VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302983 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-100690 | redhat_vex | github.com/gohugoio/hugo: Hugo: Arbitrary file read via symbolic link sandbox escape | fixed: 3 known affected: 5 known not affected: 4 | 2026-09-29T19:00:49+00:00 | Vulnerability · Source |
| CVE-2026-97918 | redhat_vex | kernel: tracing: Undo the registration when enabling the histogram trigger fails | known affected: 234 known not affected: 42 | 2026-09-29T19:00:45+00:00 | Vulnerability · Source |
| CVE-2026-97916 | redhat_vex | kernel: accel/ivpu: Validate firmware log buffer metadata | known affected: 76 known not affected: 200 | 2026-09-29T19:00:42+00:00 | Vulnerability · Source |
| CVE-2026-97917 | redhat_vex | kernel: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr | known affected: 183 known not affected: 93 | 2026-09-29T19:00:40+00:00 | Vulnerability · Source |
| CVE-2026-97475 | redhat_vex | kernel: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration | known affected: 185 known not affected: 91 | 2026-09-29T19:00:34+00:00 | Vulnerability · Source |
| CVE-2026-97474 | redhat_vex | kernel: wifi: iwlwifi: mld: purge async notifications upon nic error | known affected: 183 known not affected: 93 | 2026-09-29T19:00:30+00:00 | Vulnerability · Source |
| CVE-2026-95366 | redhat_vex | chromium-browser: chromium-browser: Web origin policy bypass via use of released resource in Core | known not affected: 1 | 2026-09-29T19:00:27+00:00 | Vulnerability · Source |
| CVE-2026-95371 | redhat_vex | chromium-browser: chromium-browser: User interface spoofing via missing authorization in Views | known not affected: 1 | 2026-09-29T19:00:27+00:00 | Vulnerability · Source |
| CVE-2026-95364 | redhat_vex | chromium-browser: chromium-browser: User interface spoofing via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:24+00:00 | Vulnerability · Source |
| CVE-2026-95359 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-29T19:00:22+00:00 | Vulnerability · Source |
| CVE-2026-95344 | redhat_vex | chromium-browser: chromium-browser: Site isolation bypass via race condition in DevTools | known not affected: 1 | 2026-09-29T19:00:20+00:00 | Vulnerability · Source |
| CVE-2026-95317 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in MediaCapture | known not affected: 1 | 2026-09-29T19:00:20+00:00 | Vulnerability · Source |
| CVE-2026-95312 | redhat_vex | chromium-browser: chromium-browser: Cross-origin information disclosure via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:19+00:00 | Vulnerability · Source |
| CVE-2026-95297 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in Contextual Tasks | known not affected: 1 | 2026-09-29T19:00:15+00:00 | Vulnerability · Source |
| CVE-2026-95287 | redhat_vex | chromium-browser: Chromium: Site isolation bypass via missing authorization in Navigation | known not affected: 1 | 2026-09-29T19:00:14+00:00 | Vulnerability · Source |
| CVE-2026-95285 | redhat_vex | chromium-browser: chromium-browser: Web origin policy bypass via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:14+00:00 | Vulnerability · Source |
| CVE-2026-95275 | redhat_vex | chromium-browser: chromium-browser: Security policy bypass in MediaStream via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:14+00:00 | Vulnerability · Source |
| CVE-2026-95365 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution in IndexedDB via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:12+00:00 | Vulnerability · Source |
| CVE-2026-84501 | redhat_vex | zookeeper: Apache ZooKeeper: Operational log forgery via newline injection | known affected: 22 known not affected: 5 | 2026-09-29T19:00:12+00:00 | Vulnerability · Source |
| CVE-2026-95347 | redhat_vex | chromium-browser: chromium-browser: Use after free in Updater | known not affected: 1 | 2026-09-29T19:00:10+00:00 | Vulnerability · Source |
| CVE-2026-95356 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via WindowDialog use-after-free | known not affected: 1 | 2026-09-29T19:00:10+00:00 | Vulnerability · Source |
| CVE-2026-95372 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in Chromecast | known not affected: 1 | 2026-09-29T19:00:10+00:00 | Vulnerability · Source |
| CVE-2026-95343 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:09+00:00 | Vulnerability · Source |
| CVE-2026-95345 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:09+00:00 | Vulnerability · Source |
