VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288841 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-40476 | redhat_vex | gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite | fixed: 62 known affected: 13 | 2026-07-31T10:43:39+00:00 | Vulnerability · Source |
| CVE-2023-50186 | redhat_vex | gstreamer-plugins-bad-free: buffer overflow vulnerability | fixed: 31 known not affected: 7 | 2026-07-31T10:43:32+00:00 | Vulnerability · Source |
| CVE-2024-0444 | redhat_vex | gstreamer: AV1 Video Parsing Stack-based Buffer Overflow | fixed: 59 known affected: 14 known not affected: 85 | 2026-07-31T10:43:30+00:00 | Vulnerability · Source |
| CVE-2023-40475 | redhat_vex | gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio | fixed: 62 known affected: 13 | 2026-07-31T10:38:14+00:00 | Vulnerability · Source |
| CVE-2023-40474 | redhat_vex | gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video | fixed: 62 known affected: 13 | 2026-07-31T10:38:12+00:00 | Vulnerability · Source |
| CVE-2023-37329 | redhat_vex | gstreamer-plugins-bad: heap overwrite in PGS subtitle overlay decoder | known affected: 13 known not affected: 7 | 2026-07-31T10:38:11+00:00 | Vulnerability · Source |
| CVE-2023-37328 | redhat_vex | gstreamer-plugins-base: heap overwrite in subtitle parsing | fixed: 56 known affected: 16 | 2026-07-31T10:23:44+00:00 | Vulnerability · Source |
| CVE-2026-23466 | redhat_vex | kernel: drm/xe: Open-code GGTT MMIO access protection | known affected: 184 known not affected: 90 | 2026-07-31T10:13:46+00:00 | Vulnerability · Source |
| CVE-2009-1932 | redhat_vex | gstreamer-plugins-good: PNG decoder integer overflow | fixed: 31 | 2026-07-31T10:08:44+00:00 | Vulnerability · Source |
| CVE-2016-9813 | redhat_vex | gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser | fixed: 58 known not affected: 12 | 2026-07-31T10:04:19+00:00 | Vulnerability · Source |
| CVE-2021-3497 | redhat_vex | gstreamer-plugins-good: Use-after-free in matroska demuxing | fixed: 26 known affected: 8 known not affected: 3 | 2026-07-31T10:04:06+00:00 | Vulnerability · Source |
| CVE-2026-10079 | redhat_vex | stackrox: stackrox: Deploy-time policy enforcement and visibility bypass via label injection | known affected: 3 | 2026-07-31T10:03:58+00:00 | Vulnerability · Source |
| CVE-2009-0386 | redhat_vex | gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data | fixed: 31 | 2026-07-31T10:03:56+00:00 | Vulnerability · Source |
| CVE-2009-0397 | redhat_vex | gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data | fixed: 77 | 2026-07-31T10:03:45+00:00 | Vulnerability · Source |
| CVE-2009-0387 | redhat_vex | gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data | fixed: 31 | 2026-07-31T10:03:32+00:00 | Vulnerability · Source |
| CVE-2009-0398 | redhat_vex | gstreamer-plugins: Array index error while parsing malformed QuickTime media files | fixed: 46 | 2026-07-31T10:03:32+00:00 | Vulnerability · Source |
| CVE-2016-9812 | redhat_vex | gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new | fixed: 58 known not affected: 12 | 2026-07-31T09:59:59+00:00 | Vulnerability · Source |
| CVE-2016-9809 | redhat_vex | gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps | fixed: 116 known affected: 3 known not affected: 5 | 2026-07-31T09:59:57+00:00 | Vulnerability · Source |
| CVE-2016-9807 | redhat_vex | gstreamer-plugins-good: Invalid memory read in flx_decode_chunks | fixed: 118 known affected: 4 | 2026-07-31T09:59:56+00:00 | Vulnerability · Source |
| CVE-2026-48501 | redhat_vex | github-cli: GitHub CLI: Information disclosure via incorrect authorization header handling | known affected: 3 | 2026-07-31T09:59:37+00:00 | Vulnerability · Source |
| CVE-2026-45830 | redhat_vex | chromadb: ChromaDB: Unauthorized data manipulation due to improper authorization validation | known affected: 4 known not affected: 1 | 2026-07-31T09:59:24+00:00 | Vulnerability · Source |
| CVE-2016-9636 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:59:13+00:00 | Vulnerability · Source |
| CVE-2016-9808 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:58:33+00:00 | Vulnerability · Source |
| CVE-2016-9445 | redhat_vex | gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder | fixed: 177 known affected: 3 known not affected: 13 | 2026-07-31T09:54:22+00:00 | Vulnerability · Source |
| CVE-2026-45833 | redhat_vex | chromadb: ChromaDB: Arbitrary Code Execution via Code Injection | known affected: 4 known not affected: 1 | 2026-07-31T09:54:16+00:00 | Vulnerability · Source |
| CVE-2016-9447 | redhat_vex | gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder | fixed: 119 known affected: 3 known not affected: 17 | 2026-07-31T09:54:14+00:00 | Vulnerability · Source |
