VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305789 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-74582 | redhat_vex | kernel: packet: use consistent hard_header_len in non-ring send paths | fixed: 1368 known affected: 185 known not affected: 43 | 2026-10-08T07:16:31+00:00 | Vulnerability · Source |
| CVE-2026-107449 | redhat_vex | heimdall: heimdall: Information disclosure via server-side request forgery | known not affected: 1 | 2026-10-08T07:06:29+00:00 | Vulnerability · Source |
| CVE-2026-104074 | redhat_vex | coturn: coturn: Information disclosure via uninitialized memory in error response | known not affected: 1 | 2026-10-08T07:02:34+00:00 | Vulnerability · Source |
| CVE-2026-102408 | redhat_vex | elasticsearch: elasticsearch: Denial of Service via crafted regular expressions in ES|QL CHUNK function | known affected: 1 known not affected: 2 | 2026-10-08T06:48:41+00:00 | Vulnerability · Source |
| CVE-2026-86243 | redhat_vex | tomcat-native: Apache Tomcat Native: Denial of Service via buffer over-read during TLS handshake | known affected: 3 | 2026-10-08T06:48:31+00:00 | Vulnerability · Source |
| CVE-2026-102404 | redhat_vex | elasticsearch: Elasticsearch: Denial of Service via uncontrolled memory consumption from crafted queries | known affected: 1 known not affected: 2 | 2026-10-08T06:17:49+00:00 | Vulnerability · Source |
| CVE-2026-106510 | redhat_vex | plugin-techdocs-node: plugin-techdocs-node: Arbitrary code execution via crafted mkdocs configuration | known affected: 3 | 2026-10-08T06:03:33+00:00 | Vulnerability · Source |
| CVE-2026-93374 | redhat_vex | chromium-browser: chromium: use-after-free in Dawn on Android | known not affected: 1 | 2026-10-08T06:03:27+00:00 | Vulnerability · Source |
| CVE-2026-106556 | redhat_vex | plugin-techdocs-node: plugin-techdocs-node: arbitrary command execution via configuration sanitization bypass | known affected: 3 | 2026-10-08T05:50:55+00:00 | Vulnerability · Source |
| CVE-2026-93373 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted extension | known not affected: 1 | 2026-10-08T05:20:24+00:00 | Vulnerability · Source |
| CVE-2026-93372 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in WebGL | known not affected: 1 | 2026-10-08T05:20:23+00:00 | Vulnerability · Source |
| CVE-2026-106308 | redhat_vex | chromium-browser: Incorrect reference resolution in Autofill | known not affected: 1 | 2026-10-08T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-106215 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-87022 | redhat_vex | tomcat: Apache Tomcat: WebSocket message smuggling via improper length handling | fixed: 42 known affected: 90 known not affected: 1 | 2026-10-08T04:16:25+00:00 | Vulnerability · Source |
| CVE-2026-77762 | redhat_vex | tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulation | fixed: 42 known affected: 87 known not affected: 4 | 2026-10-08T04:16:16+00:00 | Vulnerability · Source |
| CVE-2026-77756 | redhat_vex | tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of service | fixed: 42 known affected: 87 known not affected: 4 | 2026-10-08T04:16:10+00:00 | Vulnerability · Source |
| CVE-2026-106347 | redhat_vex | chromium-browser: Use after free in Track | known not affected: 1 | 2026-10-08T04:16:09+00:00 | Vulnerability · Source |
| CVE-2026-75973 | redhat_vex | tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfiguration | fixed: 42 known affected: 90 known not affected: 1 | 2026-10-08T04:16:09+00:00 | Vulnerability · Source |
| CVE-2026-78437 | redhat_vex | tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 request | fixed: 42 known affected: 61 known not affected: 30 | 2026-10-08T04:16:08+00:00 | Vulnerability · Source |
| CVE-2026-107183 | redhat_vex | llama.cpp: llama.cpp: Arbitrary code execution via crafted completion request | known not affected: 1 | 2026-10-08T04:12:29+00:00 | Vulnerability · Source |
| CVE-2026-106376 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:12:28+00:00 | Vulnerability · Source |
| CVE-2026-106258 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:12:27+00:00 | Vulnerability · Source |
| CVE-2026-86248 | redhat_vex | tomcat: Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled | fixed: 42 known affected: 53 known not affected: 38 | 2026-10-08T04:09:23+00:00 | Vulnerability · Source |
