability · Source |
| CVE-2026-95355 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in Navigation | known not affected: 1 | 2026-09-29T18:48:43+00:00 | Vulnerability · Source |
| CVE-2026-95304 | redhat_vex | chromium-browser: chromium-browser: Out of bounds write in V8 | known not affected: 1 | 2026-09-29T18:48:31+00:00 | Vulnerability · Source |
| CVE-2026-95293 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-29T18:48:27+00:00 | Vulnerability · Source |
| CVE-2026-95282 | redhat_vex | chromium-browser: chromium-browser: Use after free in Platform | known not affected: 1 | 2026-09-29T18:48:20+00:00 | Vulnerability · Source |