VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294140 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-4767 | redhat_vex | Mozilla: IndexedDB files retained in private browsing mode | fixed: 234 known affected: 4 | 2026-06-28T11:27:01+00:00 | Vulnerability · Source |
| CVE-2018-6144 | redhat_vex | chromium-browser: Out of bounds memory access in PDFium | fixed: 12 | 2026-06-28T11:27:00+00:00 | Vulnerability · Source |
| CVE-2023-27535 | redhat_vex | curl: FTP too eager connection reuse | fixed: 164 known affected: 13 | 2026-06-28T11:27:00+00:00 | Vulnerability · Source |
| CVE-2021-3392 | redhat_vex | QEMU: scsi: mptsas: use-after-free while processing io requests | known not affected: 104 | 2026-06-28T11:26:59+00:00 | Vulnerability · Source |
| CVE-2018-6173 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:26:57+00:00 | Vulnerability · Source |
| CVE-2026-32946 | redhat_vex | step-security/harden-runner: Harden-Runner: Egress policy bypass via DNS over TCP | known affected: 12 | 2026-06-28T11:26:57+00:00 | Vulnerability · Source |
| CVE-2018-6157 | redhat_vex | chromium-browser: Type confusion in WebRTC | fixed: 12 | 2026-06-28T11:26:57+00:00 | Vulnerability · Source |
| CVE-2018-6150 | redhat_vex | chromium-browser: Cross origin information disclosure in Service Workers | fixed: 12 | 2026-06-28T11:26:56+00:00 | Vulnerability · Source |
| CVE-2018-6132 | redhat_vex | chromium-browser: Use of uninitialized memory in WebRTC | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6158 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6141 | redhat_vex | chromium-browser: Heap buffer overflow in Skia | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6165 | redhat_vex | chromium-browser: URL spoof in Omnibox | fixed: 12 | 2026-06-28T11:26:55+00:00 | Vulnerability · Source |
| CVE-2018-6142 | redhat_vex | chromium-browser: Out of bounds memory access in V8 | fixed: 12 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2025-48075 | redhat_vex | github.com/gofiber/fiber/v2: Panic on Negative Index in Fiber BodyParser | known not affected: 1 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2019-10168 | redhat_vex | libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs | fixed: 1649 known not affected: 8 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2016-1013 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:26:53+00:00 | Vulnerability · Source |
| CVE-2026-11239 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Extensions | known not affected: 1 | 2026-06-28T11:26:52+00:00 | Vulnerability · Source |
| CVE-2018-6123 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 12 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2016-1006 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2010-3654 | redhat_vex | acroread/flash-plugin: critical vulnerablility (APSA10-05, APSB10-26) | fixed: 27 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2026-23123 | redhat_vex | kernel: Linux kernel: Local denial of service in interconnect debugfs due to uninitialized pointers | known affected: 76 known not affected: 198 | 2026-06-28T11:26:51+00:00 | Vulnerability · Source |
| CVE-2018-6122 | redhat_vex | chromium-browser: Type confusion in V8 | fixed: 12 | 2026-06-28T11:26:50+00:00 | Vulnerability · Source |
| CVE-2018-6119 | redhat_vex | chromium-browser: Spoof of contents of the Omnibox (URL bar) via a crafted HTML page | fixed: 12 | 2026-06-28T11:26:50+00:00 | Vulnerability · Source |
| CVE-2016-10200 | redhat_vex | kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature | fixed: 312 known not affected: 22 | 2026-06-28T11:26:49+00:00 | Vulnerability · Source |
| CVE-2016-1000345 | redhat_vex | bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack | fixed: 1105 known affected: 5 known not affected: 13 | 2026-06-28T11:26:48+00:00 | Vulnerability · Source |
| CVE-2025-71220 | redhat_vex | kernel: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() | known affected: 76 known not affected: 198 | 2026-06-28T11:26:47+00:00 | Vulnerability · Source |
