VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297699 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2010-2202 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:36:01+00:00 | Vulnerability · Source |
| CVE-2010-2164 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:36:00+00:00 | Vulnerability · Source |
| CVE-2026-9957 | redhat_vex | chromium-browser: Use after free in PDF | known not affected: 1 | 2026-06-28T11:35:59+00:00 | Vulnerability · Source |
| CVE-2026-23140 | redhat_vex | kernel: bpf, test_run: Subtract size of xdp_frame from allowed metadata size | known affected: 184 known not affected: 90 | 2026-06-28T11:35:59+00:00 | Vulnerability · Source |
| CVE-2019-17567 | redhat_vex | httpd: mod_proxy_wstunnel tunneling of non Upgraded connection | fixed: 143 known affected: 35 known not affected: 18 | 2026-06-28T11:35:59+00:00 | Vulnerability · Source |
| CVE-2018-5703 | redhat_vex | kernel: net/ipv6/tcp_ipv6.c: tcp_v6_syn_recv_sock function allows attackers to cause a denial of service | known not affected: 88 | 2026-06-28T11:35:56+00:00 | Vulnerability · Source |
| CVE-2026-23075 | redhat_vex | kernel: can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak | known not affected: 274 | 2026-06-28T11:35:55+00:00 | Vulnerability · Source |
| CVE-2026-41470 | redhat_vex | LIVE555: LIVE555: Denial of Service due to RTSP session authorization bypass | known not affected: 1 | 2026-06-28T11:35:55+00:00 | Vulnerability · Source |
| CVE-2026-43154 | redhat_vex | kernel: erofs: fix incorrect early exits in volume label handling | known not affected: 274 | 2026-06-28T11:35:54+00:00 | Vulnerability · Source |
| CVE-2010-0298 | redhat_vex | kvm: emulator privilege escalation | fixed: 15 | 2026-06-28T11:35:54+00:00 | Vulnerability · Source |
| CVE-2010-0431 | redhat_vex | qemu: Insufficient guest provided pointers validation | fixed: 15 | 2026-06-28T11:35:53+00:00 | Vulnerability · Source |
| CVE-2019-17075 | redhat_vex | kernel: denial of service in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c | known not affected: 93 | 2026-06-28T11:35:52+00:00 | Vulnerability · Source |
| CVE-2010-0430 | redhat_vex | libspice: Insufficient guest provided memory mappings boundaries validations | fixed: 15 | 2026-06-28T11:35:52+00:00 | Vulnerability · Source |
| CVE-2026-43147 | redhat_vex | kernel: Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" | known affected: 14 known not affected: 260 | 2026-06-28T11:35:48+00:00 | Vulnerability · Source |
| CVE-2025-71086 | redhat_vex | kernel: net: rose: fix invalid array index in rose_kill_by_device() | known not affected: 274 | 2026-06-28T11:35:47+00:00 | Vulnerability · Source |
| CVE-2020-10177 | redhat_vex | python-pillow: multiple out-of-bounds reads in libImaging/FliDecode.c | fixed: 11 known affected: 18 | 2026-06-28T11:35:47+00:00 | Vulnerability · Source |
| CVE-2009-2625 | redhat_vex | JDK: XML parsing Denial-Of-Service (6845701) | fixed: 1115 | 2026-06-28T11:35:46+00:00 | Vulnerability · Source |
| CVE-2026-43145 | redhat_vex | kernel: remoteproc: imx_rproc: Fix invalid loaded resource table detection | known not affected: 274 | 2026-06-28T11:35:46+00:00 | Vulnerability · Source |
| CVE-2026-23135 | redhat_vex | kernel: Kernel: Denial of Service in ath12k wifi driver due to incorrect dma_free_coherent() pointer | known affected: 184 known not affected: 90 | 2026-06-28T11:35:45+00:00 | Vulnerability · Source |
| CVE-2026-43143 | redhat_vex | kernel: mfd: core: Add locking around 'mfd_of_node_list' | known affected: 232 known not affected: 42 | 2026-06-28T11:35:44+00:00 | Vulnerability · Source |
| CVE-2026-43274 | redhat_vex | kernel: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq() | known not affected: 274 | 2026-06-28T11:35:44+00:00 | Vulnerability · Source |
| CVE-2026-43140 | redhat_vex | kernel: HID: magicmouse: Do not crash on missing msc->input | known affected: 260 known not affected: 14 | 2026-06-28T11:35:43+00:00 | Vulnerability · Source |
| CVE-2019-16943 | redhat_vex | jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource | fixed: 441 known affected: 23 known not affected: 3 | 2026-06-28T11:35:43+00:00 | Vulnerability · Source |
| CVE-2026-43136 | redhat_vex | kernel: HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() | known affected: 232 known not affected: 42 | 2026-06-28T11:35:41+00:00 | Vulnerability · Source |
