VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-21934 | redhat_vex | kernel: rapidio: fix an API misues when rio_add_net() fails | known not affected: 274 | 2026-06-29T20:35:30+00:00 | Vulnerability · Source |
| CVE-2025-21923 | redhat_vex | kernel: HID: hid-steam: Fix use-after-free when detaching device | known not affected: 274 | 2026-06-29T20:35:21+00:00 | Vulnerability · Source |
| CVE-2025-21879 | redhat_vex | kernel: btrfs: fix use-after-free on inode when scanning root during em shrinking | known not affected: 274 | 2026-06-29T20:35:16+00:00 | Vulnerability · Source |
| CVE-2025-21811 | redhat_vex | kernel: nilfs2: protect access to buffers with no active references | known not affected: 274 | 2026-06-29T20:35:08+00:00 | Vulnerability · Source |
| CVE-2025-21797 | redhat_vex | kernel: HID: corsair-void: Add missing delayed work cancel for headset status | known not affected: 274 | 2026-06-29T20:35:04+00:00 | Vulnerability · Source |
| CVE-2025-21780 | redhat_vex | kernel: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() | known not affected: 274 | 2026-06-29T20:34:50+00:00 | Vulnerability · Source |
| CVE-2025-21756 | redhat_vex | kernel: vsock: Keep the binding until socket destruction | fixed: 2308 known not affected: 42 | 2026-06-29T20:34:42+00:00 | Vulnerability · Source |
| CVE-2025-21715 | redhat_vex | kernel: net: davicom: fix UAF in dm9000_drv_remove | known not affected: 274 | 2026-06-29T20:34:27+00:00 | Vulnerability · Source |
| CVE-2024-45506 | redhat_vex | haproxy: potential infinite loop condition in the h2_send() may trigger a DoS | known not affected: 18 | 2026-06-29T20:34:10+00:00 | Vulnerability · Source |
| CVE-2024-44331 | redhat_vex | gstreamer1-rtsp-server: DoS via rtsp-media.c | known not affected: 3 | 2026-06-29T20:33:41+00:00 | Vulnerability · Source |
| CVE-2024-44309 | redhat_vex | webkitgtk: data isolation bypass vulnerability | fixed: 458 known affected: 9 | 2026-06-29T20:33:36+00:00 | Vulnerability · Source |
| CVE-2024-44308 | redhat_vex | webkitgtk: javascriptcore: processing maliciously crafted web content may lead to arbitrary code execution | fixed: 13 known not affected: 20 | 2026-06-29T20:33:32+00:00 | Vulnerability · Source |
| CVE-2024-44192 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 513 known affected: 9 | 2026-06-29T20:33:28+00:00 | Vulnerability · Source |
| CVE-2024-27856 | redhat_vex | webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution | fixed: 458 known affected: 9 | 2026-06-29T20:32:40+00:00 | Vulnerability · Source |
| CVE-2024-11235 | redhat_vex | php: Reference counting in php_request_shutdown causes Use-After-Free | fixed: 472 known affected: 54 known not affected: 172 | 2026-06-29T20:31:44+00:00 | Vulnerability · Source |
| CVE-2025-14325 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T20:30:27+00:00 | Vulnerability · Source |
| CVE-2025-14324 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-06-29T20:30:23+00:00 | Vulnerability · Source |
| CVE-2025-14323 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Notifications component | fixed: 320 known affected: 8 | 2026-06-29T20:30:19+00:00 | Vulnerability · Source |
| CVE-2025-14322 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 320 known affected: 8 | 2026-06-29T20:30:16+00:00 | Vulnerability · Source |
| CVE-2025-14321 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-29T20:30:11+00:00 | Vulnerability · Source |
| CVE-2025-14174 | redhat_vex | Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page | fixed: 482 known not affected: 18 | 2026-06-29T20:30:08+00:00 | Vulnerability · Source |
| CVE-2025-13470 | redhat_vex | RNP: RNP: Confidentiality compromise due to uninitialized symmetric session key in Public-Key Encrypted Session Key (PKESK) packets | known not affected: 6 | 2026-06-29T20:29:43+00:00 | Vulnerability · Source |
| CVE-2025-13027 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 145 and Thunderbird 145 | known not affected: 12 | 2026-06-29T20:29:40+00:00 | Vulnerability · Source |
| CVE-2025-13026 | redhat_vex | firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:36+00:00 | Vulnerability · Source |
| CVE-2025-13025 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:31+00:00 | Vulnerability · Source |
