VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303550 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-13281 | redhat_vex | kube-controller-manager: Portworx Half-Blind SSRF in kube-controller-manager | known affected: 140 | 2026-09-30T14:02:25+00:00 | Vulnerability · Source |
| CVE-2026-15789 | redhat_vex | buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability | fixed: 46 known affected: 107 known not affected: 82 | 2026-09-30T14:02:25+00:00 | Vulnerability · Source |
| CVE-2026-91103 | redhat_vex | hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service | known affected: 29 | 2026-09-30T13:50:08+00:00 | Vulnerability · Source |
| CVE-2026-91100 | redhat_vex | hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. | known affected: 29 | 2026-09-30T13:49:56+00:00 | Vulnerability · Source |
| CVE-2026-91101 | redhat_vex | hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities | known affected: 29 | 2026-09-30T13:49:56+00:00 | Vulnerability · Source |
| CVE-2026-91099 | redhat_vex | hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation | known affected: 24 | 2026-09-30T13:49:56+00:00 | Vulnerability · Source |
| CVE-2026-92599 | redhat_vex | joi: joi: Denial of Service via `isoDate` validation regular expression | fixed: 9 known affected: 16 known not affected: 20 | 2026-09-30T13:49:56+00:00 | Vulnerability · Source |
| CVE-2026-62146 | redhat_vex | cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socket | known affected: 2 | 2026-09-30T13:22:49+00:00 | Vulnerability · Source |
| CVE-2026-15815 | redhat_vex | grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION | known affected: 23 known not affected: 4 under investigation: 3 | 2026-09-30T13:21:33+00:00 | Vulnerability · Source |
| CVE-2026-15792 | redhat_vex | github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request | fixed: 40 known affected: 75 known not affected: 320 | 2026-09-30T13:21:33+00:00 | Vulnerability · Source |
| CVE-2026-87022 | redhat_vex | tomcat: Apache Tomcat: WebSocket message smuggling via improper length handling | fixed: 42 known affected: 90 known not affected: 1 | 2026-09-30T13:11:54+00:00 | Vulnerability · Source |
| CVE-2026-78437 | redhat_vex | tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 request | fixed: 42 known affected: 50 known not affected: 41 | 2026-09-30T13:11:49+00:00 | Vulnerability · Source |
| CVE-2026-77762 | redhat_vex | tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulation | fixed: 42 known affected: 87 known not affected: 4 | 2026-09-30T13:11:49+00:00 | Vulnerability · Source |
| CVE-2026-77756 | redhat_vex | tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of service | fixed: 42 known affected: 87 known not affected: 4 | 2026-09-30T13:11:48+00:00 | Vulnerability · Source |
| CVE-2026-82397 | redhat_vex | python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields | known affected: 70 | 2026-09-30T13:11:37+00:00 | Vulnerability · Source |
| CVE-2026-75593 | redhat_vex | github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification | fixed: 30 known affected: 107 known not affected: 178 | 2026-09-30T13:11:28+00:00 | Vulnerability · Source |
| CVE-2026-75973 | redhat_vex | tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfiguration | fixed: 42 known affected: 90 known not affected: 1 | 2026-09-30T13:11:28+00:00 | Vulnerability · Source |
| CVE-2026-97959 | redhat_vex | kernel: net/sched: cls_route: free emptied bucket on filter move | known affected: 91 known not affected: 185 | 2026-09-30T13:09:42+00:00 | Vulnerability · Source |
| CVE-2026-93599 | redhat_vex | rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List | fixed: 59 known affected: 115 known not affected: 180 | 2026-09-30T13:09:31+00:00 | Vulnerability · Source |
| CVE-2026-95352 | redhat_vex | chromium-browser: chromium-browser: Web origin policy bypass via crafted extension in DevTools | known not affected: 1 | 2026-09-30T13:09:31+00:00 | Vulnerability · Source |
| CVE-2026-91990 | redhat_vex | tornado: Tornado: Denial of Service via memory amplification in multipart parsing | known affected: 63 known not affected: 9 | 2026-09-30T13:09:31+00:00 | Vulnerability · Source |
| CVE-2026-103012 | redhat_vex | claude-code: claude-code: Security policy bypass via improper credential prioritization | known affected: 1 | 2026-09-30T12:27:42+00:00 | Vulnerability · Source |
| CVE-2026-103242 | redhat_vex | rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tag | known affected: 51 known not affected: 19 | 2026-09-30T12:24:42+00:00 | Vulnerability · Source |
