VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293833 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-15270 | redhat_vex | fontforge: FontForge: Remote Code Execution via malicious SFD file parsing | fixed: 90 known affected: 2 known not affected: 3 | 2026-07-08T22:16:07+00:00 | Vulnerability · Source |
| CVE-2025-12495 | redhat_vex | OpenEXR: OpenEXR: Remote Code Execution via malicious EXR file parsing | known affected: 3 known not affected: 9 | 2026-07-08T22:15:15+00:00 | Vulnerability · Source |
| CVE-2025-15279 | redhat_vex | fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing | fixed: 112 known affected: 2 | 2026-07-08T22:11:37+00:00 | Vulnerability · Source |
| CVE-2026-0810 | redhat_vex | gix-date: gix-date: Undefined behavior due to invalid string generation | known affected: 7 known not affected: 51 | 2026-07-08T22:07:36+00:00 | Vulnerability · Source |
| CVE-2025-15538 | redhat_vex | assimp: Assimp: Use-after-free vulnerability in FindUVChannels allows local impact | known not affected: 8 | 2026-07-08T22:07:35+00:00 | Vulnerability · Source |
| CVE-2025-14946 | redhat_vex | libnbd: libnbd: Arbitrary code execution via SSH argument injection through a malicious URI | known affected: 7 known not affected: 30 | 2026-07-08T22:07:24+00:00 | Vulnerability · Source |
| CVE-2025-12840 | redhat_vex | OpenEXR: OpenEXR: Remote Code Execution via EXR file parsing heap-based buffer overflow | known affected: 3 known not affected: 9 | 2026-07-08T22:07:02+00:00 | Vulnerability · Source |
| CVE-2025-12839 | redhat_vex | OpenEXR: OpenEXR: Remote Code Execution via Heap-based Buffer Overflow in EXR File Parsing | known affected: 3 known not affected: 9 | 2026-07-08T22:06:37+00:00 | Vulnerability · Source |
| CVE-2025-61686 | redhat_vex | react-router: React Router has Path Traversal in File Session Storage | known not affected: 173 | 2026-07-08T22:05:25+00:00 | Vulnerability · Source |
| CVE-2025-15269 | redhat_vex | fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing | fixed: 112 known affected: 2 | 2026-07-08T22:05:18+00:00 | Vulnerability · Source |
| CVE-2026-46292 | redhat_vex | kernel: pmdomain: core: Fix detach procedure for virtual devices in genpd | known affected: 184 known not affected: 90 | 2026-07-08T22:04:12+00:00 | Vulnerability · Source |
| CVE-2026-47210 | redhat_vex | vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support. | fixed: 1 known not affected: 4 under investigation: 1 | 2026-07-08T21:53:54+00:00 | Vulnerability · Source |
| CVE-2026-47208 | redhat_vex | vm2: vm2: Sandbox Breakout Using Promise Species | fixed: 2 known affected: 1 known not affected: 6 | 2026-07-08T21:53:51+00:00 | Vulnerability · Source |
| CVE-2026-24781 | redhat_vex | vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function | fixed: 2 known affected: 1 known not affected: 6 | 2026-07-08T21:41:02+00:00 | Vulnerability · Source |
| CVE-2026-46284 | redhat_vex | kernel: mm/hugetlb: fix early boot crash on parameters without '=' separator | known affected: 14 known not affected: 260 | 2026-07-08T21:37:53+00:00 | Vulnerability · Source |
| CVE-2026-3219 | redhat_vex | pip: pip: Incorrect file installation due to improper archive handling | fixed: 2 known affected: 114 | 2026-07-08T21:37:04+00:00 | Vulnerability · Source |
| CVE-2025-68151 | redhat_vex | github.com/coredns/coredns/core/dnsserver: CoreDNS DoS via unbounded connections and oversized messages | fixed: 16 known affected: 1 known not affected: 84 | 2026-07-08T20:58:27+00:00 | Vulnerability · Source |
| CVE-2025-47950 | redhat_vex | coredns: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification | fixed: 20 known not affected: 65 | 2026-07-08T20:58:15+00:00 | Vulnerability · Source |
| CVE-2026-26018 | redhat_vex | github.com/coredns/coredns: CoreDNS: Denial of Service vulnerability due to predictable pseudo-random number generation | fixed: 20 known affected: 1 known not affected: 80 | 2026-07-08T20:57:01+00:00 | Vulnerability · Source |
| CVE-2026-26017 | redhat_vex | github.com/coredns/coredns: CoreDNS: DNS access control bypass due to plugin execution order flaw | fixed: 20 known affected: 1 known not affected: 80 | 2026-07-08T20:56:57+00:00 | Vulnerability · Source |
| CVE-2026-52936 | redhat_vex | kernel: crypto: jitterentropy - replace long-held spinlock with mutex | known affected: 260 known not affected: 14 | 2026-07-08T20:44:45+00:00 | Vulnerability · Source |
| CVE-2026-52937 | redhat_vex | kernel: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | known affected: 232 known not affected: 42 | 2026-07-08T19:35:43+00:00 | Vulnerability · Source |
| CVE-2026-52941 | redhat_vex | kernel: net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | known affected: 232 known not affected: 42 | 2026-07-08T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-52921 | redhat_vex | kernel: netfilter: ipset: stop hash:* range iteration at end | known affected: 274 | 2026-07-08T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-52940 | redhat_vex | kernel: tun: zero the whole vnet header in tun_put_user() | known affected: 90 known not affected: 184 | 2026-07-08T19:28:53+00:00 | Vulnerability · Source |
