VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304405 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4449 | redhat_vex | chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-28T07:38:48+00:00 | Vulnerability · Source |
| CVE-2026-4444 | redhat_vex | chromium-browser: Stack buffer overflow in WebRTC | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4447 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4445 | redhat_vex | WebRTC: Google Chrome: Chromium: WebRTC in Google Chrome: Heap corruption via crafted HTML page | known not affected: 1 | 2026-06-28T07:38:47+00:00 | Vulnerability · Source |
| CVE-2026-4442 | redhat_vex | chromium-browser: Heap buffer overflow in CSS | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4441 | redhat_vex | chromium-browser: Use after free in Base | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4443 | redhat_vex | chromium-browser: Heap buffer overflow in WebAudio | known not affected: 1 | 2026-06-28T07:38:46+00:00 | Vulnerability · Source |
| CVE-2026-4440 | redhat_vex | chromium-browser: Out of bounds read and write in WebGL | known not affected: 1 | 2026-06-28T07:38:43+00:00 | Vulnerability · Source |
| CVE-2020-36558 | redhat_vex | kernel: race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference | fixed: 464 known affected: 108 known not affected: 14 | 2026-06-28T07:38:42+00:00 | Vulnerability · Source |
| CVE-2026-44378 | redhat_vex | botan: Botan: Denial of Service via malformed BER data parsing | known not affected: 1 | 2026-06-28T07:38:41+00:00 | Vulnerability · Source |
| CVE-2026-44374 | redhat_vex | Backstage: @backstage/plugin-catalog-backend-module-unprocessed: @backstage/plugin-catalog-unprocessed-entities-common: @backstage/plugin-catalog-unprocessed-entities: Backstage: Information disclosure due to missing authorization checks | known not affected: 1 | 2026-06-28T07:38:40+00:00 | Vulnerability · Source |
| CVE-2026-44310 | redhat_vex | github.com/sigstore/gitsign: Gitsign: Security bypass in commit verification | known affected: 1 | 2026-06-28T07:38:38+00:00 | Vulnerability · Source |
| CVE-2020-36322 | redhat_vex | kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations | fixed: 459 known affected: 46 known not affected: 116 | 2026-06-28T07:38:37+00:00 | Vulnerability · Source |
| CVE-2026-44296 | redhat_vex | deskflow: TLS multiplexer DoS on failed SSL_accept | known not affected: 1 | 2026-06-28T07:38:37+00:00 | Vulnerability · Source |
| CVE-2020-36313 | redhat_vex | kernel: KVM subsystem allows out-of-range access to memslots after a deletion | known not affected: 198 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2020-36312 | redhat_vex | kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c | fixed: 150 known affected: 1 known not affected: 148 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2023-40217 | redhat_vex | python: TLS handshake bypass | fixed: 3265 known not affected: 66 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2026-4428 | redhat_vex | AWS-LC: AWS-LC: Security bypass allows revoked certificates to be accepted due to CRL validation error | known affected: 16 | 2026-06-28T07:38:36+00:00 | Vulnerability · Source |
| CVE-2026-44076 | redhat_vex | netatalk: Netatalk: Arbitrary Code Execution via shell injection in volume path | known not affected: 1 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2026-44075 | redhat_vex | netatalk: Netatalk: Minor service disruption via crafted DSI session options | known not affected: 1 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2026-44074 | redhat_vex | netatalk: Netatalk: Service disruption due to incorrect error handling | known not affected: 1 | 2026-06-28T07:38:30+00:00 | Vulnerability · Source |
| CVE-2026-44068 | redhat_vex | netatalk: Netatalk: Arbitrary file access via path traversal | known not affected: 1 | 2026-06-28T07:38:29+00:00 | Vulnerability · Source |
| CVE-2026-44056 | redhat_vex | netatalk: Netatalk: Denial of Service via stack buffer overflow | known not affected: 1 | 2026-06-28T07:38:28+00:00 | Vulnerability · Source |
| CVE-2026-43996 | redhat_vex | OpenImageIO: OpenImageIO: Denial of Service via integer overflow in image processing | known not affected: 1 | 2026-06-28T07:38:27+00:00 | Vulnerability · Source |
| CVE-2023-30441 | redhat_vex | JDK: exposure of sensitive information using a combination of flaws and configurations | fixed: 60 known not affected: 6 | 2026-06-28T07:38:26+00:00 | Vulnerability · Source |