| CVE-2026-73581 | redhat_vex | tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists | fixed: 42 known affected: 68 known not affected: 22 | 2026-09-30T12:24:37+00:00 | Vulnerability · Source |
| CVE-2026-87614 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in ServiceWorker | known not affected: 1 | 2026-09-30T12:20:52+00:00 | Vulnerability · Source |
| CVE-2026-87486 | redhat_vex | chromium-browser: chromium-browser: Clickjacking in TrustedWebActivities | known not affected: 1 | 2026-09-30T12:20:52+00:00 | Vulnerability · Source |
| CVE-2026-87610 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in Omnibox | known not affected: 1 | 2026-09-30T12:20:32+00:00 | Vulnerability · Source |
| CVE-2026-87590 | redhat_vex | chromium-browser: chromium-browser: Improper input validation in Passwords | known not affected: 1 | 2026-09-30T12:20:31+00:00 | Vulnerability · Source |
| CVE-2026-87589 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in SiteIsolation | known not affected: 1 | 2026-09-30T12:20:27+00:00 | Vulnerability · Source |
| CVE-2026-87584 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in WebUI | known not affected: 1 | 2026-09-30T12:20:26+00:00 | Vulnerability · Source |
| CVE-2026-87580 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in WebAppInstalls | known not affected: 1 | 2026-09-30T12:20:26+00:00 | Vulnerability · Source |
| CVE-2026-87576 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-30T12:20:24+00:00 | Vulnerability · Source |
| CVE-2026-87563 | redhat_vex | chromium-browser: chromium-browser: Origin validation error in Paint | known not affected: 1 | 2026-09-30T12:20:21+00:00 | Vulnerability · Source |
| CVE-2026-87552 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in TrustedWebActivities | known not affected: 1 | 2026-09-30T12:20:21+00:00 | Vulnerability · Source |
| CVE-2026-87541 | redhat_vex | chromium-browser: chromium-browser: Information leak in Navigation | known not affected: 1 | 2026-09-30T12:20:17+00:00 | Vulnerability · Source |
| CVE-2026-87539 | redhat_vex | chromium-browser: chromium-browser: Observable discrepancy in Network | known not affected: 1 | 2026-09-30T12:20:15+00:00 | Vulnerability · Source |
| CVE-2026-87515 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in FileAPI | known not affected: 1 | 2026-09-30T12:20:12+00:00 | Vulnerability · Source |
| CVE-2026-87511 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in DevTools | known not affected: 1 | 2026-09-30T12:20:11+00:00 | Vulnerability · Source |
| CVE-2026-87490 | redhat_vex | chromium-browser: chromium-browser: Information leak in Transactions Platform | known not affected: 1 | 2026-09-30T12:20:10+00:00 | Vulnerability · Source |
| CVE-2026-87483 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in Browser | known not affected: 1 | 2026-09-30T12:20:09+00:00 | Vulnerability · Source |
| CVE-2026-87430 | redhat_vex | chromium-browser: chromium-browser: Buffer overflow in WebRTC | known not affected: 1 | 2026-09-30T12:20:09+00:00 | Vulnerability · Source |
| CVE-2026-87429 | redhat_vex | chromium-browser: chromium-browser: Missing authorization in ServiceWorker | known not affected: 1 | 2026-09-30T12:20:07+00:00 | Vulnerability · Source |
| CVE-2026-87432 | redhat_vex | chromium-browser: chromium-browser: Incorrect authorization in Navigation | known not affected: 1 | 2026-09-30T12:20:06+00:00 | Vulnerability · Source |
| CVE-2026-87628 | redhat_vex | chromium-browser: chromium-browser: Use after free in Cast | known not affected: 1 | 2026-09-30T12:20:01+00:00 | Vulnerability · Source |
| CVE-2026-87585 | redhat_vex | chromium-browser: chromium-browser: Double free in PDFium | known not affected: 1 | 2026-09-30T12:20:00+00:00 | Vulnerability · Source |
| CVE-2026-87581 | redhat_vex | chromium-browser: chromium-browser: Use after free in Payments | known not affected: 1 | 2026-09-30T12:19:56+00:00 | Vulnerability · Source |
| CVE-2026-87558 | redhat_vex | chromium-browser: chromium-browser: Use after free in Payments | known not affected: 1 | 2026-09-30T12:19:51+00:00 | Vulnerability · Source |
| CVE-2026-87578 | redhat_vex | chromium-browser: chromium-browser: Use after free in Receiver | known not affected: 1 | 2026-09-30T12:19:51+00:00 | Vulnerability · Source |
| CVE-2026-87555 | redhat_vex | chromium-browser: chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-09-30T12:19:47+00:00 | Vulnerability · Source |
| CVE-2026-87547 | redhat_vex | chromium-browser: chromium-browser: Incorrect reference resolution in FileSystem | known not affected: 1 | 2026-09-30T12:19:46+00:00 | Vulnerability · Source |