VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304379 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-103552 | redhat_vex | org.apache.directory.api/api-ldap-codec-core: Apache Directory LDAP API: Denial of Service via deeply nested search filter | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-61373 | redhat_vex | org.apache.thrift/libthrift: Apache Thrift: Denial of Service via unbounded resource allocation in TSaslNonblockingServer | known affected: 10 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-100079 | redhat_vex | kernel: usb: typec: ucsi: unregister debugfs entries on teardown | known affected: 183 known not affected: 93 | 2026-10-02T20:29:21+00:00 | Vulnerability · Source |
| CVE-2026-64001 | redhat_vex | kernel: ALSA: pcm: oss: Fix setup list UAF on proc write error | known affected: 198 known not affected: 76 | 2026-10-02T20:04:21+00:00 | Vulnerability · Source |
| CVE-2026-63973 | redhat_vex | kernel: net: mana: Add NULL guards in teardown path to prevent panic on attach failure | known affected: 232 known not affected: 43 | 2026-10-02T19:59:41+00:00 | Vulnerability · Source |
| CVE-2026-104988 | redhat_vex | pki-core: dogtag-pki: redhat-pki: pki: EST fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject | known affected: 11 known not affected: 78 | 2026-10-02T19:53:49+00:00 | Vulnerability · Source |
| CVE-2026-104855 | redhat_vex | wasmtime: wasmtime: Memory corruption via preemption checks during bulk operations | known affected: 4 known not affected: 2 | 2026-10-02T19:50:14+00:00 | Vulnerability · Source |
| CVE-2025-14920 | redhat_vex | transformers: code execution when processing a malicious Perceiver model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-10-02T19:50:02+00:00 | Vulnerability · Source |
| CVE-2026-67289 | redhat_vex | FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection | fixed: 546 known affected: 5 | 2026-10-02T19:30:21+00:00 | Vulnerability · Source |
| CVE-2026-102273 | redhat_vex | pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets | known affected: 79 known not affected: 164 | 2026-10-02T19:28:01+00:00 | Vulnerability · Source |
| CVE-2026-87604 | redhat_vex | chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read | known affected: 22 known not affected: 23 | 2026-10-02T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-73556 | redhat_vex | vllm: vLLM: Denial of Service via Regular Expression processing | fixed: 16 known affected: 14 known not affected: 4 | 2026-10-02T19:19:19+00:00 | Vulnerability · Source |
| CVE-2026-44223 | redhat_vex | vllm: vLLM: Denial of Service via malformed tensor shape in speculative decoding | fixed: 29 known affected: 6 known not affected: 6 | 2026-10-02T19:19:14+00:00 | Vulnerability · Source |
| CVE-2026-44222 | redhat_vex | vllm: vLLM: Denial of Service via malformed multimodal input or token injection | fixed: 6 known affected: 12 known not affected: 4 | 2026-10-02T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-9899 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 9 | 2026-10-02T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-41523 | redhat_vex | vllm: vLLM: Arbitrary code execution via malicious HuggingFace model | fixed: 46 known affected: 2 known not affected: 9 | 2026-10-02T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-79118 | redhat_vex | chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:17+00:00 | Vulnerability · Source |
| CVE-2026-17832 | redhat_vex | chromium-browser: angle: chromium-browser: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:14+00:00 | Vulnerability · Source |
| CVE-2026-43237 | redhat_vex | kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 | fixed: 612 known affected: 80 known not affected: 32 | 2026-10-02T19:10:09+00:00 | Vulnerability · Source |
| CVE-2026-7354 | redhat_vex | chromium-browser: angle: Out of bounds read and write in Angle | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-14386 | redhat_vex | chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-15109 | redhat_vex | chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-17691 | redhat_vex | chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-79275 | redhat_vex | chromium-browser: angle: ANGLE: Arbitrary code execution via use after free | fixed: 92 known affected: 7 known not affected: 27 | 2026-10-02T19:07:07+00:00 | Vulnerability · Source |
| CVE-2026-97399 | redhat_vex | glibc: glibc: Denial of Service via out-of-bounds read in strncasecmp | known affected: 676 known not affected: 1 | 2026-10-02T18:49:03+00:00 | Vulnerability · Source |
