VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304374 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97399 | redhat_vex | glibc: glibc: Denial of Service via out-of-bounds read in strncasecmp | known affected: 676 known not affected: 1 | 2026-10-02T18:49:03+00:00 | Vulnerability · Source |
| CVE-2026-101100 | redhat_vex | @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup | known affected: 1 | 2026-10-02T18:46:04+00:00 | Vulnerability · Source |
| CVE-2026-95369 | redhat_vex | chromium-browser: Inappropriate implementation in XML | known not affected: 1 | 2026-10-02T18:46:03+00:00 | Vulnerability · Source |
| CVE-2026-93750 | redhat_vex | http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validation | known affected: 223 known not affected: 5 | 2026-10-02T18:45:58+00:00 | Vulnerability · Source |
| CVE-2026-89092 | redhat_vex | glibc: nscd stack overflow leads to degraded DNS resolution | known affected: 454 known not affected: 223 | 2026-10-02T18:45:54+00:00 | Vulnerability · Source |
| CVE-2026-104861 | redhat_vex | probe-image-size: probe-image-size: Denial of Service via crafted SVG input | known affected: 2 | 2026-10-02T18:45:51+00:00 | Vulnerability · Source |
| CVE-2026-104843 | redhat_vex | uv: uv: Arbitrary code execution via malicious package extraction on Windows | known affected: 93 known not affected: 1 | 2026-10-02T18:45:45+00:00 | Vulnerability · Source |
| CVE-2026-94637 | redhat_vex | github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data | known affected: 70 known not affected: 10 | 2026-10-02T18:45:34+00:00 | Vulnerability · Source |
| CVE-2026-93749 | redhat_vex | source-map-js: source-map-js: Denial of Service via malformed indexed source maps | known affected: 99 known not affected: 78 | 2026-10-02T18:45:24+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 201 known not affected: 13 | 2026-10-02T18:45:20+00:00 | Vulnerability · Source |
| CVE-2026-93690 | redhat_vex | uri-js: uri-js: Denial of Service via malformed path segments | known affected: 53 known not affected: 10 under investigation: 243 | 2026-10-02T18:45:14+00:00 | Vulnerability · Source |
| CVE-2026-83663 | redhat_vex | github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports | known affected: 70 known not affected: 10 | 2026-10-02T18:45:09+00:00 | Vulnerability · Source |
| CVE-2026-82458 | redhat_vex | thrift: thrift: Denial of Service via excessive memory allocation | fixed: 13 known affected: 13 known not affected: 5 | 2026-10-02T18:45:06+00:00 | Vulnerability · Source |
| CVE-2026-82397 | redhat_vex | python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields | known affected: 74 | 2026-10-02T18:44:59+00:00 | Vulnerability · Source |
| CVE-2026-63209 | redhat_vex | github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing | fixed: 96 known affected: 65 known not affected: 10 under investigation: 31 | 2026-10-02T18:44:54+00:00 | Vulnerability · Source |
| CVE-2026-56862 | redhat_vex | crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages | fixed: 7273 known affected: 269 known not affected: 3464 | 2026-10-02T18:44:45+00:00 | Vulnerability · Source |
| CVE-2026-45292 | redhat_vex | opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage | fixed: 29 known affected: 26 known not affected: 439 under investigation: 4 | 2026-10-02T18:44:29+00:00 | Vulnerability · Source |
| CVE-2026-11268 | redhat_vex | chromium-browser: angle: Uninitialized Use in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T18:44:13+00:00 | Vulnerability · Source |
| CVE-2026-10919 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T18:44:13+00:00 | Vulnerability · Source |
| CVE-2026-98062 | redhat_vex | kernel: bpf: Mark signal tracepoint siginfo arguments as scalar | known affected: 183 known not affected: 93 | 2026-10-02T17:46:06+00:00 | Vulnerability · Source |
| CVE-2026-94544 | redhat_vex | next: Next.js: Information disclosure via shared cache fills in Draft Mode | known affected: 20 | 2026-10-02T17:46:06+00:00 | Vulnerability · Source |
| CVE-2026-94483 | redhat_vex | next: Next.js: Information disclosure via SSRF in Image Optimization | known affected: 20 | 2026-10-02T17:46:05+00:00 | Vulnerability · Source |
| CVE-2026-75593 | redhat_vex | github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification | fixed: 30 known affected: 86 known not affected: 199 | 2026-10-02T17:45:58+00:00 | Vulnerability · Source |
| CVE-2026-95297 | redhat_vex | chromium-browser: Missing authorization in Contextual Tasks | known not affected: 1 | 2026-10-02T17:45:57+00:00 | Vulnerability · Source |
| CVE-2026-15792 | redhat_vex | github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request | fixed: 44 known affected: 54 known not affected: 368 | 2026-10-02T17:45:25+00:00 | Vulnerability · Source |
