VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2013-0753 | redhat_vex | Mozilla: Use-after-free in serializeToStream (MFSA 2013-16) | fixed: 140 known affected: 1 | 2026-06-28T07:14:37+00:00 | Vulnerability · Source |
| CVE-2013-0744 | redhat_vex | Mozilla: Use-after-free when displaying table with many columns and column groups (MFSA 2013-05) | fixed: 140 known affected: 1 | 2026-06-28T07:14:37+00:00 | Vulnerability · Source |
| CVE-2013-0746 | redhat_vex | Mozilla: Compartment mismatch with quickstubs returned values (MFSA 2013-09) | fixed: 140 known affected: 1 | 2026-06-28T07:14:37+00:00 | Vulnerability · Source |
| CVE-2026-10201 | redhat_vex | assimp: Assimp: Denial of Service via divide-by-zero in FBXExporter | known affected: 4 known not affected: 4 | 2026-06-28T07:14:36+00:00 | Vulnerability · Source |
| CVE-2026-10019 | redhat_vex | chromium-browser: Integer overflow in ANGLE | known not affected: 1 | 2026-06-28T07:14:35+00:00 | Vulnerability · Source |
| CVE-2026-10197 | redhat_vex | assimp: Assimp: Denial of Service via null pointer dereference in glTF2Importer | known affected: 4 known not affected: 4 | 2026-06-28T07:14:34+00:00 | Vulnerability · Source |
| CVE-2026-55568 | redhat_vex | guzzlehttp/guzzle: Guzzle: Information disclosure via cleartext proxy communication | known not affected: 1 | 2026-06-28T07:14:34+00:00 | Vulnerability · Source |
| CVE-2026-10015 | redhat_vex | chromium-browser: Integer overflow in WTF | known not affected: 1 | 2026-06-28T07:14:33+00:00 | Vulnerability · Source |
| CVE-2024-40948 | redhat_vex | kernel: mm/page_table_check: fix crash on ZONE_DEVICE | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T07:14:33+00:00 | Vulnerability · Source |
| CVE-2026-10021 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in USB | known not affected: 1 | 2026-06-28T07:14:32+00:00 | Vulnerability · Source |
| CVE-2026-10002 | redhat_vex | chromium-browser: Use after free in PDFium | known not affected: 1 | 2026-06-28T07:14:31+00:00 | Vulnerability · Source |
| CVE-2026-10008 | redhat_vex | chromium-browser: Uninitialized Use in GPU | known not affected: 1 | 2026-06-28T07:14:30+00:00 | Vulnerability · Source |
| CVE-2026-10017 | redhat_vex | chromium-browser: Out of bounds read in Headless | known not affected: 1 | 2026-06-28T07:14:30+00:00 | Vulnerability · Source |
| CVE-2026-10013 | redhat_vex | chromium-browser: Use after free in WebCodecs | known not affected: 1 | 2026-06-28T07:14:30+00:00 | Vulnerability · Source |
| CVE-2026-10018 | redhat_vex | chromium-browser: Integer overflow in ANGLE | known not affected: 1 | 2026-06-28T07:14:30+00:00 | Vulnerability · Source |
| CVE-2012-5615 | redhat_vex | mysql: Remote Preauth User Enumeration flaw | fixed: 278 under investigation: 9 | 2026-06-28T07:14:30+00:00 | Vulnerability · Source |
| CVE-2026-55766 | redhat_vex | guzzlehttp/psr7: guzzlehttp/psr7: Information disclosure due to improper handling of CR/LF characters in HTTP start-line fields | known not affected: 1 | 2026-06-28T07:14:30+00:00 | Vulnerability · Source |
| CVE-2026-10005 | redhat_vex | chromium-browser: Use after free in WebAppInstalls | known not affected: 1 | 2026-06-28T07:14:29+00:00 | Vulnerability · Source |
| CVE-2026-10006 | redhat_vex | chromium-browser: Race in WebAudio | known not affected: 1 | 2026-06-28T07:14:29+00:00 | Vulnerability · Source |
| CVE-2012-5085 | redhat_vex | OpenJDK: disable Gopher support by default (Gopher, 7189567) | fixed: 521 known affected: 9 | 2026-06-28T07:14:29+00:00 | Vulnerability · Source |
| CVE-2026-10001 | redhat_vex | chromium-browser: Use after free in PerformanceManager | known not affected: 1 | 2026-06-28T07:14:29+00:00 | Vulnerability · Source |
| CVE-2026-10003 | redhat_vex | chromium-browser: Use after free in Views | known not affected: 1 | 2026-06-28T07:14:29+00:00 | Vulnerability · Source |
| CVE-2026-10004 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Passwords | known not affected: 1 | 2026-06-28T07:14:29+00:00 | Vulnerability · Source |
| CVE-2012-5499 | redhat_vex | (Plone): Partial denial of service through internal function | fixed: 13 known affected: 1 | 2026-06-28T07:14:28+00:00 | Vulnerability · Source |
| CVE-2026-10000 | redhat_vex | chromium-browser: Use after free in Passwords | known not affected: 1 | 2026-06-28T07:14:28+00:00 | Vulnerability · Source |
