VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294155 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-5875 | redhat_vex | chromium-browser: URL bar spoof via download redirect | fixed: 14 | 2026-06-28T11:18:18+00:00 | Vulnerability · Source |
| CVE-2025-4091 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 | fixed: 296 known affected: 10 | 2026-06-28T11:18:18+00:00 | Vulnerability · Source |
| CVE-2026-8358 | redhat_vex | LibreOffice: LibreOffice Calc: Heap buffer overflow leads to denial of service via crafted spreadsheet document. | known affected: 670 | 2026-06-28T11:18:16+00:00 | Vulnerability · Source |
| CVE-2019-5862 | redhat_vex | chromium-browser: AppCache not robust to compromised renderers | fixed: 14 | 2026-06-28T11:18:16+00:00 | Vulnerability · Source |
| CVE-2019-5852 | redhat_vex | chromium-browser: Object leak of utility functions | fixed: 14 | 2026-06-28T11:18:15+00:00 | Vulnerability · Source |
| CVE-2026-45956 | redhat_vex | kernel: drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() | known not affected: 274 | 2026-06-28T11:18:14+00:00 | Vulnerability · Source |
| CVE-2026-30998 | redhat_vex | FFmpeg: FFmpeg: Denial of Service vulnerability in zmqsend.c via crafted input | known affected: 9 | 2026-06-28T11:18:13+00:00 | Vulnerability · Source |
| CVE-2026-43336 | redhat_vex | kernel: lib/crypto: chacha: Zeroize permuted_state before it leaves scope | known not affected: 274 | 2026-06-28T11:18:11+00:00 | Vulnerability · Source |
| CVE-2026-45940 | redhat_vex | kernel: net: stmmac: fix oops when split header is enabled | known affected: 108 known not affected: 166 | 2026-06-28T11:18:10+00:00 | Vulnerability · Source |
| CVE-2026-43188 | redhat_vex | kernel: ceph: do not propagate page array emplacement errors as batch errors | known not affected: 274 | 2026-06-28T11:18:09+00:00 | Vulnerability · Source |
| CVE-2019-13752 | redhat_vex | sqlite: fts3: improve shadow table corruption detection | fixed: 89 known affected: 6 known not affected: 7 | 2026-06-28T11:18:07+00:00 | Vulnerability · Source |
| CVE-2012-2035 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-14) | fixed: 5 | 2026-06-28T11:18:07+00:00 | Vulnerability · Source |
| CVE-2026-45966 | redhat_vex | kernel: apparmor: fix NULL pointer dereference in __unix_needs_revalidation | known not affected: 274 | 2026-06-28T11:18:06+00:00 | Vulnerability · Source |
| CVE-2026-45992 | redhat_vex | kernel: ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path | known affected: 14 known not affected: 260 | 2026-06-28T11:18:06+00:00 | Vulnerability · Source |
| CVE-2012-1711 | redhat_vex | OpenJDK: improper protection of CORBA data models (CORBA, 7079902) | fixed: 234 | 2026-06-28T11:18:05+00:00 | Vulnerability · Source |
| CVE-2018-1088 | redhat_vex | glusterfs: Privilege escalation via gluster_shared_storage when snapshot scheduling is enabled | fixed: 84 known not affected: 22 | 2026-06-28T11:18:05+00:00 | Vulnerability · Source |
| CVE-2026-12468 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in Updater | known not affected: 1 | 2026-06-28T11:18:03+00:00 | Vulnerability · Source |
| CVE-2025-65406 | redhat_vex | live555: heap-based buffer overflow during SDP construction for Matroska/AAC | known not affected: 1 | 2026-06-28T11:18:03+00:00 | Vulnerability · Source |
| CVE-2026-45974 | redhat_vex | kernel: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found | known affected: 76 known not affected: 198 | 2026-06-28T11:18:02+00:00 | Vulnerability · Source |
| CVE-2021-37159 | redhat_vex | kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c | fixed: 150 known affected: 149 | 2026-06-28T11:18:01+00:00 | Vulnerability · Source |
| CVE-2019-12819 | redhat_vex | kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c | fixed: 150 known affected: 2 known not affected: 54 | 2026-06-28T11:17:58+00:00 | Vulnerability · Source |
| CVE-2026-45954 | redhat_vex | kernel: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() | known not affected: 274 | 2026-06-28T11:17:58+00:00 | Vulnerability · Source |
| CVE-2016-2061 | redhat_vex | kernel: DoS in MSM V4L2 video driver | known not affected: 93 | 2026-06-28T11:17:57+00:00 | Vulnerability · Source |
| CVE-2026-3061 | redhat_vex | chromium-browser: Out of bounds read in Media | known not affected: 1 | 2026-06-28T11:17:57+00:00 | Vulnerability · Source |
| CVE-2016-5616 | redhat_vex | mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016) | fixed: 591 known affected: 19 known not affected: 8 under investigation: 1 | 2026-06-28T11:17:56+00:00 | Vulnerability · Source |
