VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-9179 | redhat_vex | thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component | fixed: 261 known affected: 8 | 2026-06-29T20:47:46+00:00 | Vulnerability · Source |
| CVE-2025-8044 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 141 and Thunderbird 141 | known not affected: 23 | 2026-06-29T20:46:56+00:00 | Vulnerability · Source |
| CVE-2025-8040 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 | known not affected: 23 | 2026-06-29T20:46:50+00:00 | Vulnerability · Source |
| CVE-2025-8034 | redhat_vex | firefox: thunderbird: Memory safety bugs | fixed: 261 known affected: 8 | 2026-06-29T20:46:38+00:00 | Vulnerability · Source |
| CVE-2025-8028 | redhat_vex | firefox: thunderbird: Large branch table could lead to truncated instruction | fixed: 261 known affected: 8 | 2026-06-29T20:46:35+00:00 | Vulnerability · Source |
| CVE-2025-8027 | redhat_vex | firefox: thunderbird: JavaScript engine only wrote partial return value to stack | fixed: 261 known affected: 8 | 2026-06-29T20:46:31+00:00 | Vulnerability · Source |
| CVE-2025-68307 | redhat_vex | kernel: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | known affected: 184 known not affected: 90 | 2026-06-29T20:45:53+00:00 | Vulnerability · Source |
| CVE-2025-68297 | redhat_vex | kernel: ceph: fix crash in process_v2_sparse_read() for encrypted directories | known affected: 232 known not affected: 42 | 2026-06-29T20:45:50+00:00 | Vulnerability · Source |
| CVE-2025-68291 | redhat_vex | kernel: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose() | known affected: 232 known not affected: 42 | 2026-06-29T20:45:47+00:00 | Vulnerability · Source |
| CVE-2025-68191 | redhat_vex | kernel: udp_tunnel: use netdev_warn() instead of netdev_WARN() | known affected: 232 known not affected: 42 | 2026-06-29T20:45:28+00:00 | Vulnerability · Source |
| CVE-2025-67779 | redhat_vex | next: React Server Components: Denial of Service via Unsafe Deserialization | known not affected: 32 | 2026-06-29T20:45:09+00:00 | Vulnerability · Source |
| CVE-2025-6663 | redhat_vex | gstreamer: GStreamer Code Execution Vulnerability | known not affected: 22 | 2026-06-29T20:43:49+00:00 | Vulnerability · Source |
| CVE-2025-6558 | redhat_vex | angle: insufficient input validation can cause undefined behavior | fixed: 436 known affected: 4 known not affected: 21 | 2026-06-29T20:43:45+00:00 | Vulnerability · Source |
| CVE-2025-6545 | redhat_vex | pbkdf2: pbkdf2 silently returns predictable key material | fixed: 22 known affected: 16 known not affected: 256 | 2026-06-29T20:43:35+00:00 | Vulnerability · Source |
| CVE-2025-6436 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 140 and Thunderbird 140 | known not affected: 12 | 2026-06-29T20:43:31+00:00 | Vulnerability · Source |
| CVE-2025-6424 | redhat_vex | firefox: thunderbird: Use-after-free in FontFaceSet | fixed: 253 known affected: 8 | 2026-06-29T20:43:26+00:00 | Vulnerability · Source |
| CVE-2025-68221 | redhat_vex | kernel: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr | known affected: 76 known not affected: 198 | 2026-06-29T20:43:24+00:00 | Vulnerability · Source |
| CVE-2026-56789 | redhat_vex | rtklib: RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count | known not affected: 1 | 2026-06-29T20:43:20+00:00 | Vulnerability · Source |
| CVE-2026-56786 | redhat_vex | rtklib: RTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message | known not affected: 1 | 2026-06-29T20:43:16+00:00 | Vulnerability · Source |
| CVE-2026-46608 | redhat_vex | glances: Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533) | known not affected: 1 | 2026-06-29T20:43:12+00:00 | Vulnerability · Source |
| CVE-2026-46606 | redhat_vex | glances: Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py | known not affected: 1 | 2026-06-29T20:43:06+00:00 | Vulnerability · Source |
| CVE-2025-39778 | redhat_vex | kernel: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() | known not affected: 274 | 2026-06-29T20:42:44+00:00 | Vulnerability · Source |
| CVE-2025-24216 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 513 known affected: 9 | 2026-06-29T20:41:41+00:00 | Vulnerability · Source |
| CVE-2025-24213 | redhat_vex | webkitgtk: A type confusion issue could lead to memory corruption | fixed: 13 known affected: 4 known not affected: 16 | 2026-06-29T20:41:36+00:00 | Vulnerability · Source |
