VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41696 | redhat_vex | org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation | known affected: 2 | 2026-06-29T07:12:29+00:00 | Vulnerability · Source |
| CVE-2026-41852 | redhat_vex | spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation | known affected: 15 | 2026-06-29T07:00:39+00:00 | Vulnerability · Source |
| CVE-2026-44598 | redhat_vex | shiro: org.apache.shiro/shiro-jakarta-ee: Apache Shiro: Server-Side Request Forgery via forged shiroSavedRequest cookie | known affected: 1 | 2026-06-29T05:57:19+00:00 | Vulnerability · Source |
| CVE-2026-13038 | redhat_vex | chromium-browser: chromium-browser: Use after free in Autofill | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13024 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13025 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13031 | redhat_vex | chromium-browser: chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13033 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read in Blink>InterestGroups | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13032 | redhat_vex | chromium-browser: chromium-browser: Use after free in WebGL | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13027 | redhat_vex | chromium-browser: chromium-browser: Use after free in FileSystem | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13282 | redhat_vex | chromium-browser: chromium-browser: Use after free in Payments | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13283 | redhat_vex | chromium-browser: chromium-browser: Use after free in AdFilter | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13281 | redhat_vex | chromium-browser: chromium-browser: Integer overflow in Mojo | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13026 | redhat_vex | chromium-browser: chromium-browser: Use after free in Digital Credentials | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-12772 | redhat_vex | litellm: BerriAI litellm: Session expiration leading to denial of service | known affected: 6 | 2026-06-29T05:07:46+00:00 | Vulnerability · Source |
| CVE-2026-53632 | redhat_vex | launch-editor: launch-editor: Credential compromise via NTLMv2 password hash leak through UNC path access | known affected: 1 known not affected: 42 | 2026-06-29T05:02:55+00:00 | Vulnerability · Source |
| CVE-2025-71379 | redhat_vex | vllm: vLLM: Denial of Service via regular expression denial of service (ReDoS) vulnerabilities | known not affected: 26 | 2026-06-29T05:02:50+00:00 | Vulnerability · Source |
| CVE-2026-54282 | redhat_vex | starlette: Starlette: Information disclosure due to improper HTTP request path validation | known affected: 5 known not affected: 68 | 2026-06-29T04:50:54+00:00 | Vulnerability · Source |
| CVE-2026-54233 | redhat_vex | vllm: vLLM: Denial of Service via excessive memory allocation in audio transcription | known affected: 21 known not affected: 5 | 2026-06-29T04:44:09+00:00 | Vulnerability · Source |
| CVE-2026-44022 | redhat_vex | docling: Docling: Information disclosure via path traversal in LaTeX backend | known affected: 1 | 2026-06-29T04:39:04+00:00 | Vulnerability · Source |
| CVE-2026-41048 | suse_vex | SUSE CVE CVE-2026-41048 | No product status | 2026-06-29T01:22:09+00:00 | Vulnerability · Source |
| CVE-2026-41049 | suse_vex | SUSE CVE CVE-2026-41049 | No product status | 2026-06-29T01:22:08+00:00 | Vulnerability · Source |
| CVE-2026-52929 | microsoft_vex | sctp: stream: fully roll back denied add-stream state | fixed: 1 known affected: 1 | 2026-06-28T14:49:48+00:00 | Vulnerability · Source |
| CVE-2026-52917 | microsoft_vex | sctp: diag: reject stale associations in dump_one path | fixed: 1 known affected: 1 | 2026-06-28T14:47:47+00:00 | Vulnerability · Source |
| CVE-2026-53212 | microsoft_vex | netfilter: nft_tunnel: fix use-after-free on object destroy | fixed: 1 known affected: 1 | 2026-06-28T14:47:14+00:00 | Vulnerability · Source |
| CVE-2026-53190 | microsoft_vex | drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() | fixed: 1 known affected: 1 | 2026-06-28T14:44:03+00:00 | Vulnerability · Source |
