VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302963 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-102330 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in SiteIsolation | known not affected: 1 | 2026-09-29T20:57:18+00:00 | Vulnerability · Source |
| CVE-2026-97491 | redhat_vex | kernel: net/rds: Don't sleep inside rds_ib_conn_path_shutdown | known affected: 248 known not affected: 28 | 2026-09-29T20:57:17+00:00 | Vulnerability · Source |
| CVE-2026-97488 | redhat_vex | kernel: qnx4: handle set_blocksize failures | known affected: 14 known not affected: 262 | 2026-09-29T20:57:16+00:00 | Vulnerability · Source |
| CVE-2026-97487 | redhat_vex | kernel: jfs: handle set_blocksize failures | known affected: 14 known not affected: 262 | 2026-09-29T20:57:15+00:00 | Vulnerability · Source |
| CVE-2026-102620 | redhat_vex | poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts | known not affected: 1 | 2026-09-29T20:55:59+00:00 | Vulnerability · Source |
| CVE-2026-97935 | redhat_vex | kernel: tracing: Set the trace clock before registering the histogram trigger | known affected: 234 known not affected: 42 | 2026-09-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2026-102325 | redhat_vex | chromium-browser: chromium-browser: information disclosure via uninitialized resource in Skia | known not affected: 1 | 2026-09-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2026-97934 | redhat_vex | kernel: tracing: Fix memory corruption from a "STACKTRACE" histogram key | known affected: 76 known not affected: 200 | 2026-09-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2026-102310 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in Payments | known not affected: 1 | 2026-09-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2026-97933 | redhat_vex | kernel: tracing: Take trace_array reference when opening a tracer options file | known affected: 76 known not affected: 200 | 2026-09-29T20:55:52+00:00 | Vulnerability · Source |
| CVE-2026-97932 | redhat_vex | kernel: tracing: Don't dereference trace_event_file in deferred trigger free | known not affected: 276 | 2026-09-29T20:55:47+00:00 | Vulnerability · Source |
| CVE-2026-97931 | redhat_vex | kernel: ALSA: us122l: Prevent write upgrades for read mappings | known affected: 276 | 2026-09-29T20:55:44+00:00 | Vulnerability · Source |
| CVE-2026-97930 | redhat_vex | kernel: ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf | known affected: 276 | 2026-09-29T20:55:40+00:00 | Vulnerability · Source |
| CVE-2026-97490 | redhat_vex | kernel: affs: handle set_blocksize failures | known not affected: 276 | 2026-09-29T20:55:36+00:00 | Vulnerability · Source |
| CVE-2026-97489 | redhat_vex | kernel: bfs: handle set_blocksize failures | known not affected: 276 | 2026-09-29T20:55:30+00:00 | Vulnerability · Source |
| CVE-2026-94572 | redhat_vex | openstack-octavia: octavia: HAProxy configuration injection via tls_ciphers on pools and listeners | known affected: 27 | 2026-09-29T20:55:27+00:00 | Vulnerability · Source |
| CVE-2026-94571 | redhat_vex | openstack-octavia: octavia: HAProxy configuration injection via L7 policy redirect_url and redirect_prefix | known affected: 27 | 2026-09-29T20:55:23+00:00 | Vulnerability · Source |
| CVE-2026-93492 | redhat_vex | io.netty/netty-codec-http2: Netty: HTTP/2 HpackEncoder DoS with large table size | known affected: 10 known not affected: 1 | 2026-09-29T20:55:16+00:00 | Vulnerability · Source |
| CVE-2026-102496 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures | known affected: 13 known not affected: 5 | 2026-09-29T20:55:12+00:00 | Vulnerability · Source |
| CVE-2026-102495 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing | known affected: 13 known not affected: 5 | 2026-09-29T20:55:09+00:00 | Vulnerability · Source |
| CVE-2026-102323 | redhat_vex | chromium-browser: chromium-browser: Type confusion in V8 | known not affected: 1 | 2026-09-29T20:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102326 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via type confusion in V8 | known not affected: 1 | 2026-09-29T20:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102328 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via type confusion in V8 | known not affected: 1 | 2026-09-29T20:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102324 | redhat_vex | chromium-browser: chromium-browser: Use after free in PictureInPicture | known not affected: 1 | 2026-09-29T20:55:06+00:00 | Vulnerability · Source |
