VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294017 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-65082 | redhat_vex | httpd: Apache HTTP Server: CGI environment variable override | fixed: 267 known affected: 16 known not affected: 77 | 2026-06-30T01:38:20+00:00 | Vulnerability · Source |
| CVE-2025-64524 | redhat_vex | cups-filters: cups-filters: Heap buffer overflow in rastertopclx filter may lead arbitrary code execution | known affected: 14 | 2026-06-30T01:38:15+00:00 | Vulnerability · Source |
| CVE-2025-64183 | redhat_vex | openexr: use after free in PyObject_StealAttrString | known not affected: 18 | 2026-06-30T01:38:06+00:00 | Vulnerability · Source |
| CVE-2025-64182 | redhat_vex | openexr: buffer overflow in PyOpenEXR_old's channels() and channel() | known not affected: 18 | 2026-06-30T01:38:04+00:00 | Vulnerability · Source |
| CVE-2025-6491 | redhat_vex | php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix | fixed: 1115 known affected: 106 | 2026-06-30T01:38:01+00:00 | Vulnerability · Source |
| CVE-2025-6493 | redhat_vex | codemirror: CodeMirror Markdown Regex Complexity Vulnerability | known not affected: 28 | 2026-06-30T01:38:01+00:00 | Vulnerability · Source |
| CVE-2025-6430 | redhat_vex | firefox: thunderbird: Content-Disposition header ignored when a file is included in an embed or object tag | fixed: 253 known affected: 8 | 2026-06-30T01:37:57+00:00 | Vulnerability · Source |
| CVE-2025-6429 | redhat_vex | firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com | fixed: 253 known affected: 8 | 2026-06-30T01:37:52+00:00 | Vulnerability · Source |
| CVE-2025-6428 | redhat_vex | firefox: Firefox for Android opened URLs specified in a link querystring parameter | known not affected: 12 | 2026-06-30T01:35:19+00:00 | Vulnerability · Source |
| CVE-2025-6427 | redhat_vex | firefox: connect-src Content Security Policy restriction could be bypassed | known not affected: 12 | 2026-06-30T01:35:16+00:00 | Vulnerability · Source |
| CVE-2025-6426 | redhat_vex | firefox: thunderbird: No warning when opening executable terminal files on macOS | known not affected: 23 | 2026-06-30T01:35:15+00:00 | Vulnerability · Source |
| CVE-2025-6425 | redhat_vex | firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID | fixed: 253 known affected: 8 | 2026-06-30T01:35:12+00:00 | Vulnerability · Source |
| CVE-2025-68331 | redhat_vex | kernel: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer | known affected: 184 known not affected: 90 | 2026-06-30T01:35:07+00:00 | Vulnerability · Source |
| CVE-2025-68324 | redhat_vex | kernel: Linux kernel: Denial of Service via use-after-free in IMM SCSI host adapter | known not affected: 274 | 2026-06-30T01:34:53+00:00 | Vulnerability · Source |
| CVE-2025-68237 | redhat_vex | kernel: mtdchar: fix integer overflow in read/write ioctls | known affected: 90 known not affected: 184 | 2026-06-30T01:34:47+00:00 | Vulnerability · Source |
| CVE-2025-68242 | redhat_vex | kernel: NFS: Fix LTP test failures when timestamps are delegated | known affected: 198 known not affected: 76 | 2026-06-30T01:34:31+00:00 | Vulnerability · Source |
| CVE-2025-68228 | redhat_vex | kernel: drm/plane: Fix create_in_format_blob() return value | known affected: 184 known not affected: 90 | 2026-06-30T01:34:29+00:00 | Vulnerability · Source |
| CVE-2026-56788 | redhat_vex | rtklib: RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri | known not affected: 1 | 2026-06-30T01:34:29+00:00 | Vulnerability · Source |
| CVE-2025-68293 | redhat_vex | kernel: mm/huge_memory: fix NULL pointer deference when splitting folio | known affected: 76 known not affected: 198 | 2026-06-30T01:34:25+00:00 | Vulnerability · Source |
| CVE-2025-68257 | redhat_vex | kernel: comedi: check device's attached status in compat ioctls | known not affected: 274 | 2026-06-30T01:33:52+00:00 | Vulnerability · Source |
| CVE-2025-68231 | redhat_vex | kernel: mm/mempool: fix poisoning order>0 pages with HIGHMEM | known affected: 246 known not affected: 28 | 2026-06-30T01:33:45+00:00 | Vulnerability · Source |
| CVE-2025-68282 | redhat_vex | kernel: Linux kernel: Use-after-free in USB gadget driver due to race condition during teardown | known affected: 184 known not affected: 90 | 2026-06-30T01:33:41+00:00 | Vulnerability · Source |
| CVE-2025-40011 | redhat_vex | kernel: drm/gma500: Fix null dereference in hdmi teardown | known affected: 274 | 2026-06-30T01:29:00+00:00 | Vulnerability · Source |
| CVE-2025-40009 | redhat_vex | kernel: fs/proc/task_mmu: check p->vec_buf for NULL | known affected: 90 known not affected: 184 | 2026-06-30T01:28:57+00:00 | Vulnerability · Source |
| CVE-2025-40007 | redhat_vex | kernel: netfs: fix reference leak | known affected: 76 known not affected: 198 | 2026-06-30T01:28:54+00:00 | Vulnerability · Source |