| CVE-2026-52939 | redhat_vex | kernel: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion | known affected: 14 known not affected: 260 | 2026-07-08T19:28:52+00:00 | Vulnerability · Source |
| CVE-2026-46295 | redhat_vex | kernel: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty | known affected: 90 known not affected: 184 | 2026-07-08T19:28:50+00:00 | Vulnerability · Source |
| CVE-2026-46294 | redhat_vex | kernel: dm: fix a buffer overflow in ioctl processing | known affected: 274 | 2026-07-08T19:28:49+00:00 | Vulnerability · Source |
| CVE-2026-40253 | redhat_vex | openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects | fixed: 473 known affected: 12 known not affected: 16 | 2026-07-08T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-12856 | redhat_vex | vscode-java: vscode: Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension | fixed: 4 known not affected: 61 | 2026-07-08T17:15:04+00:00 | Vulnerability · Source |
| CVE-2026-53251 | redhat_vex | kernel: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync | known affected: 184 known not affected: 90 | 2026-07-08T17:05:08+00:00 | Vulnerability · Source |
| CVE-2026-53258 | redhat_vex | kernel: wifi: fix leak if split 6 GHz scanning fails | known affected: 246 known not affected: 28 | 2026-07-08T16:55:13+00:00 | Vulnerability · Source |
| CVE-2026-53252 | redhat_vex | kernel: Bluetooth: fix memory leak in error path of hci_alloc_dev() | known affected: 198 known not affected: 76 | 2026-07-08T16:55:12+00:00 | Vulnerability · Source |
| CVE-2026-53255 | redhat_vex | kernel: Bluetooth: MGMT: validate advertising TLV before type checks | known affected: 260 known not affected: 14 | 2026-07-08T16:55:06+00:00 | Vulnerability · Source |
| CVE-2026-53257 | redhat_vex | kernel: wifi: cfg80211: enforce HE/EHT cap/oper consistency | known affected: 198 known not affected: 76 | 2026-07-08T16:55:01+00:00 | Vulnerability · Source |
| CVE-2026-46329 | redhat_vex | kernel: erofs: handle end of filesystem properly for file-backed mounts | known affected: 76 known not affected: 198 | 2026-07-08T16:25:36+00:00 | Vulnerability · Source |
| CVE-2026-52925 | redhat_vex | kernel: vrf: Fix a potential NPD when removing a port from a VRF | known affected: 232 known not affected: 42 | 2026-07-08T15:35:21+00:00 | Vulnerability · Source |
| CVE-2026-52928 | redhat_vex | kernel: af_unix: Reject SIOCATMARK on non-stream sockets | known affected: 90 known not affected: 184 | 2026-07-08T15:35:21+00:00 | Vulnerability · Source |
| CVE-2026-52930 | redhat_vex | kernel: ipc/shm: serialize orphan cleanup with shm_nattch updates | known affected: 274 | 2026-07-08T15:35:10+00:00 | Vulnerability · Source |
| CVE-2026-44405 | redhat_vex | paramiko: Paramiko: Data integrity could be compromised due to SHA-1 algorithm use | known affected: 46 known not affected: 1 under investigation: 10 | 2026-07-08T15:30:20+00:00 | Vulnerability · Source |
| CVE-2025-59303 | redhat_vex | haproxy: HAProxy Kubernetes Ingress Controller: Secret Leak via Config Snippets | known affected: 10 known not affected: 7 | 2026-07-08T15:25:32+00:00 | Vulnerability · Source |
| CVE-2026-46283 | redhat_vex | kernel: tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() | known affected: 90 known not affected: 184 | 2026-07-08T15:20:56+00:00 | Vulnerability · Source |
| CVE-2026-46279 | redhat_vex | kernel: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization | known affected: 90 known not affected: 184 | 2026-07-08T15:09:05+00:00 | Vulnerability · Source |
| CVE-2026-46313 | redhat_vex | kernel: media: intel/ipu6: fix error pointer dereference | known affected: 76 known not affected: 198 | 2026-07-08T15:09:02+00:00 | Vulnerability · Source |
| CVE-2025-53859 | redhat_vex | nginx: NGINX ngx_mail_smtp_module vulnerability | fixed: 4 known affected: 76 | 2026-07-08T15:09:00+00:00 | Vulnerability · Source |
| CVE-2026-46302 | redhat_vex | kernel: selinux: allow multiple opens of /sys/fs/selinux/policy | known affected: 274 | 2026-07-08T15:08:57+00:00 | Vulnerability · Source |
| CVE-2026-46298 | redhat_vex | kernel: pseries/papr-hvpipe: Fix race with interrupt handler | known affected: 184 known not affected: 90 | 2026-07-08T15:08:56+00:00 | Vulnerability · Source |
| CVE-2025-71315 | redhat_vex | kernel: drm/vkms: Convert to DRM's vblank timer | known affected: 232 known not affected: 42 | 2026-07-08T15:08:52+00:00 | Vulnerability · Source |
| CVE-2025-12817 | redhat_vex | postgresql: CREATE STATISTICS does not check for schema CREATE privilege | fixed: 2933 known affected: 46 known not affected: 3 | 2026-07-08T15:08:31+00:00 | Vulnerability · Source |
| CVE-2026-46315 | redhat_vex | kernel: io_uring/waitid: clear waitid info before copying it to userspace | known affected: 184 known not affected: 90 | 2026-07-08T15:08:30+00:00 | Vulnerability · Source |