VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-49080 | redhat_vex | kernel: mm/mempolicy: fix mpol_new leak in shared_policy_replace | fixed: 321 known affected: 80 known not affected: 76 | 2026-06-29T20:57:08+00:00 | Vulnerability · Source |
| CVE-2022-49079 | redhat_vex | kernel: btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone | known not affected: 274 | 2026-06-29T20:57:04+00:00 | Vulnerability · Source |
| CVE-2022-49078 | redhat_vex | kernel: lz4: fix LZ4_decompress_safe_partial read out of bound | fixed: 280 known affected: 70 known not affected: 126 | 2026-06-29T20:56:59+00:00 | Vulnerability · Source |
| CVE-2022-49077 | redhat_vex | kernel: mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) | known affected: 198 known not affected: 76 | 2026-06-29T20:55:58+00:00 | Vulnerability · Source |
| CVE-2022-49076 | redhat_vex | kernel: RDMA/hfi1: Fix use-after-free bug for mm struct | known affected: 184 known not affected: 90 | 2026-06-29T20:55:53+00:00 | Vulnerability · Source |
| CVE-2022-49074 | redhat_vex | kernel: irqchip/gic-v3: Fix GICR_CTLR.RWP polling | known affected: 156 known not affected: 118 | 2026-06-29T20:55:47+00:00 | Vulnerability · Source |
| CVE-2022-49072 | redhat_vex | kernel: gpio: Restrict usage of GPIO chip irq members before initialization | fixed: 201 known affected: 112 known not affected: 76 | 2026-06-29T20:55:32+00:00 | Vulnerability · Source |
| CVE-2022-49068 | redhat_vex | kernel: btrfs: release correct delalloc amount in direct IO write path | known affected: 42 known not affected: 232 | 2026-06-29T20:55:23+00:00 | Vulnerability · Source |
| CVE-2022-49066 | redhat_vex | kernel: veth: Ensure eth header is in skb's linear part | fixed: 286 known affected: 80 known not affected: 76 | 2026-06-29T20:55:09+00:00 | Vulnerability · Source |
| CVE-2022-49063 | redhat_vex | kernel: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap | fixed: 286 known affected: 44 known not affected: 112 | 2026-06-29T20:55:02+00:00 | Vulnerability · Source |
| CVE-2022-49062 | redhat_vex | kernel: cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr | known affected: 150 known not affected: 124 | 2026-06-29T20:54:54+00:00 | Vulnerability · Source |
| CVE-2022-49061 | redhat_vex | kernel: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link | known affected: 108 known not affected: 166 | 2026-06-29T20:54:49+00:00 | Vulnerability · Source |
| CVE-2022-49060 | redhat_vex | kernel: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() | fixed: 286 known affected: 80 known not affected: 76 | 2026-06-29T20:54:43+00:00 | Vulnerability · Source |
| CVE-2026-42496 | redhat_vex | perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access | fixed: 800 known affected: 2 | 2026-06-29T20:52:15+00:00 | Vulnerability · Source |
| CVE-2025-43216 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 436 known affected: 4 known not affected: 5 | 2026-06-29T20:50:57+00:00 | Vulnerability · Source |
| CVE-2025-43212 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 436 known affected: 4 known not affected: 5 | 2026-06-29T20:50:47+00:00 | Vulnerability · Source |
| CVE-2025-9187 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 142 and Thunderbird 142 | known not affected: 23 | 2026-06-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2025-9185 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 | fixed: 261 known affected: 8 | 2026-06-29T20:47:56+00:00 | Vulnerability · Source |
| CVE-2025-9184 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 | known not affected: 23 | 2026-06-29T20:47:52+00:00 | Vulnerability · Source |
| CVE-2025-9180 | redhat_vex | thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component | fixed: 261 known affected: 8 | 2026-06-29T20:47:47+00:00 | Vulnerability · Source |
| CVE-2025-9179 | redhat_vex | thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component | fixed: 261 known affected: 8 | 2026-06-29T20:47:46+00:00 | Vulnerability · Source |
| CVE-2025-8044 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 141 and Thunderbird 141 | known not affected: 23 | 2026-06-29T20:46:56+00:00 | Vulnerability · Source |
| CVE-2025-8040 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 | known not affected: 23 | 2026-06-29T20:46:50+00:00 | Vulnerability · Source |
| CVE-2025-8034 | redhat_vex | firefox: thunderbird: Memory safety bugs | fixed: 261 known affected: 8 | 2026-06-29T20:46:38+00:00 | Vulnerability · Source |
| CVE-2025-8028 | redhat_vex | firefox: thunderbird: Large branch table could lead to truncated instruction | fixed: 261 known affected: 8 | 2026-06-29T20:46:35+00:00 | Vulnerability · Source |
