VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298211 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-5160 | redhat_vex | chromium-browser: extensions web accessible resources bypass | fixed: 12 | 2026-06-28T11:02:21+00:00 | Vulnerability · Source |
| CVE-2016-5158 | redhat_vex | openjpeg: heap overflow due to unsafe use of opj_aligned_malloc | fixed: 141 | 2026-06-28T11:02:20+00:00 | Vulnerability · Source |
| CVE-2016-5151 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T11:02:19+00:00 | Vulnerability · Source |
| CVE-2016-5126 | redhat_vex | Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl | fixed: 128 known not affected: 13 | 2026-06-28T11:02:18+00:00 | Vulnerability · Source |
| CVE-2016-5133 | redhat_vex | chromium-browser: origin confusion in proxy authentication | fixed: 12 | 2026-06-28T11:02:18+00:00 | Vulnerability · Source |
| CVE-2016-5143 | redhat_vex | chromium-browser: Parameter sanitization failure in DevTools | fixed: 12 | 2026-06-28T11:02:18+00:00 | Vulnerability · Source |
| CVE-2026-43234 | redhat_vex | kernel: team: avoid NETDEV_CHANGEMTU event when unregistering slave | known affected: 108 known not affected: 166 | 2026-06-28T11:02:16+00:00 | Vulnerability · Source |
| CVE-2025-71238 | redhat_vex | kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. | fixed: 1619 known affected: 122 | 2026-06-28T11:02:14+00:00 | Vulnerability · Source |
| CVE-2016-5094 | redhat_vex | php: Integer overflow in php_html_entities() | fixed: 251 known affected: 80 known not affected: 30 | 2026-06-28T11:02:14+00:00 | Vulnerability · Source |
| CVE-2025-71184 | redhat_vex | kernel: btrfs: fix NULL dereference on root when tracing inode eviction | known affected: 42 known not affected: 232 | 2026-06-28T11:02:13+00:00 | Vulnerability · Source |
| CVE-2016-4985 | redhat_vex | openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users | fixed: 8 known affected: 1 known not affected: 8 | 2026-06-28T11:02:11+00:00 | Vulnerability · Source |
| CVE-2025-59820 | redhat_vex | Krita: Krita: Heap-based buffer overflow via manipulated TGA file | known not affected: 1 | 2026-06-28T11:02:09+00:00 | Vulnerability · Source |
| CVE-2026-1299 | redhat_vex | cpython: email header injection due to unquoted newlines | fixed: 1223 known affected: 34 known not affected: 120 | 2026-06-28T11:02:07+00:00 | Vulnerability · Source |
| CVE-2016-4913 | redhat_vex | kernel: Information leak when handling NM entries containing NUL | fixed: 222 known affected: 27 known not affected: 9 | 2026-06-28T11:02:07+00:00 | Vulnerability · Source |
| CVE-2025-47203 | redhat_vex | dropbear: command injection via an untrusted hostname argument | known not affected: 1 | 2026-06-28T11:02:06+00:00 | Vulnerability · Source |
| CVE-2026-45869 | redhat_vex | kernel: power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() | known not affected: 274 | 2026-06-28T11:02:06+00:00 | Vulnerability · Source |
| CVE-2025-48938 | redhat_vex | github.com/cli/go-gh/pkg/browser: github.com/cli/go-gh/v2/pkg/browser: GitHub CLI may execute arbitrary commands from compromised GitHub Enterprise Server | known not affected: 1 | 2026-06-28T11:02:06+00:00 | Vulnerability · Source |
| CVE-2013-3008 | redhat_vex | JDK: Unspecified security fixes (July 2013) | fixed: 83 known affected: 17 | 2026-06-28T11:02:05+00:00 | Vulnerability · Source |
| CVE-2013-3006 | redhat_vex | JDK: Unspecified security fixes (July 2013) | fixed: 83 known affected: 17 | 2026-06-28T11:02:04+00:00 | Vulnerability · Source |
| CVE-2021-44224 | redhat_vex | httpd: possible NULL dereference or SSRF in forward proxy configurations | fixed: 149 known affected: 7 known not affected: 156 | 2026-06-28T11:02:02+00:00 | Vulnerability · Source |
| CVE-2016-4581 | redhat_vex | kernel: Slave being first propagated copy causes oops in propagate_mnt | fixed: 191 known affected: 12 known not affected: 15 | 2026-06-28T11:02:00+00:00 | Vulnerability · Source |
| CVE-2026-22982 | redhat_vex | kernel: net: mscc: ocelot: Fix crash when adding interface under a lag | known not affected: 274 | 2026-06-28T11:01:59+00:00 | Vulnerability · Source |
| CVE-2016-4565 | redhat_vex | kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko | fixed: 779 known not affected: 1 | 2026-06-28T11:01:59+00:00 | Vulnerability · Source |
| CVE-2022-27781 | redhat_vex | curl: CERTINFO never-ending busy-loop | fixed: 12 known affected: 16 known not affected: 132 | 2026-06-28T11:01:57+00:00 | Vulnerability · Source |
