VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293999 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53461 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds heap write in ICON decoder | known affected: 7 known not affected: 7 | 2026-06-30T03:51:11+00:00 | Vulnerability · Source |
| CVE-2026-53460 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via missing memory request check | fixed: 51 known affected: 7 | 2026-06-30T03:51:09+00:00 | Vulnerability · Source |
| CVE-2026-53277 | redhat_vex | kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation | known affected: 76 known not affected: 198 | 2026-06-30T03:51:01+00:00 | Vulnerability · Source |
| CVE-2026-53203 | redhat_vex | kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl | known affected: 184 known not affected: 90 | 2026-06-30T03:50:59+00:00 | Vulnerability · Source |
| CVE-2026-53145 | redhat_vex | kernel: drm/gem: Try to fix change_handle ioctl, attempt 4 | known affected: 260 under investigation: 14 | 2026-06-30T03:50:37+00:00 | Vulnerability · Source |
| CVE-2026-53091 | redhat_vex | kernel: net: pull headers in qdisc_pkt_len_segs_init() | known affected: 260 under investigation: 14 | 2026-06-30T03:50:32+00:00 | Vulnerability · Source |
| CVE-2026-52952 | redhat_vex | kernel: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset | known affected: 76 known not affected: 198 | 2026-06-30T03:49:44+00:00 | Vulnerability · Source |
| CVE-2026-52951 | redhat_vex | kernel: drm/xe/dma-buf: handle empty bo and UAF races | known affected: 184 known not affected: 90 | 2026-06-30T03:49:42+00:00 | Vulnerability · Source |
| CVE-2026-52845 | redhat_vex | github.com/caddyserver/caddy: Caddy: Remote client can inject or override identity headers via header normalization | known not affected: 1 | 2026-06-30T03:49:29+00:00 | Vulnerability · Source |
| CVE-2026-49759 | redhat_vex | erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk | known not affected: 41 | 2026-06-30T03:48:48+00:00 | Vulnerability · Source |
| CVE-2026-49468 | redhat_vex | litellm: LiteLLM: Authentication Bypass via Host Header Injection | known affected: 6 | 2026-06-30T03:48:47+00:00 | Vulnerability · Source |
| CVE-2026-49218 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted DCM image with invalid dimensions | fixed: 51 known affected: 7 | 2026-06-30T03:48:43+00:00 | Vulnerability · Source |
| CVE-2026-48818 | redhat_vex | starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | fixed: 6 known not affected: 68 | 2026-06-30T03:48:35+00:00 | Vulnerability · Source |
| CVE-2026-48748 | redhat_vex | netty: Netty: Denial of Service due to memory exhaustion in HTTP/3 codec | under investigation: 1 | 2026-06-30T03:48:32+00:00 | Vulnerability · Source |
| CVE-2026-47220 | redhat_vex | envoy: Envoy: Denial of Service via missing host header in specific logging configurations | known not affected: 2 | 2026-06-30T03:48:07+00:00 | Vulnerability · Source |
| CVE-2026-46523 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MSL image leading to heap-use-after-free | fixed: 51 known affected: 7 | 2026-06-30T03:47:51+00:00 | Vulnerability · Source |
| CVE-2026-46522 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MIFF file | fixed: 51 known affected: 7 | 2026-06-30T03:47:50+00:00 | Vulnerability · Source |
| CVE-2026-46520 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write when processing multiple images | fixed: 51 known affected: 7 | 2026-06-30T03:47:47+00:00 | Vulnerability · Source |
| CVE-2026-46195 | redhat_vex | kernel: smb: client: validate dacloffset before building DACL pointers | fixed: 453 known affected: 98 known not affected: 42 | 2026-06-30T03:47:14+00:00 | Vulnerability · Source |
| CVE-2026-46125 | redhat_vex | kernel: wifi: mac80211: remove station if connection prep fails | fixed: 1880 known affected: 22 known not affected: 28 under investigation: 14 | 2026-06-30T03:46:58+00:00 | Vulnerability · Source |
| CVE-2026-45972 | redhat_vex | kernel: smb: client: fix potential UAF and double free in smb2_open_file() | known affected: 184 known not affected: 90 | 2026-06-30T03:46:40+00:00 | Vulnerability · Source |
| CVE-2026-45898 | redhat_vex | kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list | fixed: 1224 known affected: 22 known not affected: 76 under investigation: 14 | 2026-06-30T03:46:34+00:00 | Vulnerability · Source |
| CVE-2026-45696 | redhat_vex | OpenEXR: OpenEXR: Denial of Service and potential information disclosure via crafted EXR file | known affected: 3 known not affected: 9 | 2026-06-30T03:46:15+00:00 | Vulnerability · Source |
| CVE-2026-45664 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder | fixed: 51 known affected: 7 | 2026-06-30T03:46:11+00:00 | Vulnerability · Source |
