VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4154 | redhat_vex | gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow | fixed: 587 known affected: 6 | 2026-06-30T03:51:46+00:00 | Vulnerability · Source |
| CVE-2026-4153 | redhat_vex | gimp: GIMP: Remote Code Execution via PSP file parsing | fixed: 587 known affected: 6 | 2026-06-30T03:51:44+00:00 | Vulnerability · Source |
| CVE-2026-4152 | redhat_vex | gimp: GIMP: Remote Code Execution via malicious JP2 file parsing | fixed: 168 known affected: 24 known not affected: 5 | 2026-06-30T03:51:41+00:00 | Vulnerability · Source |
| CVE-2026-4151 | redhat_vex | gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow | fixed: 48 known affected: 24 known not affected: 5 | 2026-06-30T03:51:40+00:00 | Vulnerability · Source |
| CVE-2026-4150 | redhat_vex | GIMP: GIMP: Arbitrary code execution via specially crafted PSD file | fixed: 587 known affected: 6 | 2026-06-30T03:51:37+00:00 | Vulnerability · Source |
| CVE-2026-3872 | redhat_vex | keycloak: Keycloak: Information disclosure due to redirect_uri validation bypass | fixed: 20 | 2026-06-30T03:51:31+00:00 | Vulnerability · Source |
| CVE-2026-3608 | redhat_vex | Kea: Kea: Denial of Service via maliciously crafted message | fixed: 168 | 2026-06-30T03:51:30+00:00 | Vulnerability · Source |
| CVE-2026-3605 | redhat_vex | Vault: Vault: Denial of Service due to unauthorized secret deletion via policy bypass | known affected: 6 known not affected: 7 | 2026-06-30T03:51:27+00:00 | Vulnerability · Source |
| CVE-2026-3520 | redhat_vex | multer: Multer: Denial of Service via malformed requests | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T03:51:22+00:00 | Vulnerability · Source |
| CVE-2026-53461 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds heap write in ICON decoder | known affected: 7 known not affected: 7 | 2026-06-30T03:51:11+00:00 | Vulnerability · Source |
| CVE-2026-53460 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via missing memory request check | fixed: 51 known affected: 7 | 2026-06-30T03:51:09+00:00 | Vulnerability · Source |
| CVE-2026-53203 | redhat_vex | kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl | known affected: 184 known not affected: 90 | 2026-06-30T03:50:59+00:00 | Vulnerability · Source |
| CVE-2026-53145 | redhat_vex | kernel: drm/gem: Try to fix change_handle ioctl, attempt 4 | known affected: 260 under investigation: 14 | 2026-06-30T03:50:37+00:00 | Vulnerability · Source |
| CVE-2026-52952 | redhat_vex | kernel: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset | known affected: 76 known not affected: 198 | 2026-06-30T03:49:44+00:00 | Vulnerability · Source |
| CVE-2026-52951 | redhat_vex | kernel: drm/xe/dma-buf: handle empty bo and UAF races | known affected: 184 known not affected: 90 | 2026-06-30T03:49:42+00:00 | Vulnerability · Source |
| CVE-2026-52845 | redhat_vex | github.com/caddyserver/caddy: Caddy: Remote client can inject or override identity headers via header normalization | known not affected: 1 | 2026-06-30T03:49:29+00:00 | Vulnerability · Source |
| CVE-2026-49759 | redhat_vex | erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk | known not affected: 41 | 2026-06-30T03:48:48+00:00 | Vulnerability · Source |
| CVE-2026-49468 | redhat_vex | litellm: LiteLLM: Authentication Bypass via Host Header Injection | known affected: 6 | 2026-06-30T03:48:47+00:00 | Vulnerability · Source |
| CVE-2026-49218 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted DCM image with invalid dimensions | fixed: 51 known affected: 7 | 2026-06-30T03:48:43+00:00 | Vulnerability · Source |
| CVE-2026-48818 | redhat_vex | starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | fixed: 6 known not affected: 68 | 2026-06-30T03:48:35+00:00 | Vulnerability · Source |
| CVE-2026-48748 | redhat_vex | netty: Netty: Denial of Service due to memory exhaustion in HTTP/3 codec | under investigation: 1 | 2026-06-30T03:48:32+00:00 | Vulnerability · Source |
| CVE-2026-47220 | redhat_vex | envoy: Envoy: Denial of Service via missing host header in specific logging configurations | known not affected: 2 | 2026-06-30T03:48:07+00:00 | Vulnerability · Source |
| CVE-2026-46523 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MSL image leading to heap-use-after-free | fixed: 51 known affected: 7 | 2026-06-30T03:47:51+00:00 | Vulnerability · Source |
| CVE-2026-46522 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MIFF file | fixed: 51 known affected: 7 | 2026-06-30T03:47:50+00:00 | Vulnerability · Source |
| CVE-2026-46520 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write when processing multiple images | fixed: 51 known affected: 7 | 2026-06-30T03:47:47+00:00 | Vulnerability · Source |