| CVE-2026-73581 | redhat_vex | tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists | fixed: 42 known affected: 68 known not affected: 22 | 2026-10-08T04:09:18+00:00 | Vulnerability · Source |
| CVE-2026-106366 | redhat_vex | chromium-browser: Incomplete cleanup in CustomTabs | known not affected: 1 | 2026-10-08T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-106327 | redhat_vex | chromium-browser: Incorrect authorization in Core | known not affected: 1 | 2026-10-08T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-106245 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:02:36+00:00 | Vulnerability · Source |
| CVE-2026-102322 | redhat_vex | chromium-browser: Incorrect Authorization in SiteIsolation | known not affected: 1 | 2026-10-08T04:02:35+00:00 | Vulnerability · Source |
| CVE-2026-106382 | redhat_vex | chromium-browser: Use after free in Chromecast | known not affected: 1 | 2026-10-08T03:55:53+00:00 | Vulnerability · Source |
| CVE-2026-106197 | redhat_vex | chromium-browser: Use after free in Browser | known not affected: 1 | 2026-10-08T03:55:47+00:00 | Vulnerability · Source |
| CVE-2026-88029 | redhat_vex | pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection | known affected: 33 known not affected: 2 | 2026-10-08T03:55:42+00:00 | Vulnerability · Source |
| CVE-2026-106358 | redhat_vex | chromium-browser: Use after free in Navigation | known not affected: 1 | 2026-10-08T03:55:35+00:00 | Vulnerability · Source |
| CVE-2026-105816 | redhat_vex | github.com/hashicorp/vault: Vault: Arbitrary code execution via plugin catalog entries in restored snapshots | known affected: 3 | 2026-10-08T03:31:59+00:00 | Vulnerability · Source |
| CVE-2026-89407 | redhat_vex | com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking | known affected: 141 known not affected: 36 | 2026-10-08T03:22:02+00:00 | Vulnerability · Source |
| CVE-2021-29425 | redhat_vex | apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 | fixed: 250 known affected: 16 known not affected: 2195 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21342 | redhat_vex | XStream: SSRF via crafted input stream | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-26259 | redhat_vex | XStream: arbitrary file deletion on the local host when unmarshalling | fixed: 6 known affected: 13 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21348 | redhat_vex | XStream: ReDoS vulnerability | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2022-2596 | redhat_vex | node-fetch: Denial of Service in GitHub repository node-fetch | known not affected: 209 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-10735 | redhat_vex | python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS | fixed: 685 known affected: 41 known not affected: 93 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2022-36313 | redhat_vex | file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop | fixed: 1 known affected: 8 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21351 | redhat_vex | XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-26258 | redhat_vex | XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling | fixed: 6 known affected: 13 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-58264 | redhat_vex | fluidsynth: FluidSynth: Heap-based buffer overrun | known not affected: 1 | 2026-10-08T02:21:27+00:00 | Vulnerability · Source |
| CVE-2026-69249 | redhat_vex | python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | fixed: 62 known affected: 6 known not affected: 9 | 2026-10-08T02:21:27+00:00 | Vulnerability · Source |
| CVE-2026-95387 | redhat_vex | wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector | known affected: 20 | 2026-10-08T01:47:37+00:00 | Vulnerability · Source |
| CVE-2021-45949 | redhat_vex | ghostscript: heap-based buffer overflow in sampled_data_finish | known affected: 26 known not affected: 14 | 2026-10-08T01:27:19+00:00 | Vulnerability · Source |
| CVE-2015-20107 | redhat_vex | python: mailcap: findmatch() function does not sanitize the second argument | fixed: 893 known affected: 12 known not affected: 65 | 2026-10-08T01:27:19+00:00 | Vulnerability · Source |
| CVE-2026-96419 | redhat_vex | wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark | known affected: 4 known not affected: 16 | 2026-10-08T01:19:53+00:00 | Vulnerability · Source |
| CVE-2025-22037 | redhat_vex | kernel: ksmbd: fix null pointer dereference in alloc_preauth_hash() | known not affected: 275 | 2026-10-08T00:57:37+00:00 | Vulnerability · Source |