| CVE-2025-8027 | redhat_vex | firefox: thunderbird: JavaScript engine only wrote partial return value to stack | fixed: 261 known affected: 8 | 2026-06-29T20:46:31+00:00 | Vulnerability · Source |
| CVE-2025-68307 | redhat_vex | kernel: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | known affected: 184 known not affected: 90 | 2026-06-29T20:45:53+00:00 | Vulnerability · Source |
| CVE-2025-68297 | redhat_vex | kernel: ceph: fix crash in process_v2_sparse_read() for encrypted directories | known affected: 232 known not affected: 42 | 2026-06-29T20:45:50+00:00 | Vulnerability · Source |
| CVE-2025-68291 | redhat_vex | kernel: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose() | known affected: 232 known not affected: 42 | 2026-06-29T20:45:47+00:00 | Vulnerability · Source |
| CVE-2025-68191 | redhat_vex | kernel: udp_tunnel: use netdev_warn() instead of netdev_WARN() | known affected: 232 known not affected: 42 | 2026-06-29T20:45:28+00:00 | Vulnerability · Source |
| CVE-2025-67779 | redhat_vex | next: React Server Components: Denial of Service via Unsafe Deserialization | known not affected: 32 | 2026-06-29T20:45:09+00:00 | Vulnerability · Source |
| CVE-2025-6663 | redhat_vex | gstreamer: GStreamer Code Execution Vulnerability | known not affected: 22 | 2026-06-29T20:43:49+00:00 | Vulnerability · Source |
| CVE-2025-6558 | redhat_vex | angle: insufficient input validation can cause undefined behavior | fixed: 436 known affected: 4 known not affected: 21 | 2026-06-29T20:43:45+00:00 | Vulnerability · Source |
| CVE-2025-6545 | redhat_vex | pbkdf2: pbkdf2 silently returns predictable key material | fixed: 22 known affected: 16 known not affected: 256 | 2026-06-29T20:43:35+00:00 | Vulnerability · Source |
| CVE-2025-6436 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 140 and Thunderbird 140 | known not affected: 12 | 2026-06-29T20:43:31+00:00 | Vulnerability · Source |
| CVE-2025-6424 | redhat_vex | firefox: thunderbird: Use-after-free in FontFaceSet | fixed: 253 known affected: 8 | 2026-06-29T20:43:26+00:00 | Vulnerability · Source |
| CVE-2025-68221 | redhat_vex | kernel: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr | known affected: 76 known not affected: 198 | 2026-06-29T20:43:24+00:00 | Vulnerability · Source |
| CVE-2026-56789 | redhat_vex | rtklib: RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count | known not affected: 1 | 2026-06-29T20:43:20+00:00 | Vulnerability · Source |
| CVE-2026-56786 | redhat_vex | rtklib: RTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message | known not affected: 1 | 2026-06-29T20:43:16+00:00 | Vulnerability · Source |
| CVE-2026-46608 | redhat_vex | glances: Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533) | known not affected: 1 | 2026-06-29T20:43:12+00:00 | Vulnerability · Source |
| CVE-2026-46606 | redhat_vex | glances: Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py | known not affected: 1 | 2026-06-29T20:43:06+00:00 | Vulnerability · Source |
| CVE-2025-39778 | redhat_vex | kernel: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() | known not affected: 274 | 2026-06-29T20:42:44+00:00 | Vulnerability · Source |
| CVE-2025-24216 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 513 known affected: 9 | 2026-06-29T20:41:41+00:00 | Vulnerability · Source |
| CVE-2025-24213 | redhat_vex | webkitgtk: A type confusion issue could lead to memory corruption | fixed: 13 known affected: 4 known not affected: 16 | 2026-06-29T20:41:36+00:00 | Vulnerability · Source |
| CVE-2025-24209 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 513 known affected: 9 | 2026-06-29T20:41:31+00:00 | Vulnerability · Source |
| CVE-2025-24201 | redhat_vex | webkitgtk: out-of-bounds write vulnerability | fixed: 458 known affected: 9 | 2026-06-29T20:41:27+00:00 | Vulnerability · Source |
| CVE-2025-24189 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 445 known affected: 11 known not affected: 5 | 2026-06-29T20:41:22+00:00 | Vulnerability · Source |
| CVE-2025-24162 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 458 known affected: 9 | 2026-06-29T20:41:17+00:00 | Vulnerability · Source |
| CVE-2025-23267 | redhat_vex | nvidia-container-toolkit: NVIDIA Container Toolkit Link Following Vulnerability | known not affected: 19 | 2026-06-29T20:41:04+00:00 | Vulnerability · Source |
| CVE-2025-22867 | redhat_vex | cmd/go: Arbitrary code execution during build on darwin in cmd/go | known not affected: 45 | 2026-06-29T20:40:31+00:00 | Vulnerability · Source |