VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-14325 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T20:30:27+00:00 | Vulnerability · Source |
| CVE-2025-14324 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T20:30:23+00:00 | Vulnerability · Source |
| CVE-2025-14323 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Notifications component | fixed: 320 known affected: 8 | 2026-06-29T20:30:19+00:00 | Vulnerability · Source |
| CVE-2025-14322 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 320 known affected: 8 | 2026-06-29T20:30:16+00:00 | Vulnerability · Source |
| CVE-2025-14321 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-29T20:30:11+00:00 | Vulnerability · Source |
| CVE-2025-14174 | redhat_vex | Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page | fixed: 482 known not affected: 18 | 2026-06-29T20:30:08+00:00 | Vulnerability · Source |
| CVE-2025-13470 | redhat_vex | RNP: RNP: Confidentiality compromise due to uninitialized symmetric session key in Public-Key Encrypted Session Key (PKESK) packets | known not affected: 6 | 2026-06-29T20:29:43+00:00 | Vulnerability · Source |
| CVE-2025-13027 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 145 and Thunderbird 145 | known not affected: 12 | 2026-06-29T20:29:40+00:00 | Vulnerability · Source |
| CVE-2025-13026 | redhat_vex | firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:36+00:00 | Vulnerability · Source |
| CVE-2025-13025 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:31+00:00 | Vulnerability · Source |
| CVE-2025-13024 | redhat_vex | firefox: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 12 | 2026-06-29T20:29:27+00:00 | Vulnerability · Source |
| CVE-2025-13023 | redhat_vex | firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:23+00:00 | Vulnerability · Source |
| CVE-2025-13022 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:21+00:00 | Vulnerability · Source |
| CVE-2025-13021 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:17+00:00 | Vulnerability · Source |
| CVE-2025-13016 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component | fixed: 320 known affected: 8 | 2026-06-29T20:29:15+00:00 | Vulnerability · Source |
| CVE-2025-13012 | redhat_vex | firefox: thunderbird: Race condition in the Graphics component | fixed: 320 known affected: 8 | 2026-06-29T20:29:08+00:00 | Vulnerability · Source |
| CVE-2025-11721 | redhat_vex | thunderbird: firefox: Memory safety bug fixed in Firefox 144 and Thunderbird 144 | known not affected: 23 | 2026-06-29T20:28:53+00:00 | Vulnerability · Source |
| CVE-2025-11715 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 | fixed: 264 known affected: 8 | 2026-06-29T20:28:51+00:00 | Vulnerability · Source |
| CVE-2025-11714 | redhat_vex | thunderbird: firefox: Memory safety bugs | fixed: 264 known affected: 8 | 2026-06-29T20:28:47+00:00 | Vulnerability · Source |
| CVE-2025-11711 | redhat_vex | thunderbird: firefox: Some non-writable Object properties could be modified | fixed: 264 known affected: 8 | 2026-06-29T20:28:43+00:00 | Vulnerability · Source |
| CVE-2025-11710 | redhat_vex | thunderbird: firefox: Cross-process information leaked due to malicious IPC messages | fixed: 264 known affected: 8 | 2026-06-29T20:28:38+00:00 | Vulnerability · Source |
| CVE-2025-11709 | redhat_vex | thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures | fixed: 264 known affected: 8 | 2026-06-29T20:28:34+00:00 | Vulnerability · Source |
| CVE-2025-11708 | redhat_vex | thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() | fixed: 264 known affected: 8 | 2026-06-29T20:28:29+00:00 | Vulnerability · Source |
| CVE-2025-10537 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 | fixed: 264 known affected: 8 | 2026-06-29T20:27:55+00:00 | Vulnerability · Source |
| CVE-2025-10528 | redhat_vex | firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component | fixed: 264 known affected: 8 | 2026-06-29T20:27:51+00:00 | Vulnerability · Source |
| CVE-2025-10527 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component | fixed: 264 known affected: 8 | 2026-06-29T20:27:47+00:00 | Vulnerability · Source |