| CVE-2026-43462 | redhat_vex | kernel: net: spacemit: Fix error handling in emac_tx_mem_map() | known not affected: 274 | 2026-06-28T11:35:41+00:00 | Vulnerability · Source |
| CVE-2019-16942 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* | fixed: 441 known affected: 23 known not affected: 3 | 2026-06-28T11:35:40+00:00 | Vulnerability · Source |
| CVE-2009-1865 | redhat_vex | flash-plugin: multiple code execution flaws (APSB09-10) | fixed: 10 | 2026-06-28T11:35:40+00:00 | Vulnerability · Source |
| CVE-2026-43135 | redhat_vex | kernel: media: cx23885: Add missing unmap in snd_cx23885_hw_params() | known affected: 48 known not affected: 226 | 2026-06-28T11:35:40+00:00 | Vulnerability · Source |
| CVE-2026-43203 | redhat_vex | kernel: atm: fore200e: fix use-after-free in tasklets during device removal | known not affected: 274 | 2026-06-28T11:35:39+00:00 | Vulnerability · Source |
| CVE-2026-43122 | redhat_vex | kernel: ACPI: processor: Update cpuidle driver check in __acpi_processor_start() | known not affected: 274 | 2026-06-28T11:35:38+00:00 | Vulnerability · Source |
| CVE-2026-32716 | redhat_vex | scitokens: SciTokens: Authorization Bypass due to incorrect scope path validation | known not affected: 1 | 2026-06-28T11:35:38+00:00 | Vulnerability · Source |
| CVE-2026-32596 | redhat_vex | glances: unauthenticated API exposure | known not affected: 1 | 2026-06-28T11:35:35+00:00 | Vulnerability · Source |
| CVE-2026-43121 | redhat_vex | kernel: io_uring/zcrx: fix user_ref race between scrub and refill paths | known not affected: 274 | 2026-06-28T11:35:35+00:00 | Vulnerability · Source |
| CVE-2026-31764 | redhat_vex | kernel: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only | known not affected: 274 | 2026-06-28T11:35:34+00:00 | Vulnerability · Source |
| CVE-2026-43289 | redhat_vex | kernel: kexec: derive purgatory entry from symbol | known affected: 184 known not affected: 90 | 2026-06-28T11:35:34+00:00 | Vulnerability · Source |
| CVE-2010-2889 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:35:33+00:00 | Vulnerability · Source |
| CVE-2009-0520 | redhat_vex | flash-plugin: Buffer overflow (arbitrary code execution) via crafted SWF file. | fixed: 10 | 2026-06-28T11:35:33+00:00 | Vulnerability · Source |
| CVE-2026-43184 | redhat_vex | kernel: rnbd-srv: Zero the rsp buffer before using it | known not affected: 274 | 2026-06-28T11:35:32+00:00 | Vulnerability · Source |
| CVE-2008-7313 | redhat_vex | snoopy: incomplete fixes for command execution flaws | fixed: 18 known affected: 7 | 2026-06-28T11:35:32+00:00 | Vulnerability · Source |
| CVE-2026-7361 | redhat_vex | chromium-browser: chromium-browser: Use after free in iOS | known not affected: 1 | 2026-06-28T11:35:31+00:00 | Vulnerability · Source |
| CVE-2012-4165 | redhat_vex | flash-plugin: multiple code execution flaws (APSB12-19) | fixed: 5 | 2026-06-28T11:35:31+00:00 | Vulnerability · Source |
| CVE-2026-43100 | redhat_vex | kernel: bridge: guard local VLAN-0 FDB helpers against NULL vlan group | known affected: 90 known not affected: 184 | 2026-06-28T11:35:29+00:00 | Vulnerability · Source |
| CVE-2025-48795 | redhat_vex | org.apache.cxf/cxf: Apache CXF denial of service and data exposure | known affected: 3 | 2026-06-28T11:35:28+00:00 | Vulnerability · Source |
| CVE-2026-31761 | redhat_vex | kernel: iio: gyro: mpu3050: Move iio_device_register() to correct location | known not affected: 274 | 2026-06-28T11:35:28+00:00 | Vulnerability · Source |
| CVE-2025-29917 | redhat_vex | suricata: Suricata decode_base64: signature can do large memory allocation | known not affected: 1 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2007-0044 | redhat_vex | Acrobat Reader Universal CSRF and session riding | fixed: 20 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2010-2180 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:35:26+00:00 | Vulnerability · Source |
| CVE-2010-2206 | redhat_vex | acroread: multiple code execution flaws (APSB10-15) | fixed: 12 | 2026-06-28T11:35:24+00:00 | Vulnerability · Source |
| CVE-2019-16869 | redhat_vex | netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers | fixed: 319 known affected: 3 known not affected: 24 | 2026-06-28T11:35:22+00:00 | Vulnerability · Source |
| CVE-2026-23129 | redhat_vex | kernel: Linux kernel: Denial of Service in DPLL framework due to duplicate pin registrations | known affected: 184 known not affected: 90 | 2026-06-28T11:35:22+00:00 | Vulnerability · Source |