VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-11710 | redhat_vex | thunderbird: firefox: Cross-process information leaked due to malicious IPC messages | fixed: 264 known affected: 8 | 2026-06-29T20:28:38+00:00 | Vulnerability · Source |
| CVE-2025-11709 | redhat_vex | thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures | fixed: 264 known affected: 8 | 2026-06-29T20:28:34+00:00 | Vulnerability · Source |
| CVE-2025-11708 | redhat_vex | thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() | fixed: 264 known affected: 8 | 2026-06-29T20:28:29+00:00 | Vulnerability · Source |
| CVE-2025-10537 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 | fixed: 264 known affected: 8 | 2026-06-29T20:27:55+00:00 | Vulnerability · Source |
| CVE-2025-10528 | redhat_vex | firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component | fixed: 264 known affected: 8 | 2026-06-29T20:27:51+00:00 | Vulnerability · Source |
| CVE-2025-10527 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component | fixed: 264 known affected: 8 | 2026-06-29T20:27:47+00:00 | Vulnerability · Source |
| CVE-2025-1080 | redhat_vex | libreoffice: Macro URL arbitrary script execution | fixed: 3928 known affected: 133 | 2026-06-29T20:27:16+00:00 | Vulnerability · Source |
| CVE-2024-9936 | redhat_vex | firefox: Undefined behavior in selection node cache | known affected: 2 known not affected: 7 | 2026-06-29T20:27:06+00:00 | Vulnerability · Source |
| CVE-2024-9680 | redhat_vex | firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) | fixed: 255 known affected: 6 known not affected: 4 | 2026-06-29T20:27:02+00:00 | Vulnerability · Source |
| CVE-2023-53003 | redhat_vex | kernel: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | known not affected: 274 | 2026-06-29T20:26:41+00:00 | Vulnerability · Source |
| CVE-2023-42970 | redhat_vex | webkitgtk: Processing web content may lead to arbitrary code execution | fixed: 412 known affected: 9 | 2026-06-29T20:26:32+00:00 | Vulnerability · Source |
| CVE-2023-42875 | redhat_vex | webkitgtk: Processing web content may lead to arbitrary code execution | fixed: 412 known affected: 9 | 2026-06-29T20:26:27+00:00 | Vulnerability · Source |
| CVE-2023-41915 | redhat_vex | pmix: race condition allows attackers to obtain ownership of arbitrary files | fixed: 96 | 2026-06-29T20:26:22+00:00 | Vulnerability · Source |
| CVE-2024-58055 | redhat_vex | kernel: usb: gadget: f_tcm: Don't free command immediately | known not affected: 274 | 2026-06-29T20:25:34+00:00 | Vulnerability · Source |
| CVE-2024-58034 | redhat_vex | kernel: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() | known not affected: 274 | 2026-06-29T20:25:29+00:00 | Vulnerability · Source |
| CVE-2024-54543 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 9 | 2026-06-29T20:24:59+00:00 | Vulnerability · Source |
| CVE-2024-54534 | redhat_vex | webkit: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 9 | 2026-06-29T20:24:58+00:00 | Vulnerability · Source |
| CVE-2024-54505 | redhat_vex | webkit: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 9 | 2026-06-29T20:24:55+00:00 | Vulnerability · Source |
| CVE-2024-54479 | redhat_vex | WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 458 known affected: 10 | 2026-06-29T20:24:50+00:00 | Vulnerability · Source |
| CVE-2024-52531 | redhat_vex | libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict | fixed: 274 known affected: 7 known not affected: 10 | 2026-06-29T20:24:39+00:00 | Vulnerability · Source |
| CVE-2024-52317 | redhat_vex | tomcat: Apache Tomcat: Request/response mix-up with HTTP/2 | known not affected: 46 | 2026-06-29T20:24:35+00:00 | Vulnerability · Source |
| CVE-2024-49504 | redhat_vex | grub2: grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images | known not affected: 58 | 2026-06-29T20:24:33+00:00 | Vulnerability · Source |
| CVE-2024-47615 | redhat_vex | gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer | fixed: 311 known affected: 4 | 2026-06-29T20:24:14+00:00 | Vulnerability · Source |
| CVE-2024-47607 | redhat_vex | gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header | fixed: 311 known affected: 4 | 2026-06-29T20:24:10+00:00 | Vulnerability · Source |
| CVE-2024-47606 | redhat_vex | gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes | fixed: 319 known affected: 3 | 2026-06-29T20:24:07+00:00 | Vulnerability · Source |