| CVE-2016-1000110 | redhat_vex | CGIHandler: sets environmental variable based on user supplied Proxy request header | fixed: 416 known affected: 2 | 2026-06-28T11:26:46+00:00 | Vulnerability · Source |
| CVE-2025-48039 | redhat_vex | erlang: Erlang Excessive Use of System Resources | known affected: 41 | 2026-06-28T11:26:46+00:00 | Vulnerability · Source |
| CVE-2018-6088 | redhat_vex | chromium-browser: Use after free in PDFium | fixed: 12 | 2026-06-28T11:26:45+00:00 | Vulnerability · Source |
| CVE-2026-42183 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Denial of Service via nil pointer dereference for SSO users | known affected: 14 | 2026-06-28T11:26:44+00:00 | Vulnerability · Source |
| CVE-2020-24394 | redhat_vex | kernel: umask not applied on filesystem without ACL support | fixed: 660 known affected: 31 known not affected: 10 | 2026-06-28T11:26:43+00:00 | Vulnerability · Source |
| CVE-2026-31723 | redhat_vex | kernel: usb: gadget: f_subset: Fix net_device lifecycle with device_move | known not affected: 274 | 2026-06-28T11:26:43+00:00 | Vulnerability · Source |
| CVE-2016-0962 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T11:26:42+00:00 | Vulnerability · Source |
| CVE-2019-10166 | redhat_vex | libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients | fixed: 1649 known not affected: 8 | 2026-06-28T11:26:42+00:00 | Vulnerability · Source |
| CVE-2018-6079 | redhat_vex | chromium-browser: information disclosure via texture data in webgl | fixed: 12 | 2026-06-28T11:26:41+00:00 | Vulnerability · Source |
| CVE-2018-6075 | redhat_vex | chromium-browser: overly permissive cross origin downloads | fixed: 12 | 2026-06-28T11:26:41+00:00 | Vulnerability · Source |
| CVE-2016-10160 | redhat_vex | php: Off-by-one error in phar_parse_pharfile when loading crafted phar archive | fixed: 254 known affected: 86 known not affected: 1 | 2026-06-28T11:26:40+00:00 | Vulnerability · Source |
| CVE-2016-10155 | redhat_vex | Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb | fixed: 47 known affected: 16 known not affected: 2 | 2026-06-28T11:26:39+00:00 | Vulnerability · Source |
| CVE-2010-2163 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:26:39+00:00 | Vulnerability · Source |
| CVE-2018-6052 | redhat_vex | chromium-browser: incomplete no-referrer policy implementation | fixed: 12 | 2026-06-28T11:26:38+00:00 | Vulnerability · Source |
| CVE-2018-6054 | redhat_vex | chromium-browser: use after free in webui | fixed: 12 | 2026-06-28T11:26:38+00:00 | Vulnerability · Source |
| CVE-2018-6049 | redhat_vex | chromium-browser: ui spoof in permissions | fixed: 12 | 2026-06-28T11:26:37+00:00 | Vulnerability · Source |
| CVE-2016-10147 | redhat_vex | kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm | fixed: 185 known not affected: 34 | 2026-06-28T11:26:36+00:00 | Vulnerability · Source |
| CVE-2018-6048 | redhat_vex | chromium-browser: referrer policy bypass in blink | fixed: 12 | 2026-06-28T11:26:36+00:00 | Vulnerability · Source |
| CVE-2016-1002 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T11:26:34+00:00 | Vulnerability · Source |
| CVE-2016-0644 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T11:26:34+00:00 | Vulnerability · Source |
| CVE-2016-1000343 | redhat_vex | bouncycastle: DSA key pair generator generates a weak private key by default | fixed: 1111 known affected: 5 known not affected: 7 | 2026-06-28T11:26:34+00:00 | Vulnerability · Source |
| CVE-2016-0640 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T11:26:33+00:00 | Vulnerability · Source |
| CVE-2026-10934 | redhat_vex | chromium-browser: Use after free in Autofill | known not affected: 1 | 2026-06-28T11:26:33+00:00 | Vulnerability · Source |
| CVE-2026-41898 | redhat_vex | rust-openssl: rust-openssl: Buffer overflow via improper callback return size validation | known not affected: 1 | 2026-06-28T11:26:33+00:00 | Vulnerability · Source |