VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-22067 | redhat_vex | kernel: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() | known not affected: 274 | 2026-06-29T20:40:16+00:00 | Vulnerability · Source |
| CVE-2025-22041 | redhat_vex | kernel: ksmbd: fix use-after-free in ksmbd_sessions_deregister() | known not affected: 274 | 2026-06-29T20:40:15+00:00 | Vulnerability · Source |
| CVE-2025-21968 | redhat_vex | kernel: drm/amd/display: Fix slab-use-after-free on hdcp_work | known not affected: 274 | 2026-06-29T20:40:02+00:00 | Vulnerability · Source |
| CVE-2025-34297 | redhat_vex | kissfft: KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc | known not affected: 1 | 2026-06-29T20:39:38+00:00 | Vulnerability · Source |
| CVE-2025-31650 | redhat_vex | tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame | fixed: 132 known affected: 22 known not affected: 15 | 2026-06-29T20:39:05+00:00 | Vulnerability · Source |
| CVE-2025-31492 | redhat_vex | mod_auth_openidc: mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data | fixed: 216 known affected: 2 | 2026-06-29T20:39:00+00:00 | Vulnerability · Source |
| CVE-2025-31278 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 436 known affected: 4 known not affected: 5 | 2026-06-29T20:38:58+00:00 | Vulnerability · Source |
| CVE-2025-31273 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 436 known affected: 4 known not affected: 5 | 2026-06-29T20:38:51+00:00 | Vulnerability · Source |
| CVE-2025-31257 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 393 known affected: 9 | 2026-06-29T20:38:48+00:00 | Vulnerability · Source |
| CVE-2025-31206 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 320 known affected: 9 | 2026-06-29T20:38:42+00:00 | Vulnerability · Source |
| CVE-2025-31204 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 320 known affected: 9 | 2026-06-29T20:38:37+00:00 | Vulnerability · Source |
| CVE-2025-30427 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 513 known affected: 9 | 2026-06-29T20:38:09+00:00 | Vulnerability · Source |
| CVE-2025-30153 | redhat_vex | github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter | fixed: 4 known affected: 3 known not affected: 119 | 2026-06-29T20:37:52+00:00 | Vulnerability · Source |
| CVE-2025-27110 | redhat_vex | mod_security: Libmodsecurity3 has possible bypass of encoded HTML entities | known not affected: 12 | 2026-06-29T20:37:28+00:00 | Vulnerability · Source |
| CVE-2025-26625 | redhat_vex | git-lfs: Git LFS may write to arbitrary files via crafted symlinks | fixed: 382 | 2026-06-29T20:37:18+00:00 | Vulnerability · Source |
| CVE-2025-24264 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 320 known affected: 9 | 2026-06-29T20:36:21+00:00 | Vulnerability · Source |
| CVE-2025-24223 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 320 known affected: 9 | 2026-06-29T20:36:16+00:00 | Vulnerability · Source |
| CVE-2025-3260 | redhat_vex | grafana: Unauthorized Dashboard Access in Grafana | known not affected: 21 | 2026-06-29T20:36:07+00:00 | Vulnerability · Source |
| CVE-2025-2515 | redhat_vex | bluechi: Privilege Escalation in BlueChi via Unrestricted Cross-Node Systemd Dependencies | known not affected: 1 | 2026-06-29T20:36:02+00:00 | Vulnerability · Source |
| CVE-2025-21811 | redhat_vex | kernel: nilfs2: protect access to buffers with no active references | known not affected: 274 | 2026-06-29T20:35:08+00:00 | Vulnerability · Source |
| CVE-2025-21797 | redhat_vex | kernel: HID: corsair-void: Add missing delayed work cancel for headset status | known not affected: 274 | 2026-06-29T20:35:04+00:00 | Vulnerability · Source |
| CVE-2025-21756 | redhat_vex | kernel: vsock: Keep the binding until socket destruction | fixed: 2308 known not affected: 42 | 2026-06-29T20:34:42+00:00 | Vulnerability · Source |
| CVE-2025-21715 | redhat_vex | kernel: net: davicom: fix UAF in dm9000_drv_remove | known not affected: 274 | 2026-06-29T20:34:27+00:00 | Vulnerability · Source |
| CVE-2024-45506 | redhat_vex | haproxy: potential infinite loop condition in the h2_send() may trigger a DoS | known not affected: 18 | 2026-06-29T20:34:10+00:00 | Vulnerability · Source |