| CVE-2025-1080 | redhat_vex | libreoffice: Macro URL arbitrary script execution | fixed: 3928 known affected: 133 | 2026-06-29T20:27:16+00:00 | Vulnerability · Source |
| CVE-2024-9936 | redhat_vex | firefox: Undefined behavior in selection node cache | known affected: 2 known not affected: 7 | 2026-06-29T20:27:06+00:00 | Vulnerability · Source |
| CVE-2024-9680 | redhat_vex | firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) | fixed: 255 known affected: 6 known not affected: 4 | 2026-06-29T20:27:02+00:00 | Vulnerability · Source |
| CVE-2023-53003 | redhat_vex | kernel: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | known not affected: 274 | 2026-06-29T20:26:41+00:00 | Vulnerability · Source |
| CVE-2023-42970 | redhat_vex | webkitgtk: Processing web content may lead to arbitrary code execution | fixed: 412 known affected: 9 | 2026-06-29T20:26:32+00:00 | Vulnerability · Source |
| CVE-2023-42875 | redhat_vex | webkitgtk: Processing web content may lead to arbitrary code execution | fixed: 412 known affected: 9 | 2026-06-29T20:26:27+00:00 | Vulnerability · Source |
| CVE-2023-41915 | redhat_vex | pmix: race condition allows attackers to obtain ownership of arbitrary files | fixed: 96 | 2026-06-29T20:26:22+00:00 | Vulnerability · Source |
| CVE-2024-58087 | redhat_vex | kernel: ksmbd: fix racy issue from session lookup and expire | known not affected: 274 | 2026-06-29T20:25:41+00:00 | Vulnerability · Source |
| CVE-2024-58055 | redhat_vex | kernel: usb: gadget: f_tcm: Don't free command immediately | known not affected: 274 | 2026-06-29T20:25:34+00:00 | Vulnerability · Source |
| CVE-2024-58034 | redhat_vex | kernel: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() | known not affected: 274 | 2026-06-29T20:25:29+00:00 | Vulnerability · Source |
| CVE-2024-54543 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 9 | 2026-06-29T20:24:59+00:00 | Vulnerability · Source |
| CVE-2024-54534 | redhat_vex | webkit: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 9 | 2026-06-29T20:24:58+00:00 | Vulnerability · Source |
| CVE-2024-54505 | redhat_vex | webkit: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 9 | 2026-06-29T20:24:55+00:00 | Vulnerability · Source |
| CVE-2024-54479 | redhat_vex | WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 458 known affected: 10 | 2026-06-29T20:24:50+00:00 | Vulnerability · Source |
| CVE-2024-52531 | redhat_vex | libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict | fixed: 274 known affected: 7 known not affected: 10 | 2026-06-29T20:24:39+00:00 | Vulnerability · Source |
| CVE-2024-52317 | redhat_vex | tomcat: Apache Tomcat: Request/response mix-up with HTTP/2 | known not affected: 46 | 2026-06-29T20:24:35+00:00 | Vulnerability · Source |
| CVE-2024-49504 | redhat_vex | grub2: grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images | known not affected: 58 | 2026-06-29T20:24:33+00:00 | Vulnerability · Source |
| CVE-2024-47615 | redhat_vex | gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer | fixed: 311 known affected: 4 | 2026-06-29T20:24:14+00:00 | Vulnerability · Source |
| CVE-2024-47607 | redhat_vex | gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header | fixed: 311 known affected: 4 | 2026-06-29T20:24:10+00:00 | Vulnerability · Source |
| CVE-2024-47606 | redhat_vex | gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes | fixed: 319 known affected: 3 | 2026-06-29T20:24:07+00:00 | Vulnerability · Source |
| CVE-2024-47540 | redhat_vex | gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer | fixed: 319 known affected: 3 | 2026-06-29T20:24:04+00:00 | Vulnerability · Source |
| CVE-2024-47539 | redhat_vex | gstreamer1-plugins-good: OOB-write in convert_to_s334_1a | fixed: 273 known not affected: 5 | 2026-06-29T20:23:59+00:00 | Vulnerability · Source |
| CVE-2024-47537 | redhat_vex | gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c | fixed: 319 known not affected: 3 | 2026-06-29T20:23:57+00:00 | Vulnerability · Source |
| CVE-2024-47538 | redhat_vex | gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet | fixed: 311 known not affected: 4 | 2026-06-29T20:23:55+00:00 | Vulnerability · Source |