VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304370 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-100829 | suse_vex | SUSE CVE CVE-2026-100829 | known affected: 176 recommended: 9 | 2026-10-03T00:13:46+00:00 | Vulnerability · Source |
| CVE-2026-103500 | suse_vex | SUSE CVE CVE-2026-103500 | known affected: 164 | 2026-10-03T00:13:42+00:00 | Vulnerability · Source |
| CVE-2026-103621 | suse_vex | SUSE CVE CVE-2026-103621 | No product status | 2026-10-03T00:13:39+00:00 | Vulnerability · Source |
| CVE-2026-103622 | suse_vex | SUSE CVE CVE-2026-103622 | No product status | 2026-10-03T00:13:37+00:00 | Vulnerability · Source |
| CVE-2026-103623 | suse_vex | SUSE CVE CVE-2026-103623 | No product status | 2026-10-03T00:13:35+00:00 | Vulnerability · Source |
| CVE-2026-103624 | suse_vex | SUSE CVE CVE-2026-103624 | No product status | 2026-10-03T00:13:33+00:00 | Vulnerability · Source |
| CVE-2026-103625 | suse_vex | SUSE CVE CVE-2026-103625 | No product status | 2026-10-03T00:13:30+00:00 | Vulnerability · Source |
| CVE-2026-103626 | suse_vex | SUSE CVE CVE-2026-103626 | No product status | 2026-10-03T00:13:28+00:00 | Vulnerability · Source |
| CVE-2026-103627 | suse_vex | SUSE CVE CVE-2026-103627 | No product status | 2026-10-03T00:13:26+00:00 | Vulnerability · Source |
| CVE-2026-103628 | suse_vex | SUSE CVE CVE-2026-103628 | No product status | 2026-10-03T00:13:24+00:00 | Vulnerability · Source |
| CVE-2026-103629 | suse_vex | SUSE CVE CVE-2026-103629 | No product status | 2026-10-03T00:13:22+00:00 | Vulnerability · Source |
| CVE-2026-103630 | suse_vex | SUSE CVE CVE-2026-103630 | No product status | 2026-10-03T00:13:20+00:00 | Vulnerability · Source |
| CVE-2026-103631 | suse_vex | SUSE CVE CVE-2026-103631 | No product status | 2026-10-03T00:13:18+00:00 | Vulnerability · Source |
| CVE-2026-104721 | suse_vex | SUSE CVE CVE-2026-104721 | No product status | 2026-10-03T00:13:14+00:00 | Vulnerability · Source |
| CVE-2026-11065 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T00:06:48+00:00 | Vulnerability · Source |
| CVE-2026-57516 | redhat_vex | ray: Ray: Remote code execution via unsafe deserialization in WebDataset reader | fixed: 4 known affected: 15 known not affected: 4 | 2026-10-03T00:06:43+00:00 | Vulnerability · Source |
| CVE-2026-39831 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check | fixed: 402 known affected: 136 known not affected: 5964 | 2026-10-03T00:06:41+00:00 | Vulnerability · Source |
| CVE-2026-16221 | redhat_vex | fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency | fixed: 143 known affected: 22 known not affected: 718 under investigation: 58 | 2026-10-03T00:06:21+00:00 | Vulnerability · Source |
| CVE-2026-10929 | redhat_vex | chromium-browser: angle: Heap buffer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T00:06:16+00:00 | Vulnerability · Source |
| CVE-2025-22874 | redhat_vex | crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | fixed: 915 known affected: 57 known not affected: 234 | 2026-10-03T00:06:16+00:00 | Vulnerability · Source |
| CVE-2026-104844 | redhat_vex | postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors | known not affected: 7 | 2026-10-02T23:32:58+00:00 | Vulnerability · Source |
| CVE-2026-103387 | redhat_vex | uri-js: uri-js: Denial of Service via crafted mailto URI | known not affected: 10 | 2026-10-02T23:32:50+00:00 | Vulnerability · Source |
| CVE-2026-102555 | redhat_vex | libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding | known affected: 10 known not affected: 6 | 2026-10-02T23:32:21+00:00 | Vulnerability · Source |
| CVE-2026-44740 | redhat_vex | github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation | fixed: 525 known affected: 100 known not affected: 2311 | 2026-10-02T23:31:34+00:00 | Vulnerability · Source |
| CVE-2026-11061 | redhat_vex | chromium-browser: angle: Out of bounds read in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T23:31:34+00:00 | Vulnerability · Source |
| CVE-2020-8664 | redhat_vex | envoy: Incorrect Access Control when using SDS with Combined Validation Context | fixed: 2 | 2026-10-02T23:30:02+00:00 | Vulnerability · Source |