| CVE-2026-95335 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via use-after-free in HID | known not affected: 1 | 2026-09-29T19:00:07+00:00 | Vulnerability · Source |
| CVE-2026-95325 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:04+00:00 | Vulnerability · Source |
| CVE-2026-95334 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:04+00:00 | Vulnerability · Source |
| CVE-2026-95324 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-29T19:00:03+00:00 | Vulnerability · Source |
| CVE-2026-95322 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via out-of-bounds write in GPU component | known not affected: 1 | 2026-09-29T19:00:03+00:00 | Vulnerability · Source |
| CVE-2026-95319 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via use-after-free in printing | known not affected: 1 | 2026-09-29T19:00:01+00:00 | Vulnerability · Source |
| CVE-2026-95299 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution outside sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:01+00:00 | Vulnerability · Source |
| CVE-2026-95298 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via UI interaction | known not affected: 1 | 2026-09-29T19:00:01+00:00 | Vulnerability · Source |
| CVE-2026-95283 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in Tint | known not affected: 1 | 2026-09-29T19:00:00+00:00 | Vulnerability · Source |
| CVE-2026-95286 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution in sandbox via crafted HTML page | known not affected: 1 | 2026-09-29T19:00:00+00:00 | Vulnerability · Source |
| CVE-2026-84445 | redhat_vex | google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests | fixed: 141 known affected: 876 known not affected: 1691 | 2026-09-29T18:59:53+00:00 | Vulnerability · Source |
| CVE-2026-53669 | redhat_vex | react-router: React Router: Open Redirect vulnerability via backslashes in navigation components | fixed: 6 known affected: 142 known not affected: 6 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-39821 | redhat_vex | golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing | fixed: 1964 known affected: 164 known not affected: 4296 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-59969 | redhat_vex | zookeeper: Apache ZooKeeper: Improper certificate validation in FIPS mode allows quorum compromise | known affected: 31 known not affected: 5 | 2026-09-29T18:59:41+00:00 | Vulnerability · Source |
| CVE-2026-97473 | redhat_vex | kernel: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() | known not affected: 1 | 2026-09-29T18:51:51+00:00 | Vulnerability · Source |
| CVE-2026-95355 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in Navigation | known not affected: 1 | 2026-09-29T18:48:43+00:00 | Vulnerability · Source |
| CVE-2026-95304 | redhat_vex | chromium-browser: chromium-browser: Out of bounds write in V8 | known not affected: 1 | 2026-09-29T18:48:31+00:00 | Vulnerability · Source |
| CVE-2026-95293 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-29T18:48:27+00:00 | Vulnerability · Source |
| CVE-2026-95282 | redhat_vex | chromium-browser: chromium-browser: Use after free in Platform | known not affected: 1 | 2026-09-29T18:48:20+00:00 | Vulnerability · Source |
| CVE-2026-59869 | redhat_vex | js-yaml: js-yaml: Denial of Service via crafted YAML documents | fixed: 565 known affected: 74 known not affected: 11022 | 2026-09-29T18:48:14+00:00 | Vulnerability · Source |
| CVE-2026-97915 | redhat_vex | kernel: accel/ivpu: Limit firmware log name prints to field size | known not affected: 1 | 2026-09-29T18:45:45+00:00 | Vulnerability · Source |
| CVE-2026-102598 | redhat_vex | werkzeug: werkzeug: Denial of Service via safe_join() Windows special device paths | known not affected: 2 | 2026-09-29T18:45:45+00:00 | Vulnerability · Source |
| CVE-2026-97914 | redhat_vex | kernel: accel: ethosu: Fix ethosu_job_open() return value | known not affected: 1 | 2026-09-29T18:45:42+00:00 | Vulnerability · Source |
| CVE-2026-97913 | redhat_vex | kernel: accel: ethosu: Ensure cmd stream ends with a stop op | known not affected: 1 | 2026-09-29T18:45:41+00:00 | Vulnerability · Source |
| CVE-2026-97912 | redhat_vex | kernel: accel: ethosu: Ensure SRAM size is 0 on mapping failure | known affected: 234 known not affected: 42 | 2026-09-29T18:45:40+00:00 | Vulnerability · Source |
| CVE-2026-97711 | redhat_vex | serialize-javascript: serialize-javascript: Cross-Site Scripting via unescaped script-closing tags in serialized functions | known affected: 1 known not affected: 6 | 2026-09-29T18:45:37+00:00 | Vulnerability · Source |