| CVE-2025-40005 | redhat_vex | kernel: spi: cadence-quadspi: Implement refcount to handle unbind during busy | known affected: 76 known not affected: 198 | 2026-06-30T01:28:52+00:00 | Vulnerability · Source |
| CVE-2025-40001 | redhat_vex | kernel: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | known affected: 42 known not affected: 232 | 2026-06-30T01:28:48+00:00 | Vulnerability · Source |
| CVE-2025-39999 | redhat_vex | kernel: blk-mq: fix blk_mq_tags double free while nr_requests grown | known affected: 76 known not affected: 198 | 2026-06-30T01:28:44+00:00 | Vulnerability · Source |
| CVE-2025-39996 | redhat_vex | kernel: Linux kernel (media: b2c2): Use-after-free vulnerability in flexcop_pci_remove leading to denial of service. | known affected: 76 known not affected: 198 | 2026-06-30T01:28:40+00:00 | Vulnerability · Source |
| CVE-2025-39992 | redhat_vex | kernel: mm: swap: check for stable address space before operating on the VMA | known affected: 198 known not affected: 76 | 2026-06-30T01:28:33+00:00 | Vulnerability · Source |
| CVE-2025-39989 | redhat_vex | kernel: x86/mce: use is_copy_from_user() to determine copy-from-user context | known affected: 184 known not affected: 90 | 2026-06-30T01:28:31+00:00 | Vulnerability · Source |
| CVE-2025-39984 | redhat_vex | kernel: net: tun: Update napi->skb after XDP process | fixed: 616 known not affected: 198 | 2026-06-30T01:28:28+00:00 | Vulnerability · Source |
| CVE-2025-39980 | redhat_vex | kernel: nexthop: Forbid FDB status change while nexthop is in a group | known affected: 184 known not affected: 90 | 2026-06-30T01:28:19+00:00 | Vulnerability · Source |
| CVE-2025-39955 | redhat_vex | kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() | fixed: 2416 known affected: 22 known not affected: 14 | 2026-06-30T01:25:34+00:00 | Vulnerability · Source |
| CVE-2025-39953 | redhat_vex | kernel: cgroup: split cgroup_destroy_wq into 3 workqueues | known affected: 232 known not affected: 42 | 2026-06-30T01:25:30+00:00 | Vulnerability · Source |
| CVE-2025-39947 | redhat_vex | kernel: net/mlx5e: Harden uplink netdev access against device unbind | known affected: 246 known not affected: 28 | 2026-06-30T01:25:25+00:00 | Vulnerability · Source |
| CVE-2025-39940 | redhat_vex | kernel: Linux kernel: Denial of Service via integer overflow in dm-stripe | known affected: 274 | 2026-06-30T01:25:20+00:00 | Vulnerability · Source |
| CVE-2025-39926 | redhat_vex | kernel: Linux kernel: Denial of Service due to improper permission checks in genl_bind() | known affected: 198 known not affected: 76 | 2026-06-30T01:25:01+00:00 | Vulnerability · Source |
| CVE-2025-39925 | redhat_vex | kernel: can: j1939: implement NETDEV_UNREGISTER notification handler | fixed: 1775 known affected: 22 known not affected: 183 | 2026-06-30T01:24:58+00:00 | Vulnerability · Source |
| CVE-2025-39923 | redhat_vex | kernel: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees | known affected: 76 known not affected: 198 | 2026-06-30T01:24:57+00:00 | Vulnerability · Source |
| CVE-2025-39922 | redhat_vex | kernel: ixgbe: fix incorrect map used in eee linkmode | known affected: 184 known not affected: 90 | 2026-06-30T01:24:52+00:00 | Vulnerability · Source |
| CVE-2025-39917 | redhat_vex | kernel: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt | known affected: 76 known not affected: 198 | 2026-06-30T01:24:49+00:00 | Vulnerability · Source |
| CVE-2025-39915 | redhat_vex | kernel: net: phy: transfer phy_config_inband() locking responsibility to phylink | known affected: 90 known not affected: 184 | 2026-06-30T01:24:48+00:00 | Vulnerability · Source |
| CVE-2025-39911 | redhat_vex | kernel: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path | known affected: 260 known not affected: 14 | 2026-06-30T01:24:44+00:00 | Vulnerability · Source |
| CVE-2025-39914 | redhat_vex | kernel: tracing: Silence warning when chunk allocation fails in trace_pid_write | known affected: 76 known not affected: 198 | 2026-06-30T01:24:44+00:00 | Vulnerability · Source |
| CVE-2025-39912 | redhat_vex | kernel: nfs/localio: restore creds before releasing pageio data | known affected: 76 known not affected: 198 | 2026-06-30T01:24:43+00:00 | Vulnerability · Source |
| CVE-2025-39910 | redhat_vex | kernel: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() | known affected: 198 known not affected: 76 | 2026-06-30T01:24:39+00:00 | Vulnerability · Source |
| CVE-2025-39905 | redhat_vex | kernel: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver | fixed: 309 known affected: 18 known not affected: 180 | 2026-06-30T01:24:38+00:00 | Vulnerability · Source |
| CVE-2025-39903 | redhat_vex | kernel: of_numa: fix uninitialized memory nodes causing kernel panic | fixed: 616 known not affected: 198 | 2026-06-30T01:24:34+00:00 | Vulnerability · Source |
| CVE-2025-39901 | redhat_vex | kernel: i40e: remove read access to debugfs files | known affected: 260 known not affected: 14 | 2026-06-30T01:24:32+00:00 | Vulnerability · Source |