VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2015-1231 | redhat_vex | chromium-browser: Various fixes from internal audits, fuzzing and other initiatives. | fixed: 15 | 2026-06-28T06:26:36+00:00 | Vulnerability · Source |
| CVE-2025-59475 | redhat_vex | jenkins: Missing permission check in authenticated users' profile menu | known affected: 1 | 2026-06-28T06:26:36+00:00 | Vulnerability · Source |
| CVE-2026-10014 | redhat_vex | chromium-browser: Use after free in WebMIDI | known not affected: 1 | 2026-06-28T06:26:34+00:00 | Vulnerability · Source |
| CVE-2022-0358 | redhat_vex | QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 | fixed: 4296 known affected: 44 known not affected: 44 | 2026-06-28T06:26:33+00:00 | Vulnerability · Source |
| CVE-2025-57106 | redhat_vex | Kitware VTK: vtk: Kitware VTK: Buffer Overflow in GLTF accessor data processing | known not affected: 1 | 2026-06-28T06:26:33+00:00 | Vulnerability · Source |
| CVE-2026-25556 | redhat_vex | MuPDF: MuPDF: Denial of Service via crafted input during barcode decoding | known not affected: 1 | 2026-06-28T06:26:32+00:00 | Vulnerability · Source |
| CVE-2014-6555 | redhat_vex | mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:26:32+00:00 | Vulnerability · Source |
| CVE-2020-1723 | redhat_vex | keycloak: logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to arbitrary web pages | known affected: 1 known not affected: 3 | 2026-06-28T06:26:32+00:00 | Vulnerability · Source |
| CVE-2026-11628 | redhat_vex | chromium-browser: Use after free in Ozone | known not affected: 1 | 2026-06-28T06:26:31+00:00 | Vulnerability · Source |
| CVE-2010-0190 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2010-0196 | redhat_vex | Acroread: Multiple code execution flaws (APSB10-09) | fixed: 12 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-11662 | redhat_vex | chromium-browser: Type Confusion in Bindings | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-10022 | redhat_vex | chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-11697 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in UI | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2026-6986 | redhat_vex | mongoose: Mongoose: Improper cryptographic signature verification | known not affected: 1 | 2026-06-28T06:26:30+00:00 | Vulnerability · Source |
| CVE-2025-71107 | redhat_vex | kernel: f2fs: ensure node page reads complete before f2fs_put_super() finishes | known not affected: 274 | 2026-06-28T06:26:28+00:00 | Vulnerability · Source |
| CVE-2015-0403 | redhat_vex | JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment) | fixed: 527 known not affected: 7 | 2026-06-28T06:26:27+00:00 | Vulnerability · Source |
| CVE-2021-47497 | redhat_vex | kernel: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T06:26:26+00:00 | Vulnerability · Source |
| CVE-2021-47435 | redhat_vex | kernel: dm: fix mempool NULL pointer race when completing IO | fixed: 390 known affected: 42 known not affected: 108 | 2026-06-28T06:26:24+00:00 | Vulnerability · Source |
| CVE-2021-47468 | redhat_vex | kernel: isdn: mISDN: Fix sleeping function called from invalid context | fixed: 413 known affected: 42 known not affected: 111 | 2026-06-28T06:26:24+00:00 | Vulnerability · Source |
| CVE-2021-4204 | redhat_vex | kernel: improper input validation may lead to privilege escalation | fixed: 399 known affected: 136 known not affected: 14 | 2026-06-28T06:26:14+00:00 | Vulnerability · Source |
| CVE-2021-41864 | redhat_vex | kernel: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T06:26:14+00:00 | Vulnerability · Source |
| CVE-2021-4206 | redhat_vex | QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow | fixed: 1692 known affected: 64 known not affected: 24 | 2026-06-28T06:26:14+00:00 | Vulnerability · Source |
| CVE-2020-14852 | redhat_vex | mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T06:26:11+00:00 | Vulnerability · Source |
| CVE-2025-30195 | redhat_vex | pdns-recursor: A crafted zone can lead to an illegal memory access in the PowerDNS Recursor | known not affected: 1 | 2026-06-28T06:26:06+00:00 | Vulnerability · Source |
| CVE-2021-38160 | redhat_vex | kernel: data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c | known affected: 43 known not affected: 154 | 2026-06-28T06:26:02+00:00 | Vulnerability · Source |