| CVE-2024-47540 | redhat_vex | gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer | fixed: 319 known affected: 3 | 2026-06-29T20:24:04+00:00 | Vulnerability · Source |
| CVE-2024-47539 | redhat_vex | gstreamer1-plugins-good: OOB-write in convert_to_s334_1a | fixed: 273 known not affected: 5 | 2026-06-29T20:23:59+00:00 | Vulnerability · Source |
| CVE-2024-47537 | redhat_vex | gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c | fixed: 319 known not affected: 3 | 2026-06-29T20:23:57+00:00 | Vulnerability · Source |
| CVE-2024-47538 | redhat_vex | gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet | fixed: 311 known not affected: 4 | 2026-06-29T20:23:55+00:00 | Vulnerability · Source |
| CVE-2024-7589 | redhat_vex | openssh: OpenSSH pre-authentication async signal safety issue | known not affected: 41 | 2026-06-29T20:23:44+00:00 | Vulnerability · Source |
| CVE-2022-42919 | redhat_vex | python: local privilege escalation via the multiprocessing forkserver start method | fixed: 689 known not affected: 155 | 2026-06-29T20:23:35+00:00 | Vulnerability · Source |
| CVE-2022-37660 | redhat_vex | hostapd: Public Key Exchange (PKEX) Reuse Vulnerability in hostapd | known affected: 2 known not affected: 1 | 2026-06-29T20:23:25+00:00 | Vulnerability · Source |
| CVE-2021-47653 | redhat_vex | kernel: media: davinci: vpif: fix use-after-free on driver unbind | known not affected: 274 | 2026-06-29T20:23:07+00:00 | Vulnerability · Source |
| CVE-2021-47640 | redhat_vex | kernel: powerpc/kasan: Fix early region not updated correctly | known not affected: 274 | 2026-06-29T20:23:01+00:00 | Vulnerability · Source |
| CVE-2011-10007 | redhat_vex | perl-file-find-rule: File::Find::Rule Arbitrary Code Execution | fixed: 10 known affected: 2 | 2026-06-29T20:22:51+00:00 | Vulnerability · Source |
| CVE-2022-49909 | redhat_vex | kernel: Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() | known not affected: 274 | 2026-06-29T20:21:29+00:00 | Vulnerability · Source |
| CVE-2022-49846 | redhat_vex | kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() | fixed: 1634 known affected: 64 known not affected: 76 | 2026-06-29T20:21:23+00:00 | Vulnerability · Source |
| CVE-2022-49755 | redhat_vex | kernel: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | known not affected: 274 | 2026-06-29T20:20:31+00:00 | Vulnerability · Source |
| CVE-2022-49711 | redhat_vex | kernel: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() | known not affected: 274 | 2026-06-29T20:20:18+00:00 | Vulnerability · Source |
| CVE-2022-49685 | redhat_vex | kernel: iio: trigger: sysfs: fix use-after-free on remove | known not affected: 274 | 2026-06-29T20:20:12+00:00 | Vulnerability · Source |
| CVE-2022-49669 | redhat_vex | kernel: mptcp: fix race on unaccepted mptcp sockets | fixed: 286 known not affected: 156 | 2026-06-29T20:20:02+00:00 | Vulnerability · Source |
| CVE-2022-49551 | redhat_vex | kernel: usb: isp1760: Fix out-of-bounds array access | known not affected: 274 | 2026-06-29T20:18:55+00:00 | Vulnerability · Source |
| CVE-2022-49541 | redhat_vex | kernel: cifs: fix potential double free during failed mount | fixed: 642 known affected: 22 known not affected: 134 | 2026-06-29T20:18:49+00:00 | Vulnerability · Source |
| CVE-2022-49505 | redhat_vex | kernel: NFC: NULL out the dev->rfkill to prevent UAF | known not affected: 274 | 2026-06-29T20:18:36+00:00 | Vulnerability · Source |
| CVE-2022-49464 | redhat_vex | kernel: erofs: fix buffer copy overflow of ztailpacking feature | known not affected: 274 | 2026-06-29T20:18:23+00:00 | Vulnerability · Source |
| CVE-2022-49391 | redhat_vex | kernel: remoteproc: mtk_scp: Fix a potential double free | known not affected: 274 | 2026-06-29T20:18:17+00:00 | Vulnerability · Source |
| CVE-2022-49359 | redhat_vex | kernel: drm/panfrost: Job should reference MMU not file_priv | known not affected: 274 | 2026-06-29T20:17:58+00:00 | Vulnerability · Source |
| CVE-2022-49278 | redhat_vex | kernel: remoteproc: Fix count check in rproc_coredump_write() | known not affected: 274 | 2026-06-29T20:17:57+00:00 | Vulnerability · Source |
| CVE-2022-49258 | redhat_vex | kernel: crypto: ccree - Fix use after free in cc_cipher_exit() | known not affected: 274 | 2026-06-29T20:17:43+00:00 | Vulnerability · Source |
| CVE-2022-49186 | redhat_vex | kernel: clk: visconti: prevent array overflow in visconti_clk_register_gates() | known not affected: 274 | 2026-06-29T20:17:38+00:00 | Vulnerability · Source |