VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302974 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-49825 | redhat_vex | lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href | fixed: 113 known affected: 185 known not affected: 356 | 2026-09-29T21:54:13+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2952 known affected: 151 known not affected: 16580 | 2026-09-29T21:53:47+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 5482 known affected: 208 known not affected: 2554 | 2026-09-29T21:53:38+00:00 | Vulnerability · Source |
| CVE-2026-102925 | redhat_vex | virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scripts | known affected: 43 known not affected: 5 | 2026-09-29T21:52:34+00:00 | Vulnerability · Source |
| CVE-2026-8763 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI | known affected: 47 known not affected: 16 under investigation: 13 | 2026-09-29T21:52:32+00:00 | Vulnerability · Source |
| CVE-2026-91006 | redhat_vex | org.apache.karaf.instance/org.apache.karaf.instance.core: karaf: Apache Karaf: Arbitrary command execution via unquoted instance options | known affected: 1 | 2026-09-29T21:44:19+00:00 | Vulnerability · Source |
| CVE-2026-85152 | redhat_vex | undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation | fixed: 55 known affected: 93 known not affected: 22 | 2026-09-29T21:41:51+00:00 | Vulnerability · Source |
| CVE-2026-84961 | redhat_vex | undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options | fixed: 56 known affected: 100 known not affected: 18 | 2026-09-29T21:41:38+00:00 | Vulnerability · Source |
| CVE-2026-19534 | redhat_vex | undici: undici: Denial of Service via unrequested WebSocket subprotocol | fixed: 58 known affected: 88 known not affected: 18 | 2026-09-29T21:41:32+00:00 | Vulnerability · Source |
| CVE-2026-33811 | redhat_vex | net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME | fixed: 1832 known affected: 139 known not affected: 8082 | 2026-09-29T21:41:17+00:00 | Vulnerability · Source |
| CVE-2026-43870 | redhat_vex | apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities | fixed: 43 known affected: 20 known not affected: 455 | 2026-09-29T21:41:09+00:00 | Vulnerability · Source |
| CVE-2026-102930 | redhat_vex | virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels | known affected: 48 | 2026-09-29T21:41:02+00:00 | Vulnerability · Source |
| CVE-2026-74581 | redhat_vex | kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer | fixed: 2215 known affected: 22 known not affected: 42 | 2026-09-29T21:40:51+00:00 | Vulnerability · Source |
| CVE-2026-73501 | redhat_vex | github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default | fixed: 12 known affected: 109 known not affected: 18 | 2026-09-29T21:40:38+00:00 | Vulnerability · Source |
| CVE-2026-97492 | redhat_vex | kernel: wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed | known affected: 234 known not affected: 42 | 2026-09-29T21:26:06+00:00 | Vulnerability · Source |
| CVE-2026-97491 | redhat_vex | kernel: net/rds: Don't sleep inside rds_ib_conn_path_shutdown | known affected: 14 known not affected: 262 | 2026-09-29T21:25:51+00:00 | Vulnerability · Source |
| CVE-2026-102330 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in SiteIsolation | known not affected: 1 | 2026-09-29T20:57:18+00:00 | Vulnerability · Source |
| CVE-2026-97488 | redhat_vex | kernel: qnx4: handle set_blocksize failures | known affected: 14 known not affected: 262 | 2026-09-29T20:57:16+00:00 | Vulnerability · Source |
| CVE-2026-97487 | redhat_vex | kernel: jfs: handle set_blocksize failures | known affected: 14 known not affected: 262 | 2026-09-29T20:57:15+00:00 | Vulnerability · Source |
| CVE-2026-102325 | redhat_vex | chromium-browser: chromium-browser: information disclosure via uninitialized resource in Skia | known not affected: 1 | 2026-09-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2026-102310 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in Payments | known not affected: 1 | 2026-09-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2026-97933 | redhat_vex | kernel: tracing: Take trace_array reference when opening a tracer options file | known affected: 76 known not affected: 200 | 2026-09-29T20:55:52+00:00 | Vulnerability · Source |
| CVE-2026-97932 | redhat_vex | kernel: tracing: Don't dereference trace_event_file in deferred trigger free | known not affected: 276 | 2026-09-29T20:55:47+00:00 | Vulnerability · Source |
| CVE-2026-97931 | redhat_vex | kernel: ALSA: us122l: Prevent write upgrades for read mappings | known affected: 276 | 2026-09-29T20:55:44+00:00 | Vulnerability · Source |
