VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297730 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33542 | redhat_vex | github.com/lxc/incus: Incus: Image cache poisoning due to insufficient image fingerprint validation | known not affected: 1 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2026-34073 | redhat_vex | python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation | fixed: 1 known affected: 178 known not affected: 2 | 2026-06-28T11:20:22+00:00 | Vulnerability · Source |
| CVE-2014-0416 | redhat_vex | OpenJDK: insecure subject principals set handling (JAAS, 8024306) | fixed: 690 known not affected: 21 | 2026-06-28T11:20:21+00:00 | Vulnerability · Source |
| CVE-2010-3625 | redhat_vex | acroread: multiple code execution flaws (APSB10-21) | fixed: 12 known not affected: 2 | 2026-06-28T11:20:19+00:00 | Vulnerability · Source |
| CVE-2025-71239 | redhat_vex | kernel: audit: add fchmodat2() to change attributes class | known affected: 14 known not affected: 260 | 2026-06-28T11:20:18+00:00 | Vulnerability · Source |
| CVE-2025-43966 | redhat_vex | libheif: "NULL Pointer Dereference in ImageItem_iden in libheif | known not affected: 1 | 2026-06-28T11:20:18+00:00 | Vulnerability · Source |
| CVE-2018-9568 | redhat_vex | kernel: Memory corruption due to incorrect socket cloning | fixed: 820 known affected: 1 known not affected: 64 | 2026-06-28T11:20:16+00:00 | Vulnerability · Source |
| CVE-2026-31730 | redhat_vex | kernel: misc: fastrpc: possible double-free of cctx->remote_heap | known not affected: 274 | 2026-06-28T11:20:16+00:00 | Vulnerability · Source |
| CVE-2015-7312 | redhat_vex | kernel: multiple race conditions in aufs | known not affected: 93 | 2026-06-28T11:20:13+00:00 | Vulnerability · Source |
| CVE-2024-56566 | redhat_vex | kernel: mm/slub: Avoid list corruption when removing a slab from the full list | fixed: 305 known affected: 70 known not affected: 118 | 2026-06-28T11:20:12+00:00 | Vulnerability · Source |
| CVE-2024-56605 | redhat_vex | kernel: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() | fixed: 305 known affected: 98 known not affected: 14 | 2026-06-28T11:20:10+00:00 | Vulnerability · Source |
| CVE-2013-7285 | redhat_vex | XStream: remote code execution due to insecure XML deserialization | fixed: 16 known affected: 3 known not affected: 3 | 2026-06-28T11:20:05+00:00 | Vulnerability · Source |
| CVE-2018-16396 | redhat_vex | ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives | fixed: 811 known affected: 13 known not affected: 47 | 2026-06-28T11:20:03+00:00 | Vulnerability · Source |
| CVE-2013-6954 | redhat_vex | libpng: unhandled zero-length PLTE chunk or NULL palette | fixed: 484 known not affected: 20 | 2026-06-28T11:20:02+00:00 | Vulnerability · Source |
| CVE-2022-3522 | redhat_vex | kernel: race condition in hugetlb_no_page() in mm/hugetlb.c | fixed: 514 known not affected: 42 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |
| CVE-2026-40719 | redhat_vex | MaraDNS: MaraDNS: Denial of Service via unresolvable authoritative nameserver address | known not affected: 1 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |
| CVE-2026-10230 | redhat_vex | assimp: Assimp: Local heap-based buffer overflow in Half-Life 1 MDL Loader | known affected: 4 known not affected: 4 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |
| CVE-2016-3458 | redhat_vex | OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718) | fixed: 713 | 2026-06-28T11:19:59+00:00 | Vulnerability · Source |
| CVE-2026-43024 | redhat_vex | kernel: netfilter: nf_tables: reject immediate NF_QUEUE verdict | known affected: 260 known not affected: 14 | 2026-06-28T11:19:58+00:00 | Vulnerability · Source |
| CVE-2026-23031 | redhat_vex | kernel: Linux kernel: Memory leak in gs_usb module can lead to denial of service via improper USB Request Block handling. | known affected: 184 known not affected: 90 | 2026-06-28T11:19:57+00:00 | Vulnerability · Source |
| CVE-2013-5846 | redhat_vex | JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX) | fixed: 53 | 2026-06-28T11:19:56+00:00 | Vulnerability · Source |
| CVE-2025-5899 | redhat_vex | pspp: GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap | known not affected: 1 | 2026-06-28T11:19:56+00:00 | Vulnerability · Source |
| CVE-2013-4450 | redhat_vex | NodeJS: HTTP Pipelining DoS | fixed: 10 known affected: 1 | 2026-06-28T11:19:54+00:00 | Vulnerability · Source |