| CVE-2026-45832 | redhat_vex | chromadb: ChromaDB: Authorization bypass in V1 collection-level endpoints | known affected: 4 known not affected: 1 | 2026-07-31T09:54:10+00:00 | Vulnerability · Source |
| CVE-2016-9634 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:53:41+00:00 | Vulnerability · Source |
| CVE-2016-9635 | redhat_vex | gstreamer-plugins-good: Heap buffer overflow in FLIC decoder | fixed: 118 known affected: 4 | 2026-07-31T09:53:19+00:00 | Vulnerability · Source |
| CVE-2026-43370 | redhat_vex | kernel: drm/amdgpu: Fix use-after-free race in VM acquire | known affected: 274 | 2026-07-31T09:43:22+00:00 | Vulnerability · Source |
| CVE-2026-43237 | redhat_vex | kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 | known affected: 274 | 2026-07-31T09:43:21+00:00 | Vulnerability · Source |
| CVE-2026-31656 | redhat_vex | kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | known affected: 184 known not affected: 90 | 2026-07-31T09:43:21+00:00 | Vulnerability · Source |
| CVE-2026-66066 | redhat_vex | activestorage: Active Storage: Remote Code Execution via Unsafe libvips Operations | known not affected: 19 | 2026-07-31T08:21:22+00:00 | Vulnerability · Source |
| CVE-2026-18203 | redhat_vex | keycloak-services: keycloak-services: Group policy extendChildren matches sibling group path prefixes | known affected: 3 known not affected: 3 | 2026-07-31T08:04:22+00:00 | Vulnerability · Source |
| CVE-2026-18208 | redhat_vex | keycloak-services: keycloak-services: Inactive out-of-audience token introspection leaks signed JWT claim | known affected: 3 known not affected: 3 | 2026-07-31T08:04:16+00:00 | Vulnerability · Source |
| CVE-2026-16105 | redhat_vex | keycloak-services: keycloak-services: Missing per-role authorization on RoleContainerResource composite endpoints | known affected: 3 known not affected: 3 | 2026-07-31T08:04:00+00:00 | Vulnerability · Source |
| CVE-2026-31566 | redhat_vex | kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | known affected: 232 known not affected: 42 | 2026-07-31T06:33:08+00:00 | Vulnerability · Source |
| CVE-2026-31479 | redhat_vex | kernel: drm/xe: always keep track of remap prev/next | known affected: 184 known not affected: 90 | 2026-07-31T06:28:09+00:00 | Vulnerability · Source |
| CVE-2026-12932 | redhat_vex | openvpn: OpenVPN: Denial of Service due to memory leak in tls-crypt-v2 client key extraction | known not affected: 1 | 2026-07-31T05:23:13+00:00 | Vulnerability · Source |
| CVE-2026-11771 | redhat_vex | openvpn: OpenVPN: Denial of Service via crafted NTLM proxy response | known not affected: 1 | 2026-07-31T04:38:08+00:00 | Vulnerability · Source |
| CVE-2026-13117 | redhat_vex | OpenVPN: OpenVPN: Denial of service or memory leakage via incomplete TLS guard | known not affected: 1 | 2026-07-31T04:23:10+00:00 | Vulnerability · Source |
| CVE-2026-12996 | redhat_vex | OpenVPN: OpenVPN: Denial of Service or memory leak via crafted packets | known not affected: 1 | 2026-07-31T04:23:09+00:00 | Vulnerability · Source |
| CVE-2026-56444 | redhat_vex | unbound: Unbound: Denial of Service due to incorrect client reply accounting with specific serve-expired configuration | fixed: 4 known affected: 15 known not affected: 15 | 2026-07-31T03:57:51+00:00 | Vulnerability · Source |
| CVE-2026-50046 | redhat_vex | unbound: Unbound: Denial of Service due to freed pointer dereference in DNS-over-TLS handling | fixed: 4 known affected: 20 known not affected: 10 | 2026-07-31T03:57:48+00:00 | Vulnerability · Source |
| CVE-2026-46582 | redhat_vex | unbound: Unbound: Information disclosure via DNSSEC wildcard replay | fixed: 4 known affected: 30 | 2026-07-31T03:57:43+00:00 | Vulnerability · Source |
| CVE-2026-52863 | redhat_vex | unbound: Unbound: Denial of service due to memory corruption under specific configurations. | fixed: 4 known not affected: 30 | 2026-07-31T03:57:43+00:00 | Vulnerability · Source |
| CVE-2026-18157 | redhat_vex | yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: Remote Code Execution via APT Argument Injection | known not affected: 2 | 2026-07-31T03:03:17+00:00 | Vulnerability · Source |
| CVE-1999-0517 | suse_vex | SUSE CVE CVE-1999-0517 | known not affected: 216 | 2026-07-31T01:59:03+00:00 | Vulnerability · Source |
| CVE-2005-0210 | suse_vex | SUSE CVE CVE-2005-0210 | known not affected: 372 | 2026-07-31T01:59:00+00:00 | Vulnerability · Source |
| CVE-2005-1763 | suse_vex | SUSE CVE CVE-2005-1763 | known not affected: 409 | 2026-07-31T01:58:58+00:00 | Vulnerability · Source |