VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304363 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-85088 | redhat_vex | thrift: thrift: Man-in-the-middle attacks via improper certificate validation | fixed: 13 known affected: 12 | 2026-10-02T22:06:06+00:00 | Vulnerability · Source |
| CVE-2026-83745 | redhat_vex | thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport | fixed: 13 known affected: 12 | 2026-10-02T22:06:02+00:00 | Vulnerability · Source |
| CVE-2026-66858 | redhat_vex | thrift: Apache Thrift: Denial of Service via deeply nested unknown fields | fixed: 13 known affected: 12 | 2026-10-02T22:05:59+00:00 | Vulnerability · Source |
| CVE-2026-66837 | redhat_vex | thrift: thrift: Denial of Service via buffer overflow in PHP bindings | fixed: 13 known affected: 12 | 2026-10-02T22:05:56+00:00 | Vulnerability · Source |
| CVE-2026-66081 | redhat_vex | thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings | fixed: 13 known affected: 12 | 2026-10-02T22:05:54+00:00 | Vulnerability · Source |
| CVE-2026-66054 | redhat_vex | thrift: thrift: Denial of Service via improper handling of compressed data | fixed: 13 known affected: 12 | 2026-10-02T22:05:52+00:00 | Vulnerability · Source |
| CVE-2026-21729 | redhat_vex | Loki: Loki: Denial of Service via large limit queries | fixed: 7 | 2026-10-02T22:05:33+00:00 | Vulnerability · Source |
| CVE-2024-28180 | redhat_vex | jose-go: improper handling of highly compressed data | fixed: 1855 known affected: 94 known not affected: 14551 | 2026-10-02T22:00:08+00:00 | Vulnerability · Source |
| CVE-2024-24786 | redhat_vex | golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON | fixed: 2152 known affected: 112 known not affected: 11937 under investigation: 57 | 2026-10-02T21:59:58+00:00 | Vulnerability · Source |
| CVE-2022-41722 | redhat_vex | golang: path/filepath: path-filepath filepath.Clean path traversal | fixed: 226 known affected: 26 known not affected: 2340 under investigation: 1 | 2026-10-02T21:59:51+00:00 | Vulnerability · Source |
| CVE-2022-30631 | redhat_vex | golang: compress/gzip: stack exhaustion in Reader.Read | fixed: 4253 known affected: 91 known not affected: 2159 | 2026-10-02T21:59:50+00:00 | Vulnerability · Source |
| CVE-2026-42507 | redhat_vex | net/textproto: golang: Golang net/textproto: Misleading error messages via input injection | fixed: 227 known affected: 381 known not affected: 182 | 2026-10-02T21:50:39+00:00 | Vulnerability · Source |
| CVE-2026-42505 | redhat_vex | crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello | fixed: 102 known affected: 366 known not affected: 6 | 2026-10-02T21:50:26+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 890 known affected: 332 known not affected: 321 | 2026-10-02T21:50:01+00:00 | Vulnerability · Source |
| CVE-2026-39828 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions | fixed: 482 known affected: 83 known not affected: 4987 | 2026-10-02T21:45:40+00:00 | Vulnerability · Source |
| CVE-2026-63912 | redhat_vex | kernel: xfrm: esp: restore combined single-frag length gate | fixed: 303 known affected: 160 known not affected: 29 | 2026-10-02T21:31:03+00:00 | Vulnerability · Source |
| CVE-2020-11023 | redhat_vex | jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods | fixed: 5510 known affected: 169 known not affected: 3184 | 2026-10-02T21:29:57+00:00 | Vulnerability · Source |
| CVE-2025-30156 | redhat_vex | kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass | fixed: 1457 known affected: 90 known not affected: 32 | 2026-10-02T21:28:26+00:00 | Vulnerability · Source |
| CVE-2026-98160 | redhat_vex | kernel: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() | known not affected: 276 | 2026-10-02T20:49:28+00:00 | Vulnerability · Source |
| CVE-2026-104873 | redhat_vex | langgraph-sdk: langgraph-sdk: Authorization bypass via improper resource handler registration | known affected: 8 | 2026-10-02T20:38:10+00:00 | Vulnerability · Source |
| CVE-2026-103877 | redhat_vex | org.apache.directory.api/api-ldap-client-api: Apache Directory LDAP API: Remote code execution via untrusted Java object deserialization | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-103885 | redhat_vex | org.apache.directory.api/api-ldap-model: Apache Directory LDAP API: Denial of Service via crafted telephone numbers | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-102731 | redhat_vex | org.apache.directory.api/api-asn1-ber: Apache Directory LDAP API: Denial of Service via excessive memory allocation | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-103552 | redhat_vex | org.apache.directory.api/api-ldap-codec-core: Apache Directory LDAP API: Denial of Service via deeply nested search filter | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-61373 | redhat_vex | org.apache.thrift/libthrift: Apache Thrift: Denial of Service via unbounded resource allocation in TSaslNonblockingServer | known affected: 10 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-100079 | redhat_vex | kernel: usb: typec: ucsi: unregister debugfs entries on teardown | known affected: 183 known not affected: 93 | 2026-10-02T20:29:21+00:00 | Vulnerability · Source |
