VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-38575 | redhat_vex | kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure | fixed: 429 known affected: 50 known not affected: 22 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2026-47760 | redhat_vex | TinyMCE: Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs | known not affected: 1 | 2026-06-28T07:42:55+00:00 | Vulnerability · Source |
| CVE-2026-48095 | redhat_vex | 7-Zip: 7-Zip: Arbitrary code execution via heap buffer overflow in NTFS handler | known not affected: 1 | 2026-06-28T07:42:55+00:00 | Vulnerability · Source |
| CVE-2021-2036 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:54+00:00 | Vulnerability · Source |
| CVE-2021-2042 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:54+00:00 | Vulnerability · Source |
| CVE-2026-47320 | redhat_vex | rlottie: From CVEorg collector | known not affected: 1 | 2026-06-28T07:42:53+00:00 | Vulnerability · Source |
| CVE-2021-20325 | redhat_vex | httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5 | fixed: 85 known not affected: 38 | 2026-06-28T07:42:53+00:00 | Vulnerability · Source |
| CVE-2026-4726 | redhat_vex | firefox: Denial-of-service in the XML component | known not affected: 12 | 2026-06-28T07:42:52+00:00 | Vulnerability · Source |
| CVE-2022-40898 | redhat_vex | python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli | fixed: 18 known affected: 37 known not affected: 65 | 2026-06-28T07:42:51+00:00 | Vulnerability · Source |
| CVE-2026-4739 | redhat_vex | InsightSoftwareConsortium/ITK: Expat: InsightSoftwareConsortium ITK: Arbitrary code execution or denial of service via integer overflow. | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47323 | redhat_vex | camel: camel-cxf-rest: camel-cxf-transport: camel-knative-http: camel-exec: camel-file: camel-undertow: Apache Camel: Remote Code Execution via header injection due to missing inbound filtering | known affected: 8 known not affected: 12 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47319 | redhat_vex | rlottie: rlottie: Denial of Service via excessive memory allocation | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47318 | redhat_vex | rlottie: rlottie: Denial of Service via stack-based buffer overflow | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-4727 | redhat_vex | firefox: Denial-of-service in the Libraries component in NSS | known not affected: 12 | 2026-06-28T07:42:49+00:00 | Vulnerability · Source |
| CVE-2026-4728 | redhat_vex | firefox: Spoofing issue in the Privacy: Anti-Tracking component | known not affected: 12 | 2026-06-28T07:42:49+00:00 | Vulnerability · Source |
| CVE-2026-4725 | redhat_vex | firefox: Sandbox escape due to use-after-free in the Graphics: Canvas2D component | known not affected: 12 | 2026-06-28T07:42:48+00:00 | Vulnerability · Source |
| CVE-2026-4724 | redhat_vex | firefox: Undefined behavior in the Audio/Video component | known not affected: 12 | 2026-06-28T07:42:48+00:00 | Vulnerability · Source |
| CVE-2026-4723 | redhat_vex | firefox: Use-after-free in the JavaScript Engine component | known not affected: 12 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4721 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 | fixed: 320 known affected: 8 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4722 | redhat_vex | firefox: Privilege escalation in the IPC component | known not affected: 12 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4717 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-28T07:42:46+00:00 | Vulnerability · Source |
| CVE-2026-4718 | redhat_vex | firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-28T07:42:46+00:00 | Vulnerability · Source |
| CVE-2026-4715 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:45+00:00 | Vulnerability · Source |
| CVE-2026-4716 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:45+00:00 | Vulnerability · Source |
| CVE-2021-2028 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20292 | redhat_vex | kernel: DRM Memory Management Double Free Privilege Escalation Vulnerability | known not affected: 92 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20286 | redhat_vex | libnbd: Assertion failure in nbd_unlocked_opt_go in lib/opt.c | known affected: 16 known not affected: 24 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20268 | redhat_vex | kernel: eBPF Improper Input Validation | known not affected: 197 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20265 | redhat_vex | kernel: increase slab leak leads to DoS | fixed: 241 known not affected: 170 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2023-46998 | redhat_vex | bootbox: cross-site scripting vulnerability | known affected: 1 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20269 | redhat_vex | kexec-tools: incorrect permissions on kdump dmesg file | fixed: 13 known affected: 6 known not affected: 1 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20262 | redhat_vex | keycloak: missing re-authentication while updating password | known affected: 1 known not affected: 6 | 2026-06-28T07:42:40+00:00 | Vulnerability · Source |
| CVE-2026-4712 | redhat_vex | firefox: thunderbird: Information disclosure in the Widget: Cocoa component | fixed: 320 known affected: 8 | 2026-06-28T07:42:40+00:00 | Vulnerability · Source |
| CVE-2026-4707 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2021-20257 | redhat_vex | QEMU: net: e1000: infinite loop while processing transmit descriptors | fixed: 1786 known affected: 81 known not affected: 5 | 2026-06-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-4709 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component | fixed: 320 known affected: 8 | 2026-06-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-4700 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking: HTTP component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4701 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4704 | redhat_vex | firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4702 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4699 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component | fixed: 320 known affected: 8 | 2026-06-28T07:42:35+00:00 | Vulnerability · Source |
| CVE-2026-4679 | redhat_vex | chromium-browser: Integer overflow in Fonts | known not affected: 1 | 2026-06-28T07:42:35+00:00 | Vulnerability · Source |
| CVE-2026-4693 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | fixed: 320 known affected: 8 | 2026-06-28T07:42:34+00:00 | Vulnerability · Source |
| CVE-2026-4689 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | fixed: 320 known affected: 8 | 2026-06-28T07:42:33+00:00 | Vulnerability · Source |
| CVE-2026-4688 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component | fixed: 320 known affected: 8 | 2026-06-28T07:42:33+00:00 | Vulnerability · Source |
| CVE-2026-4684 | redhat_vex | firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4685 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4686 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4680 | redhat_vex | chromium-browser: Use after free in FedCM | known not affected: 1 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4687 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |