VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305792 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-84124 | redhat_vex | firefox: Use-after-free in the DOM: Core & HTML component | fixed: 238 known affected: 6 known not affected: 2 | 2026-10-08T08:03:32+00:00 | Vulnerability · Source |
| CVE-2026-84121 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Security component | fixed: 238 known affected: 8 | 2026-10-08T08:03:27+00:00 | Vulnerability · Source |
| CVE-2026-84119 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Navigation component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-84120 | redhat_vex | firefox: Use-after-free in the Audio/Video component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-16365 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Workers component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-75874 | redhat_vex | firefox: thunderbird: Sandbox escape in the Remote Settings Client component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-106063 | redhat_vex | GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensions | known affected: 36 | 2026-10-08T07:53:49+00:00 | Vulnerability · Source |
| CVE-2026-106061 | redhat_vex | gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted file | known affected: 36 | 2026-10-08T07:53:44+00:00 | Vulnerability · Source |
| CVE-2026-86246 | redhat_vex | tomcat-native: Apache Tomcat Native: Weakened TLS connection security via insecure default configuration | known affected: 3 | 2026-10-08T07:53:29+00:00 | Vulnerability · Source |
| CVE-2026-106062 | redhat_vex | gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file | known affected: 36 | 2026-10-08T07:53:25+00:00 | Vulnerability · Source |
| CVE-2023-54404 | redhat_vex | zod: zod: Denial of service via unbounded array validation | known affected: 57 known not affected: 62 | 2026-10-08T07:52:40+00:00 | Vulnerability · Source |
| CVE-2026-74582 | redhat_vex | kernel: packet: use consistent hard_header_len in non-ring send paths | fixed: 1368 known affected: 185 known not affected: 43 | 2026-10-08T07:16:31+00:00 | Vulnerability · Source |
| CVE-2026-107449 | redhat_vex | heimdall: heimdall: Information disclosure via server-side request forgery | known not affected: 1 | 2026-10-08T07:06:29+00:00 | Vulnerability · Source |
| CVE-2026-104074 | redhat_vex | coturn: coturn: Information disclosure via uninitialized memory in error response | known not affected: 1 | 2026-10-08T07:02:34+00:00 | Vulnerability · Source |
| CVE-2026-102408 | redhat_vex | elasticsearch: elasticsearch: Denial of Service via crafted regular expressions in ES|QL CHUNK function | known affected: 1 known not affected: 2 | 2026-10-08T06:48:41+00:00 | Vulnerability · Source |
| CVE-2026-86243 | redhat_vex | tomcat-native: Apache Tomcat Native: Denial of Service via buffer over-read during TLS handshake | known affected: 3 | 2026-10-08T06:48:31+00:00 | Vulnerability · Source |
| CVE-2026-102404 | redhat_vex | elasticsearch: Elasticsearch: Denial of Service via uncontrolled memory consumption from crafted queries | known affected: 1 known not affected: 2 | 2026-10-08T06:17:49+00:00 | Vulnerability · Source |
| CVE-2026-106510 | redhat_vex | plugin-techdocs-node: plugin-techdocs-node: Arbitrary code execution via crafted mkdocs configuration | known affected: 3 | 2026-10-08T06:03:33+00:00 | Vulnerability · Source |
| CVE-2026-93374 | redhat_vex | chromium-browser: chromium: use-after-free in Dawn on Android | known not affected: 1 | 2026-10-08T06:03:27+00:00 | Vulnerability · Source |
| CVE-2026-106556 | redhat_vex | plugin-techdocs-node: plugin-techdocs-node: arbitrary command execution via configuration sanitization bypass | known affected: 3 | 2026-10-08T05:50:55+00:00 | Vulnerability · Source |
| CVE-2026-93373 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted extension | known not affected: 1 | 2026-10-08T05:20:24+00:00 | Vulnerability · Source |
| CVE-2026-93372 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in WebGL | known not affected: 1 | 2026-10-08T05:20:23+00:00 | Vulnerability · Source |
| CVE-2026-106308 | redhat_vex | chromium-browser: Incorrect reference resolution in Autofill | known not affected: 1 | 2026-10-08T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-106215 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-87022 | redhat_vex | tomcat: Apache Tomcat: WebSocket message smuggling via improper length handling | fixed: 42 known affected: 90 known not affected: 1 | 2026-10-08T04:16:25+00:00 | Vulnerability · Source |