| CVE-2026-64001 | redhat_vex | kernel: ALSA: pcm: oss: Fix setup list UAF on proc write error | known affected: 198 known not affected: 76 | 2026-10-02T20:04:21+00:00 | Vulnerability · Source |
| CVE-2026-63973 | redhat_vex | kernel: net: mana: Add NULL guards in teardown path to prevent panic on attach failure | known affected: 232 known not affected: 43 | 2026-10-02T19:59:41+00:00 | Vulnerability · Source |
| CVE-2026-104988 | redhat_vex | pki-core: dogtag-pki: redhat-pki: pki: EST fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject | known affected: 11 known not affected: 78 | 2026-10-02T19:53:49+00:00 | Vulnerability · Source |
| CVE-2025-61726 | redhat_vex | golang: net/url: Memory exhaustion in query parameter parsing in net/url | fixed: 11002 known affected: 442 known not affected: 17464 | 2026-10-02T19:52:54+00:00 | Vulnerability · Source |
| CVE-2026-104855 | redhat_vex | wasmtime: wasmtime: Memory corruption via preemption checks during bulk operations | known affected: 4 known not affected: 2 | 2026-10-02T19:50:14+00:00 | Vulnerability · Source |
| CVE-2025-14920 | redhat_vex | transformers: code execution when processing a malicious Perceiver model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-10-02T19:50:02+00:00 | Vulnerability · Source |
| CVE-2026-67289 | redhat_vex | FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection | fixed: 546 known affected: 5 | 2026-10-02T19:30:21+00:00 | Vulnerability · Source |
| CVE-2026-102273 | redhat_vex | pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets | known affected: 79 known not affected: 164 | 2026-10-02T19:28:01+00:00 | Vulnerability · Source |
| CVE-2026-87604 | redhat_vex | chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read | known affected: 22 known not affected: 23 | 2026-10-02T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-73556 | redhat_vex | vllm: vLLM: Denial of Service via Regular Expression processing | fixed: 16 known affected: 14 known not affected: 4 | 2026-10-02T19:19:19+00:00 | Vulnerability · Source |
| CVE-2026-44223 | redhat_vex | vllm: vLLM: Denial of Service via malformed tensor shape in speculative decoding | fixed: 29 known affected: 6 known not affected: 6 | 2026-10-02T19:19:14+00:00 | Vulnerability · Source |
| CVE-2026-44222 | redhat_vex | vllm: vLLM: Denial of Service via malformed multimodal input or token injection | fixed: 6 known affected: 12 known not affected: 4 | 2026-10-02T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-9899 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 9 | 2026-10-02T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-41523 | redhat_vex | vllm: vLLM: Arbitrary code execution via malicious HuggingFace model | fixed: 46 known affected: 2 known not affected: 9 | 2026-10-02T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-79118 | redhat_vex | chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:17+00:00 | Vulnerability · Source |
| CVE-2026-17832 | redhat_vex | chromium-browser: angle: chromium-browser: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:14+00:00 | Vulnerability · Source |
| CVE-2026-43237 | redhat_vex | kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 | fixed: 612 known affected: 80 known not affected: 32 | 2026-10-02T19:10:09+00:00 | Vulnerability · Source |
| CVE-2026-7354 | redhat_vex | chromium-browser: angle: Out of bounds read and write in Angle | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-14386 | redhat_vex | chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-15109 | redhat_vex | chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-17691 | redhat_vex | chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-79275 | redhat_vex | chromium-browser: angle: ANGLE: Arbitrary code execution via use after free | fixed: 92 known affected: 7 known not affected: 27 | 2026-10-02T19:07:07+00:00 | Vulnerability · Source |
| CVE-2026-97399 | redhat_vex | glibc: glibc: Denial of Service via out-of-bounds read in strncasecmp | known affected: 676 known not affected: 1 | 2026-10-02T18:49:03+00:00 | Vulnerability · Source |
| CVE-2026-101100 | redhat_vex | @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup | known affected: 1 | 2026-10-02T18:46:04+00:00 | Vulnerability · Source |