| CVE-2016-4541 | redhat_vex | php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:01:56+00:00 | Vulnerability · Source |
| CVE-2016-4540 | redhat_vex | php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used | fixed: 251 known affected: 109 known not affected: 1 | 2026-06-28T11:01:54+00:00 | Vulnerability · Source |
| CVE-2016-4470 | redhat_vex | kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path | fixed: 758 known not affected: 1 | 2026-06-28T11:01:44+00:00 | Vulnerability · Source |
| CVE-2024-57940 | redhat_vex | kernel: exfat: fix the infinite loop in exfat_readdir() | fixed: 305 known affected: 22 known not affected: 166 | 2026-06-28T11:01:43+00:00 | Vulnerability · Source |
| CVE-2024-57931 | redhat_vex | kernel: selinux: ignore unknown extended permissions | fixed: 305 known affected: 112 known not affected: 76 | 2026-06-28T11:01:42+00:00 | Vulnerability · Source |
| CVE-2026-23403 | redhat_vex | kernel: apparmor: fix memory leak in verify_header | known not affected: 274 | 2026-06-28T11:01:42+00:00 | Vulnerability · Source |
| CVE-2015-6769 | redhat_vex | chromium-browser: Cross-origin bypass in core | fixed: 12 | 2026-06-28T11:01:40+00:00 | Vulnerability · Source |
| CVE-2016-4140 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:01:32+00:00 | Vulnerability · Source |
| CVE-2016-4141 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-18 | fixed: 5 | 2026-06-28T11:01:32+00:00 | Vulnerability · Source |
| CVE-2016-4020 | redhat_vex | Qemu: i386: leakage of stack memory to guest in kvmvapic.c | fixed: 75 known affected: 1 known not affected: 13 | 2026-06-28T11:01:31+00:00 | Vulnerability · Source |
| CVE-2023-52672 | redhat_vex | kernel: pipe: wakeup wr_wait after setting max_usage | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T11:01:31+00:00 | Vulnerability · Source |
| CVE-2024-57798 | redhat_vex | kernel: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | fixed: 305 known affected: 70 known not affected: 42 | 2026-06-28T11:01:29+00:00 | Vulnerability · Source |
| CVE-2016-3710 | redhat_vex | qemu: incorrect banked access bounds checking in vga module | fixed: 176 known affected: 15 | 2026-06-28T11:01:27+00:00 | Vulnerability · Source |
| CVE-2024-56558 | redhat_vex | kernel: nfsd: make sure exp active before svc_export_show | fixed: 305 known affected: 112 | 2026-06-28T11:01:25+00:00 | Vulnerability · Source |
| CVE-2026-43168 | redhat_vex | kernel: ocfs2: fix reflink preserve cleanup issue | known not affected: 274 | 2026-06-28T11:01:24+00:00 | Vulnerability · Source |
| CVE-2016-3156 | redhat_vex | kernel: ipv4: denial of service when destroying a network interface | fixed: 191 known affected: 27 | 2026-06-28T11:01:23+00:00 | Vulnerability · Source |
| CVE-2011-3545 | redhat_vex | JDK: unspecified vulnerability fixed in 6u29 (Sound) | fixed: 637 known affected: 2 | 2026-06-28T11:01:21+00:00 | Vulnerability · Source |
| CVE-2016-3072 | redhat_vex | Katello: Authenticated sql injection via sort_by and sort_order request parameter | fixed: 4 known not affected: 1 | 2026-06-28T11:01:21+00:00 | Vulnerability · Source |
| CVE-2026-12440 | redhat_vex | chromium-browser: chromium-browser: Use after free in DigitalCredentials | known not affected: 1 | 2026-06-28T11:01:21+00:00 | Vulnerability · Source |
| CVE-2026-12441 | redhat_vex | chromium-browser: chromium-browser: Use after free in File Input | known not affected: 1 | 2026-06-28T11:01:21+00:00 | Vulnerability · Source |
| CVE-2011-3549 | redhat_vex | JDK: unspecified vulnerability fixed in 6u29 (Swing) | fixed: 637 known affected: 2 | 2026-06-28T11:01:21+00:00 | Vulnerability · Source |
| CVE-2020-15982 | redhat_vex | chromium-browser: Side-channel information leakage in cache | fixed: 14 | 2026-06-28T11:01:19+00:00 | Vulnerability · Source |
| CVE-2025-71111 | redhat_vex | kernel: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU | known affected: 274 | 2026-06-28T11:01:19+00:00 | Vulnerability · Source |
| CVE-2011-2105 | redhat_vex | acroread: Multiple denial of service flaws (APSB11-16) | fixed: 18 | 2026-06-28T11:01:18+00:00 | Vulnerability · Source |
| CVE-2011-2096 | redhat_vex | acroread: multiple code execution flaws (APSB11-16) | fixed: 18 | 2026-06-28T11:01:17+00:00 | Vulnerability · Source |
| CVE-2019-10126 | redhat_vex | kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c | fixed: 556 known affected: 13 known not affected: 14 | 2026-06-28T11:01:16+00:00 | Vulnerability · Source |