VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304370 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-69896 | microsoft_vex | Windows Error Reporting Elevation of Privilege Vulnerability | fixed: 8 known affected: 8 | 2026-10-13T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-9941 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:55:56+00:00 | Vulnerability · Source |
| CVE-2026-10018 | redhat_vex | chromium-browser: angle: Integer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:55:56+00:00 | Vulnerability · Source |
| CVE-2026-9908 | redhat_vex | chromium-browser: angle: Out of bounds read in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:54:25+00:00 | Vulnerability · Source |
| CVE-2026-10979 | redhat_vex | chromium-browser: angle: Out of bounds read in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:54:25+00:00 | Vulnerability · Source |
| CVE-2026-95307 | redhat_vex | chromium-browser: UI misrepresentation in ExtensionsMenu | known not affected: 1 | 2026-10-03T04:52:51+00:00 | Vulnerability · Source |
| CVE-2026-7943 | redhat_vex | chromium-browser: angle: Insufficient validation of untrusted input in ANGLE | fixed: 92 known affected: 11 known not affected: 12 | 2026-10-03T04:49:48+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 1083 known affected: 213 known not affected: 6482 | 2026-10-03T04:49:48+00:00 | Vulnerability · Source |
| CVE-2026-79131 | redhat_vex | chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:49:48+00:00 | Vulnerability · Source |
| CVE-2026-78905 | redhat_vex | chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:49:48+00:00 | Vulnerability · Source |
| CVE-2026-91720 | redhat_vex | chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE | known affected: 22 known not affected: 23 | 2026-10-03T04:49:48+00:00 | Vulnerability · Source |
| CVE-2026-3536 | redhat_vex | chromium-browser: angle: Integer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:40:55+00:00 | Vulnerability · Source |
| CVE-2026-17704 | redhat_vex | chromium-browser: angle: chromium-browser: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:40:55+00:00 | Vulnerability · Source |
| CVE-2026-95363 | redhat_vex | chromium-browser: UI misrepresentation in FileSystem | known not affected: 1 | 2026-10-03T04:40:48+00:00 | Vulnerability · Source |
| CVE-2026-95328 | redhat_vex | chromium-browser: Confused deputy in Mobile | known not affected: 1 | 2026-10-03T04:36:01+00:00 | Vulnerability · Source |
| CVE-2026-17667 | redhat_vex | chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE | fixed: 92 known affected: 11 known not affected: 14 | 2026-10-03T04:33:53+00:00 | Vulnerability · Source |
| CVE-2026-95300 | redhat_vex | chromium-browser: Missing authorization in DevTools | known not affected: 1 | 2026-10-03T04:28:10+00:00 | Vulnerability · Source |
| CVE-2026-11088 | redhat_vex | chromium-browser: angle: Integer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:28:10+00:00 | Vulnerability · Source |
| CVE-2026-14396 | redhat_vex | chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:28:10+00:00 | Vulnerability · Source |
| CVE-2026-13834 | redhat_vex | chromium-browser: angle: Insufficient validation of untrusted input in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:28:10+00:00 | Vulnerability · Source |
| CVE-2026-0908 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:15:53+00:00 | Vulnerability · Source |
| CVE-2026-10974 | redhat_vex | chromium-browser: angle: Insufficient validation of untrusted input in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:11:45+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 113 known not affected: 4133 | 2026-10-03T04:08:23+00:00 | Vulnerability · Source |
| CVE-2026-87654 | redhat_vex | chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE | known affected: 22 known not affected: 23 | 2026-10-03T04:08:20+00:00 | Vulnerability · Source |
| CVE-2026-9940 | redhat_vex | chromium-browser: angle: Heap buffer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:08:06+00:00 | Vulnerability · Source |
| CVE-2026-9904 | redhat_vex | chromium-browser: angle: Use after free in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:07:54+00:00 | Vulnerability · Source |