| CVE-2026-95302 | redhat_vex | chromium-browser: Incorrect authorization in WebAPKs | known not affected: 1 | 2026-10-02T17:45:24+00:00 | Vulnerability · Source |
| CVE-2026-95375 | redhat_vex | chromium-browser: Incorrect authorization in BrowserTag | known not affected: 1 | 2026-10-02T17:45:22+00:00 | Vulnerability · Source |
| CVE-2026-95362 | redhat_vex | chromium-browser: Cross-site request forgery in DevTools | known not affected: 1 | 2026-10-02T17:45:22+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 8230 known affected: 186 known not affected: 9015 under investigation: 42 | 2026-10-02T17:42:50+00:00 | Vulnerability · Source |
| CVE-2026-95381 | redhat_vex | chromium-browser: Improper input validation in Printing | known not affected: 1 | 2026-10-02T17:42:43+00:00 | Vulnerability · Source |
| CVE-2026-104721 | redhat_vex | ch.qos.logback/logback-classic: logback-classic: Arbitrary file write via path traversal in MDC discriminator | known affected: 195 known not affected: 1 | 2026-10-02T17:40:45+00:00 | Vulnerability · Source |
| CVE-2026-102993 | redhat_vex | pypdf: pypdf: Denial of Service via crafted Roman page labels | known affected: 15 | 2026-10-02T17:40:42+00:00 | Vulnerability · Source |
| CVE-2026-100077 | redhat_vex | kernel: drm/msm: Recover HW before retire hung submit | known not affected: 276 | 2026-10-02T17:40:38+00:00 | Vulnerability · Source |
| CVE-2026-100076 | redhat_vex | kernel: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths | known not affected: 276 | 2026-10-02T17:40:35+00:00 | Vulnerability · Source |
| CVE-2026-69243 | redhat_vex | aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade | fixed: 226 known affected: 78 known not affected: 1801 | 2026-10-02T17:40:29+00:00 | Vulnerability · Source |
| CVE-2026-69097 | redhat_vex | gitpython: GitPython: Remote Code Execution via Config Injection in Submodule Names | known affected: 41 known not affected: 37 | 2026-10-02T17:40:27+00:00 | Vulnerability · Source |
| CVE-2026-59280 | redhat_vex | org.springframework/spring-webmvc: Spring Framework: Path Traversal via untrusted input in FreeMarker integration | known affected: 15 known not affected: 1 | 2026-10-02T17:40:26+00:00 | Vulnerability · Source |
| CVE-2026-59275 | redhat_vex | org.springframework.amqp/spring-amqp: Spring AMQP: Remote JVM termination via hostile AMQP message | known not affected: 2 | 2026-10-02T17:40:22+00:00 | Vulnerability · Source |
| CVE-2026-49919 | redhat_vex | freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering | known affected: 279 known not affected: 1 | 2026-10-02T17:40:20+00:00 | Vulnerability · Source |
| CVE-2026-32791 | redhat_vex | Intel Performance Counter Monitor: Intel Performance Counter Monitor: Escalation of Privilege via Untrusted Search Path | known affected: 3 | 2026-10-02T17:40:18+00:00 | Vulnerability · Source |
| CVE-2026-23937 | redhat_vex | zabbix: Data integrity loss via PSK key extraction | known not affected: 1 | 2026-10-02T17:40:16+00:00 | Vulnerability · Source |
| CVE-2026-23922 | redhat_vex | zabbix: Zabbix: OAuth client secret leak via malicious token endpoint | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-23931 | redhat_vex | zabbix: Zabbix: Information disclosure of user macro values | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-23930 | redhat_vex | zabbix: Zabbix: Denial of Service via Frontend popup.testtriggerexpr action | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-73501 | redhat_vex | github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default | fixed: 12 known affected: 89 known not affected: 38 | 2026-10-02T17:40:02+00:00 | Vulnerability · Source |
| CVE-2026-104851 | redhat_vex | fsspec: fsspec: Arbitrary code execution via crafted reference documents | known affected: 90 | 2026-10-02T17:39:57+00:00 | Vulnerability · Source |
| CVE-2026-59645 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursion | known affected: 9 known not affected: 8 | 2026-10-02T17:39:54+00:00 | Vulnerability · Source |
| CVE-2026-59642 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Data integrity bypass due to improper cryptographic binding in CMS AuthenticatedData | known affected: 35 known not affected: 7 | 2026-10-02T17:39:50+00:00 | Vulnerability · Source |
| CVE-2026-59639 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Cryptographic signature bypass | known affected: 35 known not affected: 7 | 2026-10-02T17:39:47+00:00 | Vulnerability · Source |
| CVE-2026-58063 | redhat_vex | org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Denial of Service via unbounded KDF cost in BCFKS keystore load | known affected: 9 known not affected: 8 | 2026-10-02T17:39:44+00:00 | Vulnerability · Source |