| CVE-2026-31732 | redhat_vex | kernel: gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() | known affected: 90 known not affected: 184 | 2026-06-28T11:19:51+00:00 | Vulnerability · Source |
| CVE-2026-43227 | redhat_vex | kernel: clocksource/drivers/sh_tmu: Always leave device running after probe | known affected: 76 known not affected: 198 | 2026-06-28T11:19:50+00:00 | Vulnerability · Source |
| CVE-2020-10531 | redhat_vex | ICU: Integer overflow in UnicodeString::doAppend() | fixed: 394 known affected: 1 known not affected: 112 | 2026-06-28T11:19:49+00:00 | Vulnerability · Source |
| CVE-2013-2736 | redhat_vex | acroread: multiple code execution flaws (APSB13-15) | fixed: 8 | 2026-06-28T11:19:49+00:00 | Vulnerability · Source |
| CVE-2013-2451 | redhat_vex | OpenJDK: exclusive port binding (Networking, 7170730) | fixed: 325 known not affected: 22 | 2026-06-28T11:19:47+00:00 | Vulnerability · Source |
| CVE-2015-5544 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:19:47+00:00 | Vulnerability · Source |
| CVE-2026-26994 | redhat_vex | utls: uTLS: TLS 1.3 downgrade protection bypass allows information disclosure and fingerprinting | known not affected: 1 | 2026-06-28T11:19:41+00:00 | Vulnerability · Source |
| CVE-2016-3077 | redhat_vex | ovirt-engine: Crash of API when parsing unxepected version number | fixed: 21 | 2026-06-28T11:19:41+00:00 | Vulnerability · Source |
| CVE-2026-40026 | redhat_vex | sleuthkit: The Sleuth Kit: Information disclosure and denial of service via crafted ISO image | known not affected: 1 | 2026-06-28T11:19:40+00:00 | Vulnerability · Source |
| CVE-2026-23384 | redhat_vex | kernel: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() | known not affected: 274 | 2026-06-28T11:19:40+00:00 | Vulnerability · Source |
| CVE-2021-47429 | redhat_vex | kernel: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T11:19:38+00:00 | Vulnerability · Source |
| CVE-2026-40025 | redhat_vex | sleuthkit: The Sleuth Kit: Information Disclosure and Denial of Service via malicious APFS disk image | known not affected: 1 | 2026-06-28T11:19:36+00:00 | Vulnerability · Source |
| CVE-2016-7879 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:19:32+00:00 | Vulnerability · Source |
| CVE-2026-26045 | redhat_vex | moodle: Moodle: Improper Validation in File Restore Functionality Leading to Remote Code Execution | known not affected: 1 | 2026-06-28T11:19:32+00:00 | Vulnerability · Source |
| CVE-2016-2843 | redhat_vex | chromium-browser: Multiple unspecified vulnerabilities in V8 before 4.9.385.26 | fixed: 12 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2026-44932 | redhat_vex | wicked: wicked: Arbitrary code execution via unsanitized DHCP replies | known not affected: 1 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2026-31612 | redhat_vex | kernel: ksmbd: validate EaNameLength in smb2_get_ea() | known not affected: 274 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2016-7872 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:19:30+00:00 | Vulnerability · Source |
| CVE-2026-12009 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input Accessibility | known not affected: 1 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2026-25996 | redhat_vex | inspektor-gadget: Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode | known not affected: 1 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2016-7859 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-37 | fixed: 5 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2026-31629 | redhat_vex | kernel: nfc: llcp: add missing return after LLCP_CLOSED checks | known not affected: 274 | 2026-06-28T11:19:29+00:00 | Vulnerability · Source |
| CVE-2016-7869 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:19:28+00:00 | Vulnerability · Source |
| CVE-2026-12010 | redhat_vex | chromium-browser: Google Chrome on Android: Sandbox escape via heap buffer overflow in GPU | known not affected: 1 | 2026-06-28T11:19:28+00:00 | Vulnerability · Source |
| CVE-2021-3611 | redhat_vex | QEMU: intel-hda: segmentation fault due to stack overflow | fixed: 114 known affected: 34 known not affected: 68 | 2026-06-28T11:19:27+00:00 | Vulnerability · Source |
| CVE-2026-31476 | redhat_vex | kernel: ksmbd: do not expire session on binding failure | known not affected: 274 | 2026-06-28T11:19:26+00:00 | Vulnerability · Source |
| CVE-2026-12026 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read Video | known not affected: 1 | 2026-06-28T11:19:24+00:00 | Vulnerability · Source |