VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294162 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23259 | redhat_vex | kernel: io_uring/rw: free potentially allocated iovec on cache put failure | known affected: 184 known not affected: 90 | 2026-06-28T11:04:52+00:00 | Vulnerability · Source |
| CVE-2016-7413 | redhat_vex | php: Use after free in wddx_deserialize | fixed: 254 known affected: 140 | 2026-06-28T11:04:52+00:00 | Vulnerability · Source |
| CVE-2016-7401 | redhat_vex | python-django: CSRF protection bypass on a site with Google Analytics | fixed: 22 known affected: 12 known not affected: 12 | 2026-06-28T11:04:50+00:00 | Vulnerability · Source |
| CVE-2026-23118 | redhat_vex | kernel: rxrpc: Fix data-race warning and potential load/store tearing | known affected: 184 known not affected: 90 | 2026-06-28T11:04:50+00:00 | Vulnerability · Source |
| CVE-2021-4154 | redhat_vex | kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout | fixed: 400 known not affected: 152 | 2026-06-28T11:04:49+00:00 | Vulnerability · Source |
| CVE-2026-2314 | redhat_vex | chromium-browser: Heap buffer overflow in Codecs | known not affected: 1 | 2026-06-28T11:04:49+00:00 | Vulnerability · Source |
| CVE-2015-3082 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-09 | fixed: 5 | 2026-06-28T11:04:47+00:00 | Vulnerability · Source |
| CVE-2020-10742 | redhat_vex | kernel: NFS client crash due to index buffer overflow during Direct IO write causing kernel panic | fixed: 204 known affected: 42 known not affected: 49 | 2026-06-28T11:04:47+00:00 | Vulnerability · Source |
| CVE-2025-6192 | redhat_vex | chromium-browser: Chromium use after free | known not affected: 1 | 2026-06-28T11:04:42+00:00 | Vulnerability · Source |
| CVE-2025-49601 | redhat_vex | mbedtls: MbedTLS LMS Public Key Out-of-Bounds Read | known not affected: 1 | 2026-06-28T11:04:42+00:00 | Vulnerability · Source |
| CVE-2026-45283 | redhat_vex | nextcloud-server: Nextcloud Server: Unauthorized file modification and denial of service via improper WebDAV handling | known not affected: 1 | 2026-06-28T11:04:40+00:00 | Vulnerability · Source |
| CVE-2021-4203 | redhat_vex | kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses | fixed: 300 known affected: 42 known not affected: 106 | 2026-06-28T11:04:40+00:00 | Vulnerability · Source |
| CVE-2026-44931 | redhat_vex | malcontent: malcontent: Denial of Service via RecordUsage D-Bus method | known not affected: 1 | 2026-06-28T11:04:39+00:00 | Vulnerability · Source |
| CVE-2015-2617 | redhat_vex | mysql: unspecified vulnerability related to Server:Partition (CPU July 2015) | fixed: 147 known not affected: 41 | 2026-06-28T11:04:37+00:00 | Vulnerability · Source |
| CVE-2024-36936 | redhat_vex | kernel: efi/unaccepted: touch soft lockup during memory accept | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T11:04:37+00:00 | Vulnerability · Source |
| CVE-2024-36917 | redhat_vex | kernel: block: fix overflow in blk_ioctl_discard() | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T11:04:37+00:00 | Vulnerability · Source |
| CVE-2016-5132 | redhat_vex | chromium-browser: limited same-origin bypass in service workers | fixed: 12 | 2026-06-28T11:04:36+00:00 | Vulnerability · Source |
| CVE-2024-36881 | redhat_vex | kernel: mm/userfaultfd: reset ptes when close() for wr-protected ones | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T11:04:35+00:00 | Vulnerability · Source |
| CVE-2026-11105 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in WebUI | known not affected: 1 | 2026-06-28T11:04:31+00:00 | Vulnerability · Source |
| CVE-2016-7141 | redhat_vex | curl: Incorrect reuse of client certificates | fixed: 395 known affected: 8 known not affected: 4 | 2026-06-28T11:04:31+00:00 | Vulnerability · Source |
| CVE-2013-2549 | redhat_vex | acroread: Unspecified vulnerability allows remote attackers to execute arbitrary code (CanSecWest 2013) | fixed: 8 | 2026-06-28T11:04:30+00:00 | Vulnerability · Source |
| CVE-2026-11097 | redhat_vex | chromium-browser: Inappropriate implementation in WebView | known not affected: 1 | 2026-06-28T11:04:27+00:00 | Vulnerability · Source |
| CVE-2016-7132 | redhat_vex | php: wddx_deserialize null dereference in php_wddx_pop_element | fixed: 251 known affected: 110 | 2026-06-28T11:04:27+00:00 | Vulnerability · Source |