| CVE-2026-45591 | redhat_vex | dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption | fixed: 1441 known not affected: 2 | 2026-06-30T03:46:10+00:00 | Vulnerability · Source |
| CVE-2026-45490 | redhat_vex | dotnet: .NET SDK workload elevate: arbitrary file creation/truncation via LogFile named pipe. | known not affected: 133 | 2026-06-30T03:46:07+00:00 | Vulnerability · Source |
| CVE-2026-45359 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Invalid Connected-Components Value | known affected: 7 known not affected: 7 | 2026-06-30T03:46:01+00:00 | Vulnerability · Source |
| CVE-2026-45031 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder | fixed: 51 known not affected: 7 | 2026-06-30T03:45:45+00:00 | Vulnerability · Source |
| CVE-2026-44894 | redhat_vex | netty-codec-classes-quic: Netty: Denial of Service amplification via improper QUIC token validation | known affected: 1 | 2026-06-30T03:45:34+00:00 | Vulnerability · Source |
| CVE-2026-44484 | redhat_vex | pytorch-lightning: PyTorch Lightning: Credential harvesting via introduced functionality | known not affected: 11 | 2026-06-30T03:44:44+00:00 | Vulnerability · Source |
| CVE-2026-5201 | redhat_vex | gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image | fixed: 812 known affected: 5 known not affected: 11 | 2026-06-30T03:44:02+00:00 | Vulnerability · Source |
| CVE-2026-5081 | redhat_vex | Apache::Session::Generate::ModUniqueId: Perl: mod_unique_id: Apache HTTP Server: Apache::Session::Generate::ModUniqueId: Session ID predictability allows unauthorized access | known not affected: 1 | 2026-06-30T03:43:55+00:00 | Vulnerability · Source |
| CVE-2026-4802 | redhat_vex | cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI | fixed: 296 known not affected: 7 | 2026-06-30T03:43:46+00:00 | Vulnerability · Source |
| CVE-2026-4775 | redhat_vex | libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing | fixed: 620 known affected: 4 | 2026-06-30T03:43:39+00:00 | Vulnerability · Source |
| CVE-2026-4636 | redhat_vex | keycloak: Keycloak: UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. | fixed: 20 | 2026-06-30T03:43:28+00:00 | Vulnerability · Source |
| CVE-2026-4660 | redhat_vex | go-getter: go-getter: Arbitrary file reads via maliciously crafted URL | fixed: 1 known affected: 2 known not affected: 1 | 2026-06-30T03:43:27+00:00 | Vulnerability · Source |
| CVE-2026-4634 | redhat_vex | keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters | fixed: 20 | 2026-06-30T03:43:22+00:00 | Vulnerability · Source |
| CVE-2026-4525 | redhat_vex | Vault: Vault: Information disclosure of authentication tokens via incorrect header handling | known affected: 6 known not affected: 7 | 2026-06-30T03:43:11+00:00 | Vulnerability · Source |
| CVE-2026-4519 | redhat_vex | python: Python: Command-line option injection in webbrowser.open() via crafted URLs | fixed: 1772 known not affected: 96 | 2026-06-30T03:43:08+00:00 | Vulnerability · Source |
| CVE-2026-56379 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection | fixed: 51 known affected: 7 | 2026-06-30T03:42:54+00:00 | Vulnerability · Source |
| CVE-2026-9795 | redhat_vex | keycloak: Keycloak: Privilege escalation via improper scope mapping enforcement | fixed: 20 | 2026-06-30T03:42:14+00:00 | Vulnerability · Source |
| CVE-2026-9099 | redhat_vex | keycloak: Group-Admin Escalation to Realm-Admin | fixed: 20 | 2026-06-30T03:42:06+00:00 | Vulnerability · Source |
| CVE-2026-9086 | redhat_vex | keycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive URI validation bypass | fixed: 20 | 2026-06-30T03:42:02+00:00 | Vulnerability · Source |
| CVE-2026-8390 | redhat_vex | firefox: Use-after-free in the JavaScript: WebAssembly component | known not affected: 12 | 2026-06-30T03:41:49+00:00 | Vulnerability · Source |
| CVE-2026-7507 | redhat_vex | org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover | fixed: 20 | 2026-06-30T03:41:37+00:00 | Vulnerability · Source |
| CVE-2026-7504 | redhat_vex | org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak | fixed: 20 | 2026-06-30T03:41:34+00:00 | Vulnerability · Source |
| CVE-2026-7323 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 | fixed: 273 known affected: 8 | 2026-06-30T03:41:26+00:00 | Vulnerability · Source |
| CVE-2026-7263 | redhat_vex | php: denial of service via DOMNode::C14N() | fixed: 201 known not affected: 253 | 2026-06-30T03:41:19+00:00 | Vulnerability · Source |
| CVE-2026-6951 | redhat_vex | simple-git: simple-git: Remote Code Execution due to incomplete fix bypass | known affected: 15 known not affected: 6 | 2026-06-30T03:41:10+00:00 | Vulnerability · Source |
| CVE-2026-6918 | redhat_vex | Eclipse Open9J: Denial of Service in JITServer via crafted TCP message | fixed: 51 | 2026-06-30T03:41:06+00:00 | Vulnerability · Source |