| CVE-2020-35508 | redhat_vex | kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent | fixed: 300 known not affected: 56 | 2026-06-28T07:38:26+00:00 | Vulnerability · Source |
| CVE-2020-35678 | redhat_vex | python-autobahn: allows redirect header injection | fixed: 4 known affected: 5 | 2026-06-28T07:38:25+00:00 | Vulnerability · Source |
| CVE-2026-43906 | redhat_vex | OpenImageIO: OpenImageIO: Potential arbitrary code execution via crafted HEIF images | known not affected: 1 | 2026-06-28T07:38:24+00:00 | Vulnerability · Source |
| CVE-2026-4393 | redhat_vex | Drupal: Automated Logout: Drupal Automated Logout: Cross-Site Request Forgery allows unauthorized actions | known not affected: 1 | 2026-06-28T07:38:24+00:00 | Vulnerability · Source |
| CVE-2026-43969 | redhat_vex | cowlib: cowlib: HTTP request splitting and cookie smuggling due to CRLF Injection. | known not affected: 1 | 2026-06-28T07:38:24+00:00 | Vulnerability · Source |
| CVE-2026-43909 | redhat_vex | OpenImageIO: OpenImageIO: Arbitrary code execution or denial of service via integer overflow in image processing | known not affected: 1 | 2026-06-28T07:38:24+00:00 | Vulnerability · Source |
| CVE-2026-43903 | redhat_vex | OpenImageIO: OpenImageIO: Denial of Service via crafted SGI image file | known not affected: 1 | 2026-06-28T07:38:23+00:00 | Vulnerability · Source |
| CVE-2020-35519 | redhat_vex | kernel: x25_bind out-of-bounds read | known not affected: 93 | 2026-06-28T07:38:23+00:00 | Vulnerability · Source |
| CVE-2020-35506 | redhat_vex | QEMU: use after free vulnerability in esp_do_dma() in hw/scsi/esp.c | known not affected: 110 | 2026-06-28T07:38:21+00:00 | Vulnerability · Source |
| CVE-2026-4371 | redhat_vex | thunderbird: Out of bounds read in IMAP parsing | fixed: 148 known affected: 5 | 2026-06-28T07:38:18+00:00 | Vulnerability · Source |
| CVE-2026-43498 | redhat_vex | kernel: accel/ivpu: Disallow re-exporting imported GEM objects | known not affected: 274 | 2026-06-28T07:38:16+00:00 | Vulnerability · Source |
| CVE-2026-43507 | redhat_vex | Prosody: Prosody: Denial of Service via XML parsing resource amplification | known not affected: 1 | 2026-06-28T07:38:14+00:00 | Vulnerability · Source |
| CVE-2026-43505 | redhat_vex | Prosody: mod_proxy65: Prosody: Unauthorized traffic relay via mod_proxy65 access control flaw | known not affected: 1 | 2026-06-28T07:38:14+00:00 | Vulnerability · Source |
| CVE-2026-43497 | redhat_vex | kernel: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free | known not affected: 274 | 2026-06-28T07:38:12+00:00 | Vulnerability · Source |
| CVE-2020-29660 | redhat_vex | kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-after-free | fixed: 150 known affected: 29 known not affected: 14 | 2026-06-28T07:38:11+00:00 | Vulnerability · Source |
| CVE-2020-29661 | redhat_vex | kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free | fixed: 1219 known not affected: 52 | 2026-06-28T07:38:11+00:00 | Vulnerability · Source |
| CVE-2026-43490 | redhat_vex | kernel: ksmbd: validate inherited ACE SID length | known not affected: 274 | 2026-06-28T07:38:10+00:00 | Vulnerability · Source |
| CVE-2026-43489 | redhat_vex | kernel: liveupdate: luo_file: remember retrieve() status | known not affected: 274 | 2026-06-28T07:38:09+00:00 | Vulnerability · Source |
| CVE-2026-43474 | redhat_vex | kernel: fs: init flags_valid before calling vfs_fileattr_get | known not affected: 274 | 2026-06-28T07:38:09+00:00 | Vulnerability · Source |
| CVE-2026-43484 | redhat_vex | kernel: mmc: core: Avoid bitfield RMW for claim/retune flags | known affected: 274 | 2026-06-28T07:38:08+00:00 | Vulnerability · Source |
| CVE-2026-43487 | redhat_vex | kernel: ata: libata-core: Disable LPM on ST1000DM010-2EP102 | known affected: 198 known not affected: 76 | 2026-06-28T07:38:08+00:00 | Vulnerability · Source |
| CVE-2026-43478 | redhat_vex | kernel: ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put | known affected: 184 known not affected: 90 | 2026-06-28T07:38:05+00:00 | Vulnerability · Source |
| CVE-2026-43479 | redhat_vex | kernel: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | known not affected: 274 | 2026-06-28T07:38:05+00:00 | Vulnerability · Source |
| CVE-2026-43473 | redhat_vex | kernel: scsi: mpi3mr: Add NULL checks when resetting request and reply queues | known affected: 232 known not affected: 42 | 2026-06-28T07:38:05+00:00 | Vulnerability · Source |
| CVE-2020-29534 | redhat_vex | kernel: io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd() allowing for privileges escalation | known not affected: 92 | 2026-06-28T07:38:04+00:00 | Vulnerability · Source |