VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286444 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-65920 | redhat_vex | diffusers: Diffusers: Information disclosure via path traversal vulnerability | known affected: 16 | 2026-07-27T10:51:35+00:00 | Vulnerability · Source |
| CVE-2026-65903 | redhat_vex | dompurify: DOMPurify: Security bypass allows injection of malicious content | known affected: 45 known not affected: 1 under investigation: 48 | 2026-07-27T10:17:09+00:00 | Vulnerability · Source |
| CVE-2026-50263 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() | fixed: 1006 known affected: 14 | 2026-07-27T09:48:21+00:00 | Vulnerability · Source |
| CVE-2026-50262 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes | fixed: 1006 known affected: 14 | 2026-07-27T09:48:16+00:00 | Vulnerability · Source |
| CVE-2026-50264 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat | fixed: 1006 known affected: 14 | 2026-07-27T09:48:12+00:00 | Vulnerability · Source |
| CVE-2026-50261 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() | fixed: 1006 known affected: 14 | 2026-07-27T09:48:08+00:00 | Vulnerability · Source |
| CVE-2026-50260 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() | fixed: 1006 known affected: 14 | 2026-07-27T09:48:08+00:00 | Vulnerability · Source |
| CVE-2026-50258 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels | fixed: 1006 known affected: 14 | 2026-07-27T09:47:58+00:00 | Vulnerability · Source |
| CVE-2026-50257 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() | fixed: 1006 known affected: 14 | 2026-07-27T09:47:54+00:00 | Vulnerability · Source |
| CVE-2026-50256 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch | fixed: 1006 known affected: 14 | 2026-07-27T09:47:51+00:00 | Vulnerability · Source |
| CVE-2026-16807 | redhat_vex | chromium-browser: Google Chrome Codecs: Sandbox escape via crafted HTML page | known not affected: 1 | 2026-07-27T09:42:31+00:00 | Vulnerability · Source |
| CVE-2026-10517 | redhat_vex | clair: clair: unauthenticated SSRF via manifest layer URI enables internal network reconnaissance | known not affected: 1 | 2026-07-27T09:34:51+00:00 | Vulnerability · Source |
| CVE-2026-64331 | redhat_vex | kernel: usbip: vudc: fix NULL deref in vep_dequeue() | known not affected: 274 | 2026-07-27T09:34:49+00:00 | Vulnerability · Source |
| CVE-2026-64269 | redhat_vex | kernel: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | known not affected: 275 | 2026-07-27T09:34:44+00:00 | Vulnerability · Source |
| CVE-2026-16410 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 23 | 2026-07-27T09:34:41+00:00 | Vulnerability · Source |
| CVE-2026-16409 | redhat_vex | firefox: thunderbird: Invalid pointer in the Security: PSM component | known not affected: 23 | 2026-07-27T09:34:40+00:00 | Vulnerability · Source |
| CVE-2026-16408 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video: Playback component | known affected: 6 known not affected: 12 | 2026-07-27T09:34:39+00:00 | Vulnerability · Source |
| CVE-2026-16407 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Service Workers component | known not affected: 23 | 2026-07-27T09:34:34+00:00 | Vulnerability · Source |
| CVE-2026-16406 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking component | known affected: 6 known not affected: 12 | 2026-07-27T09:34:29+00:00 | Vulnerability · Source |
| CVE-2026-16404 | redhat_vex | firefox: Spoofing issue in Firefox for Android | known not affected: 12 | 2026-07-27T09:34:27+00:00 | Vulnerability · Source |
| CVE-2026-16403 | redhat_vex | firefox: thunderbird: Spoofing issue in the Address Bar component | known not affected: 23 | 2026-07-27T09:34:25+00:00 | Vulnerability · Source |
| CVE-2026-64309 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) | known affected: 184 known not affected: 90 | 2026-07-27T09:25:25+00:00 | Vulnerability · Source |
| CVE-2026-16401 | redhat_vex | firefox: thunderbird: Privilege escalation in the Data Loss Prevention component | known not affected: 18 | 2026-07-27T09:25:18+00:00 | Vulnerability · Source |
| CVE-2026-64477 | redhat_vex | kernel: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled | known affected: 184 known not affected: 90 | 2026-07-27T09:25:15+00:00 | Vulnerability · Source |