| CVE-2012-5485 | redhat_vex | (Plone): Restricted Python injection | fixed: 13 known affected: 1 | 2026-06-28T07:14:27+00:00 | Vulnerability · Source |
| CVE-2012-5054 | redhat_vex | flash-plugin: arbitrary code exec via integer overflow in copyRawDataTo method in Matrix3D class | fixed: 5 | 2026-06-28T07:14:27+00:00 | Vulnerability · Source |
| CVE-2012-5079 | redhat_vex | OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919) | fixed: 588 known affected: 9 | 2026-06-28T07:14:24+00:00 | Vulnerability · Source |
| CVE-2012-5084 | redhat_vex | OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194) | fixed: 588 known affected: 9 | 2026-06-28T07:14:24+00:00 | Vulnerability · Source |
| CVE-2012-5081 | redhat_vex | OpenJDK: JSSE denial of service (JSSE, 7186286) | fixed: 588 known affected: 7 known not affected: 1 | 2026-06-28T07:14:24+00:00 | Vulnerability · Source |
| CVE-2026-0980 | redhat_vex | rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username | fixed: 99 known affected: 2 known not affected: 212 | 2026-06-28T07:14:21+00:00 | Vulnerability · Source |
| CVE-2026-0943 | redhat_vex | harfbuzz-shaper: HarfBuzz::Shaper null pointer dereference vulnerability | known not affected: 1 | 2026-06-28T07:14:16+00:00 | Vulnerability · Source |
| CVE-2026-0899 | redhat_vex | chromium-browser: Out of bounds memory access in V8 | known not affected: 1 | 2026-06-28T07:14:16+00:00 | Vulnerability · Source |
| CVE-2026-0907 | redhat_vex | chromium-browser: Incorrect security UI in Split View | known not affected: 1 | 2026-06-28T07:14:16+00:00 | Vulnerability · Source |
| CVE-2026-0900 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T07:14:16+00:00 | Vulnerability · Source |
| CVE-2026-0892 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 147 and Thunderbird 147 | known not affected: 12 | 2026-06-28T07:14:15+00:00 | Vulnerability · Source |
| CVE-2026-0890 | redhat_vex | firefox: thunderbird: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component | fixed: 320 known affected: 7 | 2026-06-28T07:14:14+00:00 | Vulnerability · Source |
| CVE-2026-0889 | redhat_vex | firefox: Denial-of-service in the DOM: Service Workers component | known not affected: 12 | 2026-06-28T07:14:14+00:00 | Vulnerability · Source |
| CVE-2026-0886 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics component | fixed: 320 known affected: 7 | 2026-06-28T07:14:13+00:00 | Vulnerability · Source |
| CVE-2026-0885 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: GC component | fixed: 320 known affected: 7 | 2026-06-28T07:14:13+00:00 | Vulnerability · Source |
| CVE-2026-0887 | redhat_vex | firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component | fixed: 320 known affected: 7 | 2026-06-28T07:14:13+00:00 | Vulnerability · Source |
| CVE-2008-5347 | redhat_vex | OpenJDK applet privilege escalation via JAX package access (6592792) | fixed: 196 | 2026-06-28T07:14:11+00:00 | Vulnerability · Source |
| CVE-2008-5352 | redhat_vex | OpenJDK Jar200 Decompression buffer overflow (6755943) | fixed: 398 | 2026-06-28T07:14:11+00:00 | Vulnerability · Source |
| CVE-2026-0818 | redhat_vex | thunderbird: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content | known not affected: 11 | 2026-06-28T07:14:09+00:00 | Vulnerability · Source |
| CVE-2026-0748 | redhat_vex | Drupal 7: i18n: i18n_node: Drupal 7 i18n module: Information disclosure of unpublished nodes via translation UI | known not affected: 1 | 2026-06-28T07:14:09+00:00 | Vulnerability · Source |
| CVE-2026-0824 | redhat_vex | questdb: QuestDB UI: Cross-site Scripting vulnerability via Web Console manipulation | known not affected: 2 | 2026-06-28T07:14:09+00:00 | Vulnerability · Source |
| CVE-2026-0822 | redhat_vex | quickjs-ng: quickjs-ng: Heap-based buffer overflow in js_typed_array_sort function | known not affected: 1 | 2026-06-28T07:14:09+00:00 | Vulnerability · Source |
| CVE-2026-0669 | redhat_vex | MediaWiki: MediaWiki CSS extension: Information disclosure via path traversal | known not affected: 1 | 2026-06-28T07:14:06+00:00 | Vulnerability · Source |
| CVE-2026-0708 | redhat_vex | libucl: libucl: Denial of Service via embedded null byte in UCL input | known not affected: 1 | 2026-06-28T07:14:06+00:00 | Vulnerability · Source |
| CVE-2012-1530 | redhat_vex | acroread: multiple code execution flaws (APSB13-02) | fixed: 8 | 2026-06-28T07:14:06+00:00 | Vulnerability · Source |