| CVE-2025-58183 | redhat_vex | golang: archive/tar: Unbounded allocation when parsing GNU sparse map | fixed: 9024 known affected: 130 known not affected: 8349 | 2026-10-03T04:07:37+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 4577 known affected: 130 known not affected: 7228 | 2026-10-03T04:07:19+00:00 | Vulnerability · Source |
| CVE-2026-27145 | redhat_vex | crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries | fixed: 1083 known affected: 74 known not affected: 5346 | 2026-10-03T04:07:09+00:00 | Vulnerability · Source |
| CVE-2026-27136 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass | fixed: 1345 known affected: 178 known not affected: 13996 | 2026-10-03T04:07:00+00:00 | Vulnerability · Source |
| CVE-2026-25681 | redhat_vex | golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting | fixed: 1332 known affected: 240 known not affected: 8613 | 2026-10-03T04:06:51+00:00 | Vulnerability · Source |
| CVE-2025-66506 | redhat_vex | github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token | fixed: 329 known affected: 42 known not affected: 1297 | 2026-10-03T04:06:38+00:00 | Vulnerability · Source |
| CVE-2025-66418 | redhat_vex | urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion | fixed: 1992 known affected: 379 known not affected: 2959 | 2026-10-03T04:06:30+00:00 | Vulnerability · Source |
| CVE-2025-64756 | redhat_vex | glob: glob: Command Injection Vulnerability via Malicious Filenames | fixed: 171 known affected: 115 known not affected: 1099 | 2026-10-03T04:06:20+00:00 | Vulnerability · Source |
| CVE-2025-61729 | redhat_vex | crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate | fixed: 8116 known affected: 434 known not affected: 5144 | 2026-10-03T04:06:14+00:00 | Vulnerability · Source |
| CVE-2025-52881 | redhat_vex | runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects | fixed: 2419 known affected: 40 known not affected: 4478 | 2026-10-03T04:06:02+00:00 | Vulnerability · Source |
| CVE-2025-22868 | redhat_vex | golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws | fixed: 2199 known affected: 93 known not affected: 8426 | 2026-10-03T04:05:53+00:00 | Vulnerability · Source |
| CVE-2025-30204 | redhat_vex | golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing | fixed: 3866 known affected: 68 known not affected: 13220 | 2026-10-03T04:05:53+00:00 | Vulnerability · Source |
| CVE-2025-12816 | redhat_vex | node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications | fixed: 460 known affected: 37 known not affected: 2169 | 2026-10-03T04:05:53+00:00 | Vulnerability · Source |
| CVE-2025-22869 | redhat_vex | golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh | fixed: 2839 known affected: 56 known not affected: 6264 under investigation: 1 | 2026-10-03T04:05:53+00:00 | Vulnerability · Source |
| CVE-2026-95371 | redhat_vex | chromium-browser: Missing authorization in Views | known not affected: 1 | 2026-10-03T04:00:58+00:00 | Vulnerability · Source |
| CVE-2026-95353 | redhat_vex | chromium-browser: Use after free in Bindings | known not affected: 1 | 2026-10-03T04:00:57+00:00 | Vulnerability · Source |
| CVE-2026-79130 | redhat_vex | chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:00:54+00:00 | Vulnerability · Source |
| CVE-2026-7942 | redhat_vex | chromium-browser: angle: Integer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:00:54+00:00 | Vulnerability · Source |
| CVE-2026-95323 | redhat_vex | chromium-browser: UI misrepresentation in Chromium | known not affected: 1 | 2026-10-03T04:00:50+00:00 | Vulnerability · Source |
| CVE-2026-95314 | redhat_vex | chromium-browser: Incorrect authorization in HID | known not affected: 1 | 2026-10-03T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-95374 | redhat_vex | chromium-browser: Incorrect authorization in Network | known not affected: 1 | 2026-10-03T04:00:40+00:00 | Vulnerability · Source |
| CVE-2026-67408 | redhat_vex | rabbitmq-server: rabbitmq-server: Denial of Service via excessive memory allocation in stream management | fixed: 3 known affected: 8 | 2026-10-03T04:00:34+00:00 | Vulnerability · Source |
| CVE-2026-66071 | redhat_vex | rabbitmq-server: rabbitmq-server: Denial of service via atom exhaustion in OAuth2 JWT scope parsing | fixed: 3 known affected: 8 | 2026-10-03T04:00:32+00:00 | Vulnerability · Source |
| CVE-2026-14391 | redhat_vex | chromium-browser: angle: chromium-browser: Integer overflow in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-03T04:00:29+00:00 | Vulnerability · Source |