| CVE-2026-101100 | redhat_vex | @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup | known affected: 1 | 2026-10-02T18:46:04+00:00 | Vulnerability · Source |
| CVE-2026-95369 | redhat_vex | chromium-browser: Inappropriate implementation in XML | known not affected: 1 | 2026-10-02T18:46:03+00:00 | Vulnerability · Source |
| CVE-2026-93750 | redhat_vex | http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validation | known affected: 223 known not affected: 5 | 2026-10-02T18:45:58+00:00 | Vulnerability · Source |
| CVE-2026-89092 | redhat_vex | glibc: nscd stack overflow leads to degraded DNS resolution | known affected: 454 known not affected: 223 | 2026-10-02T18:45:54+00:00 | Vulnerability · Source |
| CVE-2026-104861 | redhat_vex | probe-image-size: probe-image-size: Denial of Service via crafted SVG input | known affected: 2 | 2026-10-02T18:45:51+00:00 | Vulnerability · Source |
| CVE-2026-104843 | redhat_vex | uv: uv: Arbitrary code execution via malicious package extraction on Windows | known affected: 93 known not affected: 1 | 2026-10-02T18:45:45+00:00 | Vulnerability · Source |
| CVE-2026-94637 | redhat_vex | github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data | known affected: 70 known not affected: 10 | 2026-10-02T18:45:34+00:00 | Vulnerability · Source |
| CVE-2026-93749 | redhat_vex | source-map-js: source-map-js: Denial of Service via malformed indexed source maps | known affected: 99 known not affected: 78 | 2026-10-02T18:45:24+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 201 known not affected: 13 | 2026-10-02T18:45:20+00:00 | Vulnerability · Source |
| CVE-2026-93690 | redhat_vex | uri-js: uri-js: Denial of Service via malformed path segments | known affected: 53 known not affected: 10 under investigation: 243 | 2026-10-02T18:45:14+00:00 | Vulnerability · Source |
| CVE-2026-83663 | redhat_vex | github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports | known affected: 70 known not affected: 10 | 2026-10-02T18:45:09+00:00 | Vulnerability · Source |
| CVE-2026-82458 | redhat_vex | thrift: thrift: Denial of Service via excessive memory allocation | fixed: 13 known affected: 13 known not affected: 5 | 2026-10-02T18:45:06+00:00 | Vulnerability · Source |
| CVE-2026-82397 | redhat_vex | python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields | known affected: 74 | 2026-10-02T18:44:59+00:00 | Vulnerability · Source |
| CVE-2026-63209 | redhat_vex | github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing | fixed: 96 known affected: 65 known not affected: 10 under investigation: 31 | 2026-10-02T18:44:54+00:00 | Vulnerability · Source |
| CVE-2026-56862 | redhat_vex | crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages | fixed: 7273 known affected: 269 known not affected: 3464 | 2026-10-02T18:44:45+00:00 | Vulnerability · Source |
| CVE-2026-45292 | redhat_vex | opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage | fixed: 29 known affected: 26 known not affected: 439 under investigation: 4 | 2026-10-02T18:44:29+00:00 | Vulnerability · Source |
| CVE-2026-11268 | redhat_vex | chromium-browser: angle: Uninitialized Use in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T18:44:13+00:00 | Vulnerability · Source |
| CVE-2026-10919 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T18:44:13+00:00 | Vulnerability · Source |
| CVE-2026-98062 | redhat_vex | kernel: bpf: Mark signal tracepoint siginfo arguments as scalar | known affected: 183 known not affected: 93 | 2026-10-02T17:46:06+00:00 | Vulnerability · Source |
| CVE-2026-94544 | redhat_vex | next: Next.js: Information disclosure via shared cache fills in Draft Mode | known affected: 20 | 2026-10-02T17:46:06+00:00 | Vulnerability · Source |
| CVE-2026-94483 | redhat_vex | next: Next.js: Information disclosure via SSRF in Image Optimization | known affected: 20 | 2026-10-02T17:46:05+00:00 | Vulnerability · Source |
| CVE-2026-75593 | redhat_vex | github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification | fixed: 30 known affected: 86 known not affected: 199 | 2026-10-02T17:45:58+00:00 | Vulnerability · Source |
| CVE-2026-95297 | redhat_vex | chromium-browser: Missing authorization in Contextual Tasks | known not affected: 1 | 2026-10-02T17:45:57+00:00 | Vulnerability · Source |
| CVE-2026-15792 | redhat_vex | github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request | fixed: 44 known affected: 54 known not affected: 368 | 2026-10-02T17:45:25+00:00 | Vulnerability · Source |
| CVE-2026-95302 | redhat_vex | chromium-browser: Incorrect authorization in WebAPKs | known not affected: 1 | 2026-10-02T17:45:24+00:00 | Vulnerability · Source |