| CVE-2024-44331 | redhat_vex | gstreamer1-rtsp-server: DoS via rtsp-media.c | known not affected: 3 | 2026-06-29T20:33:41+00:00 | Vulnerability · Source |
| CVE-2024-44309 | redhat_vex | webkitgtk: data isolation bypass vulnerability | fixed: 458 known affected: 9 | 2026-06-29T20:33:36+00:00 | Vulnerability · Source |
| CVE-2024-44308 | redhat_vex | webkitgtk: javascriptcore: processing maliciously crafted web content may lead to arbitrary code execution | fixed: 13 known not affected: 20 | 2026-06-29T20:33:32+00:00 | Vulnerability · Source |
| CVE-2024-44192 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 513 known affected: 9 | 2026-06-29T20:33:28+00:00 | Vulnerability · Source |
| CVE-2024-27856 | redhat_vex | webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution | fixed: 458 known affected: 9 | 2026-06-29T20:32:40+00:00 | Vulnerability · Source |
| CVE-2024-11235 | redhat_vex | php: Reference counting in php_request_shutdown causes Use-After-Free | fixed: 472 known affected: 54 known not affected: 172 | 2026-06-29T20:31:44+00:00 | Vulnerability · Source |
| CVE-2025-14325 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T20:30:27+00:00 | Vulnerability · Source |
| CVE-2025-14324 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T20:30:23+00:00 | Vulnerability · Source |
| CVE-2025-14323 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Notifications component | fixed: 320 known affected: 8 | 2026-06-29T20:30:19+00:00 | Vulnerability · Source |
| CVE-2025-14322 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 320 known affected: 8 | 2026-06-29T20:30:16+00:00 | Vulnerability · Source |
| CVE-2025-14321 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-29T20:30:11+00:00 | Vulnerability · Source |
| CVE-2025-14174 | redhat_vex | Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page | fixed: 482 known not affected: 18 | 2026-06-29T20:30:08+00:00 | Vulnerability · Source |
| CVE-2025-13470 | redhat_vex | RNP: RNP: Confidentiality compromise due to uninitialized symmetric session key in Public-Key Encrypted Session Key (PKESK) packets | known not affected: 6 | 2026-06-29T20:29:43+00:00 | Vulnerability · Source |
| CVE-2025-13027 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 145 and Thunderbird 145 | known not affected: 12 | 2026-06-29T20:29:40+00:00 | Vulnerability · Source |
| CVE-2025-13026 | redhat_vex | firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:36+00:00 | Vulnerability · Source |
| CVE-2025-13025 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:31+00:00 | Vulnerability · Source |
| CVE-2025-13024 | redhat_vex | firefox: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 12 | 2026-06-29T20:29:27+00:00 | Vulnerability · Source |
| CVE-2025-13023 | redhat_vex | firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:23+00:00 | Vulnerability · Source |
| CVE-2025-13022 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:21+00:00 | Vulnerability · Source |
| CVE-2025-13021 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:17+00:00 | Vulnerability · Source |
| CVE-2025-13016 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component | fixed: 320 known affected: 8 | 2026-06-29T20:29:15+00:00 | Vulnerability · Source |
| CVE-2025-13012 | redhat_vex | firefox: thunderbird: Race condition in the Graphics component | fixed: 320 known affected: 8 | 2026-06-29T20:29:08+00:00 | Vulnerability · Source |
| CVE-2025-11721 | redhat_vex | thunderbird: firefox: Memory safety bug fixed in Firefox 144 and Thunderbird 144 | known not affected: 23 | 2026-06-29T20:28:53+00:00 | Vulnerability · Source |
| CVE-2025-11715 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 | fixed: 264 known affected: 8 | 2026-06-29T20:28:51+00:00 | Vulnerability · Source |
| CVE-2025-11714 | redhat_vex | thunderbird: firefox: Memory safety bugs | fixed: 264 known affected: 8 | 2026-06-29T20:28:47+00:00 | Vulnerability · Source |
| CVE-2025-11711 | redhat_vex | thunderbird: firefox: Some non-writable Object properties could be modified | fixed: 264 known affected: 8 | 2026-06-29T20:28:43+00:00 | Vulnerability · Source |