| CVE-2026-77762 | redhat_vex | tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulation | fixed: 42 known affected: 87 known not affected: 4 | 2026-10-08T04:16:16+00:00 | Vulnerability · Source |
| CVE-2026-77756 | redhat_vex | tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of service | fixed: 42 known affected: 87 known not affected: 4 | 2026-10-08T04:16:10+00:00 | Vulnerability · Source |
| CVE-2026-106347 | redhat_vex | chromium-browser: Use after free in Track | known not affected: 1 | 2026-10-08T04:16:09+00:00 | Vulnerability · Source |
| CVE-2026-75973 | redhat_vex | tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfiguration | fixed: 42 known affected: 90 known not affected: 1 | 2026-10-08T04:16:09+00:00 | Vulnerability · Source |
| CVE-2026-78437 | redhat_vex | tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 request | fixed: 42 known affected: 61 known not affected: 30 | 2026-10-08T04:16:08+00:00 | Vulnerability · Source |
| CVE-2026-107183 | redhat_vex | llama.cpp: llama.cpp: Arbitrary code execution via crafted completion request | known not affected: 1 | 2026-10-08T04:12:29+00:00 | Vulnerability · Source |
| CVE-2026-106376 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:12:28+00:00 | Vulnerability · Source |
| CVE-2026-106258 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:12:27+00:00 | Vulnerability · Source |
| CVE-2026-86248 | redhat_vex | tomcat: Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled | fixed: 42 known affected: 53 known not affected: 38 | 2026-10-08T04:09:23+00:00 | Vulnerability · Source |
| CVE-2026-73581 | redhat_vex | tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists | fixed: 42 known affected: 68 known not affected: 22 | 2026-10-08T04:09:18+00:00 | Vulnerability · Source |
| CVE-2026-106366 | redhat_vex | chromium-browser: Incomplete cleanup in CustomTabs | known not affected: 1 | 2026-10-08T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-106327 | redhat_vex | chromium-browser: Incorrect authorization in Core | known not affected: 1 | 2026-10-08T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-106245 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:02:36+00:00 | Vulnerability · Source |
| CVE-2026-102322 | redhat_vex | chromium-browser: Incorrect Authorization in SiteIsolation | known not affected: 1 | 2026-10-08T04:02:35+00:00 | Vulnerability · Source |
| CVE-2026-106382 | redhat_vex | chromium-browser: Use after free in Chromecast | known not affected: 1 | 2026-10-08T03:55:53+00:00 | Vulnerability · Source |
| CVE-2026-106197 | redhat_vex | chromium-browser: Use after free in Browser | known not affected: 1 | 2026-10-08T03:55:47+00:00 | Vulnerability · Source |
| CVE-2026-88029 | redhat_vex | pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection | known affected: 33 known not affected: 2 | 2026-10-08T03:55:42+00:00 | Vulnerability · Source |
| CVE-2026-106358 | redhat_vex | chromium-browser: Use after free in Navigation | known not affected: 1 | 2026-10-08T03:55:35+00:00 | Vulnerability · Source |
| CVE-2026-105816 | redhat_vex | github.com/hashicorp/vault: Vault: Arbitrary code execution via plugin catalog entries in restored snapshots | known affected: 3 | 2026-10-08T03:31:59+00:00 | Vulnerability · Source |
| CVE-2026-89407 | redhat_vex | com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking | known affected: 141 known not affected: 36 | 2026-10-08T03:22:02+00:00 | Vulnerability · Source |
| CVE-2021-29425 | redhat_vex | apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 | fixed: 250 known affected: 16 known not affected: 2195 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21342 | redhat_vex | XStream: SSRF via crafted input stream | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2020-26259 | redhat_vex | XStream: arbitrary file deletion on the local host when unmarshalling | fixed: 6 known affected: 13 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2021-21348 | redhat_vex | XStream: ReDoS vulnerability | fixed: 6 known affected: 14 known not affected: 4 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |
| CVE-2022-2596 | redhat_vex | node-fetch: Denial of Service in GitHub repository node-fetch | known not affected: 209 | 2026-10-08T03:00:00+00:00 | Vulnerability · Source |