| CVE-2026-64363 | redhat_vex | kernel: HID: appleir: fix UAF on pending key_up_timer in remove() | known affected: 260 known not affected: 14 | 2026-07-27T09:25:12+00:00 | Vulnerability · Source |
| CVE-2026-16402 | redhat_vex | firefox: thunderbird: Integer overflow in the Graphics: ImageLib component | known not affected: 23 | 2026-07-27T09:25:11+00:00 | Vulnerability · Source |
| CVE-2026-16400 | redhat_vex | firefox: thunderbird: Information disclosure in the DOM: Security component | known not affected: 23 | 2026-07-27T09:25:09+00:00 | Vulnerability · Source |
| CVE-2026-16399 | redhat_vex | firefox: thunderbird: Site isolation issue in the DOM: Navigation component | known not affected: 20 | 2026-07-27T09:25:07+00:00 | Vulnerability · Source |
| CVE-2026-16398 | redhat_vex | firefox: thunderbird: Site isolation issue in the Graphics component | known not affected: 23 | 2026-07-27T09:25:05+00:00 | Vulnerability · Source |
| CVE-2026-16397 | redhat_vex | firefox: Clickjacking issue in the WebExtensions component in Firefox for Android | known not affected: 12 | 2026-07-27T09:25:02+00:00 | Vulnerability · Source |
| CVE-2026-16395 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video component | known not affected: 23 | 2026-07-27T09:25:01+00:00 | Vulnerability · Source |
| CVE-2026-16394 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:58+00:00 | Vulnerability · Source |
| CVE-2026-16393 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:57+00:00 | Vulnerability · Source |
| CVE-2026-16386 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:53+00:00 | Vulnerability · Source |
| CVE-2026-16388 | redhat_vex | firefox: thunderbird: Sandbox escape in the DOM: Networking component | known not affected: 23 | 2026-07-27T09:24:53+00:00 | Vulnerability · Source |
| CVE-2026-16385 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: WebGPU component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:50+00:00 | Vulnerability · Source |
| CVE-2026-16384 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:48+00:00 | Vulnerability · Source |
| CVE-2026-16382 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Service Workers component | known not affected: 23 | 2026-07-27T09:24:47+00:00 | Vulnerability · Source |
| CVE-2026-16380 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking component | known not affected: 23 | 2026-07-27T09:24:43+00:00 | Vulnerability · Source |
| CVE-2026-16378 | redhat_vex | firefox: thunderbird: Other issue in the DOM: Copy & Paste and Drag & Drop component | known not affected: 23 | 2026-07-27T09:24:39+00:00 | Vulnerability · Source |
| CVE-2026-16376 | redhat_vex | firefox: thunderbird: Denial-of-service in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:35+00:00 | Vulnerability · Source |
| CVE-2026-16373 | redhat_vex | firefox: Information disclosure in the Privacy component in Firefox for Android | known not affected: 12 | 2026-07-27T09:24:34+00:00 | Vulnerability · Source |
| CVE-2026-16372 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Content Processes component | known not affected: 23 | 2026-07-27T09:24:34+00:00 | Vulnerability · Source |
| CVE-2026-16370 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Networking component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:33+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-07-27T09:10:44+00:00 | Vulnerability · Source |
| CVE-2026-16411 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 153 | known not affected: 23 | 2026-07-27T08:58:51+00:00 | Vulnerability · Source |
| CVE-2026-16367 | redhat_vex | firefox: thunderbird: Sandbox escape due to invalid pointer in the Disability Access APIs component | known not affected: 23 | 2026-07-27T08:58:47+00:00 | Vulnerability · Source |
| CVE-2026-16365 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Workers component | known not affected: 23 | 2026-07-27T08:58:37+00:00 | Vulnerability · Source |
| CVE-2026-14241 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 152.0.4 | known not affected: 12 | 2026-07-27T08:58:33+00:00 | Vulnerability · Source |
| CVE-2026-16364 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | known not affected: 18 | 2026-07-27T08:57:59+00:00 | Vulnerability · Source |