| CVE-2025-13024 | redhat_vex | firefox: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 12 | 2026-06-29T20:29:27+00:00 | Vulnerability · Source |
| CVE-2025-13023 | redhat_vex | firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:23+00:00 | Vulnerability · Source |
| CVE-2025-13022 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:21+00:00 | Vulnerability · Source |
| CVE-2025-13021 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-29T20:29:17+00:00 | Vulnerability · Source |
| CVE-2025-13016 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component | fixed: 320 known affected: 8 | 2026-06-29T20:29:15+00:00 | Vulnerability · Source |
| CVE-2025-13012 | redhat_vex | firefox: thunderbird: Race condition in the Graphics component | fixed: 320 known affected: 8 | 2026-06-29T20:29:08+00:00 | Vulnerability · Source |
| CVE-2025-11721 | redhat_vex | thunderbird: firefox: Memory safety bug fixed in Firefox 144 and Thunderbird 144 | known not affected: 23 | 2026-06-29T20:28:53+00:00 | Vulnerability · Source |
| CVE-2025-11715 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 | fixed: 264 known affected: 8 | 2026-06-29T20:28:51+00:00 | Vulnerability · Source |
| CVE-2025-11714 | redhat_vex | thunderbird: firefox: Memory safety bugs | fixed: 264 known affected: 8 | 2026-06-29T20:28:47+00:00 | Vulnerability · Source |
| CVE-2025-11711 | redhat_vex | thunderbird: firefox: Some non-writable Object properties could be modified | fixed: 264 known affected: 8 | 2026-06-29T20:28:43+00:00 | Vulnerability · Source |
| CVE-2025-11710 | redhat_vex | thunderbird: firefox: Cross-process information leaked due to malicious IPC messages | fixed: 264 known affected: 8 | 2026-06-29T20:28:38+00:00 | Vulnerability · Source |
| CVE-2025-11709 | redhat_vex | thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures | fixed: 264 known affected: 8 | 2026-06-29T20:28:34+00:00 | Vulnerability · Source |
| CVE-2025-11708 | redhat_vex | thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() | fixed: 264 known affected: 8 | 2026-06-29T20:28:29+00:00 | Vulnerability · Source |
| CVE-2025-10537 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 | fixed: 264 known affected: 8 | 2026-06-29T20:27:55+00:00 | Vulnerability · Source |
| CVE-2025-10528 | redhat_vex | firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component | fixed: 264 known affected: 8 | 2026-06-29T20:27:51+00:00 | Vulnerability · Source |
| CVE-2025-10527 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component | fixed: 264 known affected: 8 | 2026-06-29T20:27:47+00:00 | Vulnerability · Source |
| CVE-2025-1080 | redhat_vex | libreoffice: Macro URL arbitrary script execution | fixed: 3928 known affected: 133 | 2026-06-29T20:27:16+00:00 | Vulnerability · Source |
| CVE-2024-9936 | redhat_vex | firefox: Undefined behavior in selection node cache | known affected: 2 known not affected: 7 | 2026-06-29T20:27:06+00:00 | Vulnerability · Source |
| CVE-2024-9680 | redhat_vex | firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) | fixed: 255 known affected: 6 known not affected: 4 | 2026-06-29T20:27:02+00:00 | Vulnerability · Source |
| CVE-2023-53003 | redhat_vex | kernel: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | known not affected: 274 | 2026-06-29T20:26:41+00:00 | Vulnerability · Source |
| CVE-2023-42970 | redhat_vex | webkitgtk: Processing web content may lead to arbitrary code execution | fixed: 412 known affected: 9 | 2026-06-29T20:26:32+00:00 | Vulnerability · Source |
| CVE-2023-42875 | redhat_vex | webkitgtk: Processing web content may lead to arbitrary code execution | fixed: 412 known affected: 9 | 2026-06-29T20:26:27+00:00 | Vulnerability · Source |
| CVE-2023-41915 | redhat_vex | pmix: race condition allows attackers to obtain ownership of arbitrary files | fixed: 96 | 2026-06-29T20:26:22+00:00 | Vulnerability · Source |
| CVE-2024-58087 | redhat_vex | kernel: ksmbd: fix racy issue from session lookup and expire | known not affected: 274 | 2026-06-29T20:25:41+00:00 | Vulnerability · Source |
| CVE-2024-58055 | redhat_vex | kernel: usb: gadget: f_tcm: Don't free command immediately | known not affected: 274 | 2026-06-29T20:25:34+00:00 | Vulnerability · Source |