| CVE-2020-8661 | redhat_vex | envoy: Response flooding for HTTP/1.1 | fixed: 2 | 2026-10-02T23:30:01+00:00 | Vulnerability · Source |
| CVE-2020-8659 | redhat_vex | envoy: Excessive CPU and/or memory usage when proxying HTTP/1.1 | fixed: 2 | 2026-10-02T23:29:59+00:00 | Vulnerability · Source |
| CVE-2025-10502 | redhat_vex | chromium-browser: angle: Heap buffer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T23:29:25+00:00 | Vulnerability · Source |
| CVE-2026-98164 | redhat_vex | kernel: KVM: x86/mmu: Check write tracking in all address spaces | known affected: 234 known not affected: 42 | 2026-10-02T23:23:27+00:00 | Vulnerability · Source |
| CVE-2026-98162 | redhat_vex | kernel: smb/server: fix tree connection leak in smb2_tree_connect() | known not affected: 276 | 2026-10-02T23:23:23+00:00 | Vulnerability · Source |
| CVE-2026-98163 | redhat_vex | kernel: cgroup: Avoid iteration of dying tasks with zero refcount | known not affected: 274 | 2026-10-02T23:23:19+00:00 | Vulnerability · Source |
| CVE-2026-95359 | redhat_vex | chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-95294 | redhat_vex | chromium-browser: UI misrepresentation in Browser | known not affected: 1 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-95376 | redhat_vex | chromium-browser: Externally controlled reference in DevTools | known not affected: 1 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-96775 | redhat_vex | mlflow: MLflow dspy: Arbitrary code execution via crafted MLmodel artifact | known affected: 15 known not affected: 7 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-98161 | redhat_vex | kernel: nvdimm: pmem: keep PREFLUSH before data writes | known affected: 234 known not affected: 42 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-32281 | redhat_vex | crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation | fixed: 2325 known affected: 166 known not affected: 2210 | 2026-10-02T22:10:41+00:00 | Vulnerability · Source |
| CVE-2026-94638 | redhat_vex | thrift: Apache Thrift: Denial of Service via uncontrolled resource allocation in PHP bindings | fixed: 13 known affected: 12 | 2026-10-02T22:10:26+00:00 | Vulnerability · Source |
| CVE-2026-66331 | redhat_vex | thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport | fixed: 13 known affected: 12 | 2026-10-02T22:10:25+00:00 | Vulnerability · Source |
| CVE-2026-101908 | redhat_vex | axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution | fixed: 9 known not affected: 1 | 2026-10-02T22:10:18+00:00 | Vulnerability · Source |
| CVE-2026-101907 | redhat_vex | axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter | fixed: 9 known not affected: 1 | 2026-10-02T22:10:13+00:00 | Vulnerability · Source |
| CVE-2026-101904 | redhat_vex | axios: Axios: HTTP header injection via inherited prototype properties | fixed: 9 known not affected: 1 | 2026-10-02T22:10:12+00:00 | Vulnerability · Source |
| CVE-2026-101902 | redhat_vex | axios: axios: Unintended HTTP method override via prototype pollution gadget | fixed: 9 known not affected: 1 | 2026-10-02T22:10:10+00:00 | Vulnerability · Source |
| CVE-2026-101900 | redhat_vex | axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter | fixed: 9 known not affected: 1 | 2026-10-02T22:10:06+00:00 | Vulnerability · Source |
| CVE-2026-101898 | redhat_vex | axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings | fixed: 9 known not affected: 1 | 2026-10-02T22:10:05+00:00 | Vulnerability · Source |
| CVE-2026-101909 | redhat_vex | axios: axios: Denial of Service via prototype pollution gadget in form serialization | fixed: 9 known not affected: 1 | 2026-10-02T22:06:45+00:00 | Vulnerability · Source |
| CVE-2026-101906 | redhat_vex | axios: axios: Denial of Service via crafted redirect hostname | fixed: 9 known not affected: 1 | 2026-10-02T22:06:45+00:00 | Vulnerability · Source |
| CVE-2026-101905 | redhat_vex | axios: axios: Request socket hijacking via inherited createConnection property | fixed: 9 known not affected: 1 | 2026-10-02T22:06:42+00:00 | Vulnerability · Source |
| CVE-2026-101901 | redhat_vex | axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization | fixed: 9 known not affected: 1 | 2026-10-02T22:06:39+00:00 | Vulnerability · Source |