| CVE-2026-102319 | redhat_vex | chromium-browser: chromium-browser: Information disclosure via uninitialized GPU resource | known not affected: 1 | 2026-09-29T20:55:02+00:00 | Vulnerability · Source |
| CVE-2026-102316 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T20:55:01+00:00 | Vulnerability · Source |
| CVE-2026-102315 | redhat_vex | chromium-browser: chromium-browser: Information disclosure outside sandbox via uninitialized resource | known not affected: 1 | 2026-09-29T20:54:58+00:00 | Vulnerability · Source |
| CVE-2026-102306 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution in Bluetooth via crafted HTML page | known not affected: 1 | 2026-09-29T20:54:58+00:00 | Vulnerability · Source |
| CVE-2026-102313 | redhat_vex | chromium-browser: chromium-browser: Information disclosure via uninitialized resource in ANGLE | known not affected: 1 | 2026-09-29T20:54:57+00:00 | Vulnerability · Source |
| CVE-2026-102308 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Views | known not affected: 1 | 2026-09-29T20:54:57+00:00 | Vulnerability · Source |
| CVE-2026-102307 | redhat_vex | chromium-browser: chromium-browser: information disclosure via crafted HTML page | known not affected: 1 | 2026-09-29T20:54:56+00:00 | Vulnerability · Source |
| CVE-2026-102304 | redhat_vex | chromium-browser: chromium-browser: Use after free in Passwords | known not affected: 1 | 2026-09-29T20:54:51+00:00 | Vulnerability · Source |
| CVE-2026-102299 | redhat_vex | chromium-browser: chromium-browser: Type confusion in V8 | known not affected: 1 | 2026-09-29T20:54:51+00:00 | Vulnerability · Source |
| CVE-2026-102253 | redhat_vex | iperf3: iperf3: Denial of Service via UDP receive worker infinite loop | known affected: 9 | 2026-09-29T20:54:46+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 225 known not affected: 4 | 2026-09-29T20:54:44+00:00 | Vulnerability · Source |
| CVE-2026-76835 | redhat_vex | github.com/oauth2-proxy/oauth2-proxy: OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set | known affected: 2 known not affected: 3 | 2026-09-29T20:54:35+00:00 | Vulnerability · Source |
| CVE-2026-56859 | redhat_vex | encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue | fixed: 5031 known affected: 269 known not affected: 3160 | 2026-09-29T20:54:18+00:00 | Vulnerability · Source |
| CVE-2026-56860 | redhat_vex | net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution | fixed: 5541 known affected: 289 known not affected: 2947 | 2026-09-29T20:54:17+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 5482 known affected: 208 known not affected: 2554 | 2026-09-29T20:54:16+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 1067 known affected: 219 known not affected: 6358 | 2026-09-29T20:54:16+00:00 | Vulnerability · Source |
| CVE-2026-56858 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via pathological input | fixed: 5210 known affected: 236 known not affected: 2705 | 2026-09-29T20:54:16+00:00 | Vulnerability · Source |
| CVE-2026-13732 | redhat_vex | gdb: gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF | fixed: 74 known affected: 7 | 2026-09-29T20:41:09+00:00 | Vulnerability · Source |
| CVE-2026-40553 | redhat_vex | gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service | fixed: 33 known affected: 3 known not affected: 4 | 2026-09-29T20:41:04+00:00 | Vulnerability · Source |
| CVE-2026-40468 | redhat_vex | gawk: gawk: Memory corruption via integer overflow | fixed: 33 known affected: 7 | 2026-09-29T20:41:04+00:00 | Vulnerability · Source |
| CVE-2026-40467 | redhat_vex | gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c | fixed: 33 known affected: 6 | 2026-09-29T20:41:04+00:00 | Vulnerability · Source |
| CVE-2026-32281 | redhat_vex | crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation | fixed: 2312 known affected: 168 known not affected: 2210 | 2026-09-29T20:29:33+00:00 | Vulnerability · Source |
| CVE-2026-102320 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in CORS | known not affected: 1 | 2026-09-29T20:26:29+00:00 | Vulnerability · Source |
| CVE-2026-102300 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in WebGPU | known not affected: 1 | 2026-09-29T20:26:27+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 2045 known affected: 388 known not affected: 25137 under investigation: 496 | 2026-09-29T20:25:09+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2952 known affected: 151 known not affected: 16580 | 2026-09-29T20:23:58+00:00 | Vulnerability · Source |