| CVE-2025-24209 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 513 known affected: 9 | 2026-06-29T20:41:31+00:00 | Vulnerability · Source |
| CVE-2025-24201 | redhat_vex | webkitgtk: out-of-bounds write vulnerability | fixed: 458 known affected: 9 | 2026-06-29T20:41:27+00:00 | Vulnerability · Source |
| CVE-2025-24189 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 445 known affected: 11 known not affected: 5 | 2026-06-29T20:41:22+00:00 | Vulnerability · Source |
| CVE-2025-24162 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 458 known affected: 9 | 2026-06-29T20:41:17+00:00 | Vulnerability · Source |
| CVE-2025-23267 | redhat_vex | nvidia-container-toolkit: NVIDIA Container Toolkit Link Following Vulnerability | known not affected: 19 | 2026-06-29T20:41:04+00:00 | Vulnerability · Source |
| CVE-2025-22867 | redhat_vex | cmd/go: Arbitrary code execution during build on darwin in cmd/go | known not affected: 45 | 2026-06-29T20:40:31+00:00 | Vulnerability · Source |
| CVE-2025-22067 | redhat_vex | kernel: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() | known not affected: 274 | 2026-06-29T20:40:16+00:00 | Vulnerability · Source |
| CVE-2025-22041 | redhat_vex | kernel: ksmbd: fix use-after-free in ksmbd_sessions_deregister() | known not affected: 274 | 2026-06-29T20:40:15+00:00 | Vulnerability · Source |
| CVE-2025-21968 | redhat_vex | kernel: drm/amd/display: Fix slab-use-after-free on hdcp_work | known not affected: 274 | 2026-06-29T20:40:02+00:00 | Vulnerability · Source |
| CVE-2025-21967 | redhat_vex | kernel: ksmbd: fix use-after-free in ksmbd_free_work_struct | known not affected: 274 | 2026-06-29T20:39:57+00:00 | Vulnerability · Source |
| CVE-2025-34297 | redhat_vex | kissfft: KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc | known not affected: 1 | 2026-06-29T20:39:38+00:00 | Vulnerability · Source |
| CVE-2025-31650 | redhat_vex | tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame | fixed: 132 known affected: 22 known not affected: 15 | 2026-06-29T20:39:05+00:00 | Vulnerability · Source |
| CVE-2025-31492 | redhat_vex | mod_auth_openidc: mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data | fixed: 216 known affected: 2 | 2026-06-29T20:39:00+00:00 | Vulnerability · Source |
| CVE-2025-31278 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 436 known affected: 4 known not affected: 5 | 2026-06-29T20:38:58+00:00 | Vulnerability · Source |
| CVE-2025-31273 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 436 known affected: 4 known not affected: 5 | 2026-06-29T20:38:51+00:00 | Vulnerability · Source |
| CVE-2025-31257 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 393 known affected: 9 | 2026-06-29T20:38:48+00:00 | Vulnerability · Source |
| CVE-2025-31206 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 320 known affected: 9 | 2026-06-29T20:38:42+00:00 | Vulnerability · Source |
| CVE-2025-31204 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 320 known affected: 9 | 2026-06-29T20:38:37+00:00 | Vulnerability · Source |
| CVE-2025-30427 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 513 known affected: 9 | 2026-06-29T20:38:09+00:00 | Vulnerability · Source |
| CVE-2025-30153 | redhat_vex | github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter | fixed: 4 known affected: 3 known not affected: 119 | 2026-06-29T20:37:52+00:00 | Vulnerability · Source |
| CVE-2025-27110 | redhat_vex | mod_security: Libmodsecurity3 has possible bypass of encoded HTML entities | known not affected: 12 | 2026-06-29T20:37:28+00:00 | Vulnerability · Source |
| CVE-2025-26625 | redhat_vex | git-lfs: Git LFS may write to arbitrary files via crafted symlinks | fixed: 382 | 2026-06-29T20:37:18+00:00 | Vulnerability · Source |
| CVE-2025-24264 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 320 known affected: 9 | 2026-06-29T20:36:21+00:00 | Vulnerability · Source |
| CVE-2025-24223 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 320 known affected: 9 | 2026-06-29T20:36:16+00:00 | Vulnerability · Source |
| CVE-2025-3260 | redhat_vex | grafana: Unauthorized Dashboard Access in Grafana | known not affected: 21 | 2026-06-29T20:36:07+00:00 | Vulnerability · Source |
| CVE-2025-2515 | redhat_vex | bluechi: Privilege Escalation in BlueChi via Unrestricted Cross-Node Systemd Dependencies | known not affected: 1 | 2026-06-29T20:36:02+00:00 | Vulnerability · Source |