| CVE-2021-38204 | redhat_vex | kernel: use-after-free and panic in drivers/usb/host/max3421-hcd.c by removing a MAX-3421 USB device in certain situations | known not affected: 198 | 2026-06-28T06:26:00+00:00 | Vulnerability · Source |
| CVE-2021-38202 | redhat_vex | kernel: out-of-bounds read in TRACE_EVENT() in fs/nfsd/trace.h by sending NFS traffic when the trace event framework is being used for nfsd | known not affected: 198 | 2026-06-28T06:25:59+00:00 | Vulnerability · Source |
| CVE-2012-5087 | redhat_vex | OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549) | fixed: 144 known affected: 9 known not affected: 20 | 2026-06-28T06:25:55+00:00 | Vulnerability · Source |
| CVE-2014-0585 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T06:25:54+00:00 | Vulnerability · Source |
| CVE-2021-3759 | redhat_vex | kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks | fixed: 150 known not affected: 149 | 2026-06-28T06:25:54+00:00 | Vulnerability · Source |
| CVE-2021-3750 | redhat_vex | QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free | fixed: 2928 known affected: 64 | 2026-06-28T06:25:54+00:00 | Vulnerability · Source |
| CVE-2021-3667 | redhat_vex | libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API | fixed: 2713 known affected: 126 known not affected: 40 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2021-3735 | redhat_vex | QEMU: ahci: deadlock issue leads to denial of service | known affected: 126 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2025-59037 | redhat_vex | duckdb: DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware | known not affected: 1 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2021-3715 | redhat_vex | kernel: use-after-free in route4_change() in net/sched/cls_route.c | fixed: 848 known affected: 31 known not affected: 109 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2021-3612 | redhat_vex | kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() | fixed: 150 known affected: 29 known not affected: 120 | 2026-06-28T06:25:50+00:00 | Vulnerability · Source |
| CVE-2021-3609 | redhat_vex | kernel: race condition in net/can/bcm.c leads to local privilege escalation | fixed: 597 known affected: 42 known not affected: 112 | 2026-06-28T06:25:49+00:00 | Vulnerability · Source |
| CVE-2025-32799 | redhat_vex | conda-build: Conda-build Path Traversal | known not affected: 1 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2021-3582 | redhat_vex | QEMU: pvrdma: unproperly mremap in pvrdma_map_to_pdir() | known not affected: 126 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2021-35577 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2021) | fixed: 125 known not affected: 134 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2022-27458 | redhat_vex | mariadb: use-after-poison in Binary_string::free_buffer | fixed: 736 known affected: 19 known not affected: 35 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2021-4147 | redhat_vex | libvirt: deadlock and crash in libxl driver | known not affected: 166 | 2026-06-28T06:25:47+00:00 | Vulnerability · Source |
| CVE-2021-35477 | redhat_vex | kernel: BPF program can obtain sensitive information from kernel memory via a speculative store bypass side-channel attack because the technique used by the BPF verifier to manage speculation is unreliable | known affected: 91 known not affected: 106 | 2026-06-28T06:25:47+00:00 | Vulnerability · Source |
| CVE-2022-26377 | redhat_vex | httpd: mod_proxy_ajp: Possible request smuggling | fixed: 224 known affected: 17 known not affected: 105 | 2026-06-28T06:25:45+00:00 | Vulnerability · Source |
| CVE-2026-10016 | redhat_vex | chromium-browser: Use after free in DOM | known not affected: 1 | 2026-06-28T06:25:44+00:00 | Vulnerability · Source |
| CVE-2022-26373 | redhat_vex | hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions | fixed: 856 known affected: 14 | 2026-06-28T06:25:44+00:00 | Vulnerability · Source |
| CVE-2022-26353 | redhat_vex | QEMU: virtio-net: map leaking on error during receive | fixed: 1809 known affected: 59 | 2026-06-28T06:25:43+00:00 | Vulnerability · Source |
| CVE-2021-3492 | redhat_vex | kernel: shiftfs file system double free vulnerability | known not affected: 197 | 2026-06-28T06:25:40+00:00 | Vulnerability · Source |
| CVE-2020-14814 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T06:25:39+00:00 | Vulnerability · Source |