| CVE-2026-53168 | microsoft_vex | fuse: reject fuse_notify() pagecache ops on directories | fixed: 1 known affected: 1 | 2026-06-28T14:42:53+00:00 | Vulnerability · Source |
| CVE-2026-52918 | microsoft_vex | Bluetooth: serialize accept_q access | fixed: 1 known affected: 1 | 2026-06-28T14:41:08+00:00 | Vulnerability · Source |
| CVE-2026-53137 | microsoft_vex | drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size | fixed: 1 known affected: 1 | 2026-06-28T14:40:18+00:00 | Vulnerability · Source |
| CVE-2026-42506 | microsoft_vex | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | fixed: 26 known affected: 26 known not affected: 2 | 2026-06-28T14:18:05+00:00 | Vulnerability · Source |
| CVE-2026-8376 | microsoft_vex | Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds | fixed: 2 known affected: 2 | 2026-06-28T14:15:08+00:00 | Vulnerability · Source |
| CVE-2026-8328 | microsoft_vex | FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address | fixed: 2 known affected: 3 known not affected: 1 | 2026-06-28T14:14:13+00:00 | Vulnerability · Source |
| CVE-2026-31630 | microsoft_vex | rxrpc: proc: size address buffers for %pISpc output | known affected: 8 | 2026-06-28T14:12:49+00:00 | Vulnerability · Source |
| CVE-2026-31575 | microsoft_vex | mm/userfaultfd: fix hugetlb fault mutex hash calculation | known affected: 8 | 2026-06-28T14:12:42+00:00 | Vulnerability · Source |
| CVE-2026-31568 | microsoft_vex | s390/mm: Add missing secure storage access fixups for donated memory | known affected: 8 | 2026-06-28T14:12:35+00:00 | Vulnerability · Source |
| CVE-2026-31560 | microsoft_vex | spi: spi-dw-dma: fix print error log when wait finish transaction | known affected: 8 | 2026-06-28T14:12:26+00:00 | Vulnerability · Source |
| CVE-2026-31645 | microsoft_vex | net: lan966x: fix page pool leak in error paths | known affected: 7 | 2026-06-28T14:12:15+00:00 | Vulnerability · Source |
| CVE-2026-31557 | microsoft_vex | nvmet: move async event work off nvmet-wq | known affected: 8 | 2026-06-28T14:11:54+00:00 | Vulnerability · Source |
| CVE-2026-31531 | microsoft_vex | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() | known affected: 8 | 2026-06-28T14:11:38+00:00 | Vulnerability · Source |
| CVE-2026-31493 | microsoft_vex | RDMA/efa: Fix use of completion ctx after free | known affected: 8 | 2026-06-28T14:11:25+00:00 | Vulnerability · Source |
| CVE-2026-31505 | microsoft_vex | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() | known affected: 7 | 2026-06-28T14:11:12+00:00 | Vulnerability · Source |
| CVE-2026-31462 | microsoft_vex | drm/amdgpu: prevent immediate PASID reuse case | known affected: 7 | 2026-06-28T14:10:59+00:00 | Vulnerability · Source |
| CVE-2026-31506 | microsoft_vex | net: bcmasp: fix double free of WoL irq | known affected: 7 | 2026-06-28T14:10:45+00:00 | Vulnerability · Source |
| CVE-2026-31516 | microsoft_vex | xfrm: prevent policy_hthresh.work from racing with netns teardown | known affected: 8 | 2026-06-28T14:10:31+00:00 | Vulnerability · Source |
| CVE-2026-31487 | microsoft_vex | spi: use generic driver_override infrastructure | known affected: 8 | 2026-06-28T14:10:18+00:00 | Vulnerability · Source |
| CVE-2026-43022 | microsoft_vex | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists | under investigation: 4 | 2026-06-28T14:04:30+00:00 | Vulnerability · Source |
| CVE-2026-31692 | microsoft_vex | rtnetlink: add missing netlink_ns_capable() check for peer netns | known affected: 6 | 2026-06-28T14:03:08+00:00 | Vulnerability · Source |
| CVE-2026-31499 | microsoft_vex | Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() | known affected: 6 | 2026-06-28T14:02:55+00:00 | Vulnerability · Source |
| CVE-2026-2708 | microsoft_vex | Libsoup: libsoup: http request smuggling via duplicate content-length headers | fixed: 2 known affected: 3 | 2026-06-28T14:02:28+00:00 | Vulnerability · Source |
| CVE-2026-31677 | microsoft_vex | crypto: af_alg - limit RX SG extraction by receive buffer budget | known affected: 7 | 2026-06-28T14:02:12+00:00 | Vulnerability · Source |