| CVE-2016-7128 | redhat_vex | php: Memory Leakage In exif_process_IFD_in_TIFF | fixed: 251 known affected: 110 | 2026-06-28T11:04:25+00:00 | Vulnerability · Source |
| CVE-2016-7127 | redhat_vex | php: imagegammacorrect allows arbitrary write access | fixed: 251 known affected: 110 | 2026-06-28T11:04:25+00:00 | Vulnerability · Source |
| CVE-2026-8962 | redhat_vex | firefox: Mitigation bypass in the DOM: Security component | fixed: 260 known affected: 8 | 2026-06-28T11:04:24+00:00 | Vulnerability · Source |
| CVE-2016-7126 | redhat_vex | php: select_colors write out-of-bounds | fixed: 251 known affected: 110 | 2026-06-28T11:04:24+00:00 | Vulnerability · Source |
| CVE-2026-23190 | redhat_vex | kernel: ASoC: amd: fix memory leak in acp3x pdm dma ops | known affected: 232 known not affected: 42 | 2026-06-28T11:04:22+00:00 | Vulnerability · Source |
| CVE-2016-7117 | redhat_vex | kernel: Use-after-free in the recvmmsg exit path | fixed: 938 | 2026-06-28T11:04:21+00:00 | Vulnerability · Source |
| CVE-2026-23162 | redhat_vex | kernel: drm/xe/nvm: Fix double-free on aux add failure | known affected: 76 known not affected: 198 | 2026-06-28T11:04:21+00:00 | Vulnerability · Source |
| CVE-2026-8974 | redhat_vex | firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 | fixed: 260 known affected: 8 | 2026-06-28T11:04:19+00:00 | Vulnerability · Source |
| CVE-2026-8958 | redhat_vex | firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component | fixed: 260 known affected: 8 | 2026-06-28T11:04:17+00:00 | Vulnerability · Source |
| CVE-2026-8968 | redhat_vex | firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component | fixed: 260 known affected: 8 | 2026-06-28T11:04:16+00:00 | Vulnerability · Source |
| CVE-2023-0394 | redhat_vex | kernel: NULL pointer dereference in rawv6_push_pending_frames | fixed: 514 known affected: 42 | 2026-06-28T11:04:14+00:00 | Vulnerability · Source |
| CVE-2016-0746 | redhat_vex | nginx: use-after-free during CNAME response processing in resolver | fixed: 24 known affected: 1 | 2026-06-28T11:04:08+00:00 | Vulnerability · Source |
| CVE-2016-1837 | redhat_vex | libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral | fixed: 145 known affected: 2 | 2026-06-28T11:04:07+00:00 | Vulnerability · Source |
| CVE-2010-4475 | redhat_vex | JDK unspecified vulnerability in Deployment component | fixed: 632 | 2026-06-28T11:04:07+00:00 | Vulnerability · Source |
| CVE-2016-1708 | redhat_vex | chromium-browser: use-after-free in extensions | fixed: 12 | 2026-06-28T11:04:06+00:00 | Vulnerability · Source |
| CVE-2016-1685 | redhat_vex | chromium-browser: out-of-bounds read in pdfium | fixed: 12 | 2026-06-28T11:04:03+00:00 | Vulnerability · Source |
| CVE-2023-0459 | redhat_vex | kernel: Copy_from_user on 64-bit versions may leak kernel information | fixed: 150 known not affected: 150 | 2026-06-28T11:04:02+00:00 | Vulnerability · Source |
| CVE-2016-1017 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:03:59+00:00 | Vulnerability · Source |
| CVE-2026-43357 | redhat_vex | kernel: iio: gyro: mpu3050-core: fix pm_runtime error handling | known not affected: 274 | 2026-06-28T11:03:58+00:00 | Vulnerability · Source |
| CVE-2016-10161 | redhat_vex | php: Out-of-bounds heap read on unserialize in finish_nested_data() | fixed: 254 known affected: 87 | 2026-06-28T11:03:58+00:00 | Vulnerability · Source |
| CVE-2016-6989 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-32 | fixed: 5 | 2026-06-28T11:03:58+00:00 | Vulnerability · Source |
| CVE-2016-0978 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-04 | fixed: 5 | 2026-06-28T11:03:57+00:00 | Vulnerability · Source |
| CVE-2016-6921 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-29 | fixed: 5 | 2026-06-28T11:03:57+00:00 | Vulnerability · Source |
| CVE-2016-6986 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-32 | fixed: 5 | 2026-06-28T11:03:57+00:00 | Vulnerability · Source |
| CVE-2004-0957 | redhat_vex | security flaw | fixed: 5 | 2026-06-28T11:03:56+00:00 | Vulnerability · Source |
| CVE-2026-11068 | redhat_vex | chromium-browser: Use after free in WebSockets | known not affected: 1 | 2026-06-28T11:03:55+00:00 | Vulnerability · Source |
| CVE-2016-6808 | redhat_vex | mod_jk: Buffer overflow when concatenating virtual host name and URI | fixed: 130 known affected: 4 under investigation: 2 | 2026-06-28T11:03:54+00:00 | Vulnerability · Source |