| CVE-2026-97930 | redhat_vex | kernel: ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf | known affected: 276 | 2026-09-29T20:55:40+00:00 | Vulnerability · Source |
| CVE-2026-97490 | redhat_vex | kernel: affs: handle set_blocksize failures | known not affected: 276 | 2026-09-29T20:55:36+00:00 | Vulnerability · Source |
| CVE-2026-97489 | redhat_vex | kernel: bfs: handle set_blocksize failures | known not affected: 276 | 2026-09-29T20:55:30+00:00 | Vulnerability · Source |
| CVE-2026-94572 | redhat_vex | openstack-octavia: octavia: HAProxy configuration injection via tls_ciphers on pools and listeners | known affected: 27 | 2026-09-29T20:55:27+00:00 | Vulnerability · Source |
| CVE-2026-94571 | redhat_vex | openstack-octavia: octavia: HAProxy configuration injection via L7 policy redirect_url and redirect_prefix | known affected: 27 | 2026-09-29T20:55:23+00:00 | Vulnerability · Source |
| CVE-2026-93492 | redhat_vex | io.netty/netty-codec-http2: Netty: HTTP/2 HpackEncoder DoS with large table size | known affected: 10 known not affected: 1 | 2026-09-29T20:55:16+00:00 | Vulnerability · Source |
| CVE-2026-102496 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures | known affected: 13 known not affected: 5 | 2026-09-29T20:55:12+00:00 | Vulnerability · Source |
| CVE-2026-102495 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing | known affected: 13 known not affected: 5 | 2026-09-29T20:55:09+00:00 | Vulnerability · Source |
| CVE-2026-102323 | redhat_vex | chromium-browser: chromium-browser: Type confusion in V8 | known not affected: 1 | 2026-09-29T20:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102326 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via type confusion in V8 | known not affected: 1 | 2026-09-29T20:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102328 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via type confusion in V8 | known not affected: 1 | 2026-09-29T20:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102324 | redhat_vex | chromium-browser: chromium-browser: Use after free in PictureInPicture | known not affected: 1 | 2026-09-29T20:55:06+00:00 | Vulnerability · Source |
| CVE-2026-102319 | redhat_vex | chromium-browser: chromium-browser: Information disclosure via uninitialized GPU resource | known not affected: 1 | 2026-09-29T20:55:02+00:00 | Vulnerability · Source |
| CVE-2026-102316 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T20:55:01+00:00 | Vulnerability · Source |
| CVE-2026-102315 | redhat_vex | chromium-browser: chromium-browser: Information disclosure outside sandbox via uninitialized resource | known not affected: 1 | 2026-09-29T20:54:58+00:00 | Vulnerability · Source |
| CVE-2026-102306 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution in Bluetooth via crafted HTML page | known not affected: 1 | 2026-09-29T20:54:58+00:00 | Vulnerability · Source |
| CVE-2026-102313 | redhat_vex | chromium-browser: chromium-browser: Information disclosure via uninitialized resource in ANGLE | known not affected: 1 | 2026-09-29T20:54:57+00:00 | Vulnerability · Source |
| CVE-2026-102308 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Views | known not affected: 1 | 2026-09-29T20:54:57+00:00 | Vulnerability · Source |
| CVE-2026-102307 | redhat_vex | chromium-browser: chromium-browser: information disclosure via crafted HTML page | known not affected: 1 | 2026-09-29T20:54:56+00:00 | Vulnerability · Source |
| CVE-2026-102304 | redhat_vex | chromium-browser: chromium-browser: Use after free in Passwords | known not affected: 1 | 2026-09-29T20:54:51+00:00 | Vulnerability · Source |
| CVE-2026-102299 | redhat_vex | chromium-browser: chromium-browser: Type confusion in V8 | known not affected: 1 | 2026-09-29T20:54:51+00:00 | Vulnerability · Source |
| CVE-2026-102253 | redhat_vex | iperf3: iperf3: Denial of Service via UDP receive worker infinite loop | known affected: 9 | 2026-09-29T20:54:46+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 225 known not affected: 4 | 2026-09-29T20:54:44+00:00 | Vulnerability · Source |
| CVE-2026-76835 | redhat_vex | github.com/oauth2-proxy/oauth2-proxy: OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set | known affected: 2 known not affected: 3 | 2026-09-29T20:54:35+00:00 | Vulnerability · Source |
| CVE-2026-13732 | redhat_vex | gdb: gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF | fixed: 74 known affected: 7 | 2026-09-29T20:41:09+00:00 | Vulnerability · Source |
| CVE-2026-102320 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in CORS | known not affected: 1 | 2026-09-29T20:26:29+00:00 | Vulnerability · Source |