| CVE-2025-4085 | redhat_vex | firefox: thunderbird: Potential information leakage and privilege escalation in UITour actor | known affected: 6 known not affected: 19 | 2026-06-28T11:17:55+00:00 | Vulnerability · Source |
| CVE-2026-32608 | redhat_vex | glances: command injection via process names in action command templates | known not affected: 1 | 2026-06-28T11:17:53+00:00 | Vulnerability · Source |
| CVE-2018-1062 | redhat_vex | ovirt-engine: When Wipe After Delete (WAD) and Enable Discard are both enabled for a VM disk, discarded data might not be wiped after the disk is removed. | fixed: 21 known affected: 1 known not affected: 1 | 2026-06-28T11:17:53+00:00 | Vulnerability · Source |
| CVE-2013-0444 | redhat_vex | OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493) | fixed: 202 known affected: 1 known not affected: 37 | 2026-06-28T11:17:52+00:00 | Vulnerability · Source |
| CVE-2011-3546 | redhat_vex | JDK: unspecified vulnerability fixed in 6u29 (Deployment) | fixed: 323 known not affected: 13 | 2026-06-28T11:17:52+00:00 | Vulnerability · Source |
| CVE-2016-5546 | redhat_vex | OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714) | fixed: 1032 | 2026-06-28T11:17:50+00:00 | Vulnerability · Source |
| CVE-2011-3521 | redhat_vex | OpenJDK: IIOP deserialization code execution (Deserialization, 7055902) | fixed: 365 known not affected: 13 | 2026-06-28T11:17:50+00:00 | Vulnerability · Source |
| CVE-2018-10545 | redhat_vex | php: Dumpable FPM child processes allow bypassing opcache access controls | fixed: 486 known affected: 116 known not affected: 49 | 2026-06-28T11:17:49+00:00 | Vulnerability · Source |
| CVE-2016-5542 | redhat_vex | OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973) | fixed: 1091 | 2026-06-28T11:17:49+00:00 | Vulnerability · Source |
| CVE-2018-1002200 | redhat_vex | plexus-archiver: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file | fixed: 57 known affected: 1 known not affected: 6 | 2026-06-28T11:17:48+00:00 | Vulnerability · Source |
| CVE-2016-5444 | redhat_vex | mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016) | fixed: 406 known affected: 9 known not affected: 11 under investigation: 9 | 2026-06-28T11:17:45+00:00 | Vulnerability · Source |
| CVE-2021-3621 | redhat_vex | sssd: shell command injection in sssctl | fixed: 1520 known affected: 31 known not affected: 41 | 2026-06-28T11:17:44+00:00 | Vulnerability · Source |
| CVE-2018-10021 | redhat_vex | kernel: ata qc leak in drivers/scsi/libsas/sas_scsi_host.c allows local users to cause denial-of-service | known affected: 55 known not affected: 157 | 2026-06-28T11:17:43+00:00 | Vulnerability · Source |
| CVE-2026-46031 | redhat_vex | kernel: net: ks8851: Reinstate disabling of BHs around IRQ handler | known not affected: 274 | 2026-06-28T11:17:42+00:00 | Vulnerability · Source |
| CVE-2011-2436 | redhat_vex | acroread: multiple code execution flaws (APSB11-24) | fixed: 18 | 2026-06-28T11:17:42+00:00 | Vulnerability · Source |
| CVE-2011-2138 | redhat_vex | flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) | fixed: 23 | 2026-06-28T11:17:40+00:00 | Vulnerability · Source |
| CVE-2025-9479 | redhat_vex | chromium-browser: Out of bounds read in V8 | known not affected: 1 | 2026-06-28T11:17:40+00:00 | Vulnerability · Source |
| CVE-2011-0871 | redhat_vex | OpenJDK: MediaTracker created Component instances with unnecessary privileges (Swing, 7020198) | fixed: 666 | 2026-06-28T11:17:37+00:00 | Vulnerability · Source |
| CVE-2011-0867 | redhat_vex | OpenJDK: NetworkInterface information leak (Networking, 7013969) | fixed: 666 | 2026-06-28T11:17:37+00:00 | Vulnerability · Source |
| CVE-2011-0864 | redhat_vex | OpenJDK: JVM memory corruption via certain bytecode (HotSpot, 7020373) | fixed: 143 known not affected: 21 | 2026-06-28T11:17:37+00:00 | Vulnerability · Source |
| CVE-2026-46036 | redhat_vex | kernel: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex | known not affected: 274 | 2026-06-28T11:17:37+00:00 | Vulnerability · Source |
| CVE-2011-0814 | redhat_vex | JDK: unspecified vulnerabilities fixed in 6u26 (Sound) | fixed: 637 | 2026-06-28T11:17:36+00:00 | Vulnerability · Source |
| CVE-2011-0623 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T11:17:36+00:00 | Vulnerability · Source |
| CVE-2011-0608 | redhat_vex | flash-plugin: multiple code execution flaws (APSB11-02) | fixed: 8 | 2026-06-28T11:17:35+00:00 | Vulnerability · Source |
| CVE-2011-0587 | redhat_vex | acroread: multiple XSS flaws (APSB11-03) | fixed: 18 | 2026-06-28T11:17:35+00:00 | Vulnerability · Source |