| CVE-2026-46125 | redhat_vex | kernel: wifi: mac80211: remove station if connection prep fails | fixed: 1880 known affected: 22 known not affected: 28 under investigation: 14 | 2026-06-30T03:46:58+00:00 | Vulnerability · Source |
| CVE-2026-45972 | redhat_vex | kernel: smb: client: fix potential UAF and double free in smb2_open_file() | known affected: 184 known not affected: 90 | 2026-06-30T03:46:40+00:00 | Vulnerability · Source |
| CVE-2026-45898 | redhat_vex | kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list | fixed: 1224 known affected: 22 known not affected: 76 under investigation: 14 | 2026-06-30T03:46:34+00:00 | Vulnerability · Source |
| CVE-2026-45696 | redhat_vex | OpenEXR: OpenEXR: Denial of Service and potential information disclosure via crafted EXR file | known affected: 3 known not affected: 9 | 2026-06-30T03:46:15+00:00 | Vulnerability · Source |
| CVE-2026-45664 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder | fixed: 51 known affected: 7 | 2026-06-30T03:46:11+00:00 | Vulnerability · Source |
| CVE-2026-45591 | redhat_vex | dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption | fixed: 1441 known not affected: 2 | 2026-06-30T03:46:10+00:00 | Vulnerability · Source |
| CVE-2026-45490 | redhat_vex | dotnet: .NET SDK workload elevate: arbitrary file creation/truncation via LogFile named pipe. | known not affected: 133 | 2026-06-30T03:46:07+00:00 | Vulnerability · Source |
| CVE-2026-45359 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Invalid Connected-Components Value | known affected: 7 known not affected: 7 | 2026-06-30T03:46:01+00:00 | Vulnerability · Source |
| CVE-2026-45031 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder | fixed: 51 known not affected: 7 | 2026-06-30T03:45:45+00:00 | Vulnerability · Source |
| CVE-2026-44894 | redhat_vex | netty-codec-classes-quic: Netty: Denial of Service amplification via improper QUIC token validation | known affected: 1 | 2026-06-30T03:45:34+00:00 | Vulnerability · Source |
| CVE-2026-44484 | redhat_vex | pytorch-lightning: PyTorch Lightning: Credential harvesting via introduced functionality | known not affected: 11 | 2026-06-30T03:44:44+00:00 | Vulnerability · Source |
| CVE-2026-5201 | redhat_vex | gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image | fixed: 812 known affected: 5 known not affected: 11 | 2026-06-30T03:44:02+00:00 | Vulnerability · Source |
| CVE-2026-5081 | redhat_vex | Apache::Session::Generate::ModUniqueId: Perl: mod_unique_id: Apache HTTP Server: Apache::Session::Generate::ModUniqueId: Session ID predictability allows unauthorized access | known not affected: 1 | 2026-06-30T03:43:55+00:00 | Vulnerability · Source |
| CVE-2026-4802 | redhat_vex | cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI | fixed: 296 known not affected: 7 | 2026-06-30T03:43:46+00:00 | Vulnerability · Source |
| CVE-2026-4775 | redhat_vex | libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing | fixed: 620 known affected: 4 | 2026-06-30T03:43:39+00:00 | Vulnerability · Source |
| CVE-2026-4636 | redhat_vex | keycloak: Keycloak: UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. | fixed: 20 | 2026-06-30T03:43:28+00:00 | Vulnerability · Source |
| CVE-2026-4660 | redhat_vex | go-getter: go-getter: Arbitrary file reads via maliciously crafted URL | fixed: 1 known affected: 2 known not affected: 1 | 2026-06-30T03:43:27+00:00 | Vulnerability · Source |
| CVE-2026-4634 | redhat_vex | keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters | fixed: 20 | 2026-06-30T03:43:22+00:00 | Vulnerability · Source |
| CVE-2026-4525 | redhat_vex | Vault: Vault: Information disclosure of authentication tokens via incorrect header handling | known affected: 6 known not affected: 7 | 2026-06-30T03:43:11+00:00 | Vulnerability · Source |
| CVE-2026-4519 | redhat_vex | python: Python: Command-line option injection in webbrowser.open() via crafted URLs | fixed: 1772 known not affected: 96 | 2026-06-30T03:43:08+00:00 | Vulnerability · Source |
| CVE-2026-56379 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection | fixed: 51 known affected: 7 | 2026-06-30T03:42:54+00:00 | Vulnerability · Source |
| CVE-2026-9795 | redhat_vex | keycloak: Keycloak: Privilege escalation via improper scope mapping enforcement | fixed: 20 | 2026-06-30T03:42:14+00:00 | Vulnerability · Source |
| CVE-2026-9099 | redhat_vex | keycloak: Group-Admin Escalation to Realm-Admin | fixed: 20 | 2026-06-30T03:42:06+00:00 | Vulnerability · Source |
| CVE-2026-9086 | redhat_vex | keycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive URI validation bypass | fixed: 20 | 2026-06-30T03:42:02+00:00 | Vulnerability · Source |
| CVE-2026-8390 | redhat_vex | firefox: Use-after-free in the JavaScript: WebAssembly component | known not affected: 12 | 2026-06-30T03:41:49+00:00 | Vulnerability · Source |