VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-16073 | redhat_vex | chromium-browser: Site Isolation bypass after tab restore | fixed: 12 | 2026-06-28T11:48:47+00:00 | Vulnerability · Source |
| CVE-2026-33306 | redhat_vex | github.com/bcrypt-ruby/bcrypt-ruby: bcrypt-ruby (JRuby): Weakened password hashing due to integer overflow | known not affected: 2 | 2026-06-28T11:48:46+00:00 | Vulnerability · Source |
| CVE-2026-12022 | redhat_vex | chromium-browser: chromium-browser: Race Safe Browsing | known not affected: 1 | 2026-06-28T11:48:46+00:00 | Vulnerability · Source |
| CVE-2018-16066 | redhat_vex | chromium-browser: Out of bounds read in Blink | fixed: 12 | 2026-06-28T11:48:46+00:00 | Vulnerability · Source |
| CVE-2026-43401 | redhat_vex | kernel: cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() | known affected: 184 known not affected: 90 | 2026-06-28T11:48:43+00:00 | Vulnerability · Source |
| CVE-2022-45886 | redhat_vex | kernel: use-after-free due to race condition occurring in dvb_net.c | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:48:43+00:00 | Vulnerability · Source |
| CVE-2012-5074 | redhat_vex | OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7169887) | fixed: 144 known affected: 9 known not affected: 20 | 2026-06-28T11:48:43+00:00 | Vulnerability · Source |
| CVE-2012-5256 | redhat_vex | flash-plugin: multiple code-execution flaws (APSB12-22) | fixed: 5 | 2026-06-28T11:48:41+00:00 | Vulnerability · Source |
| CVE-2022-3100 | redhat_vex | openstack-barbican: access policy bypass via query string injection | fixed: 23 known not affected: 12 | 2026-06-28T11:48:41+00:00 | Vulnerability · Source |
| CVE-2019-14284 | redhat_vex | kernel: denial of service in drivers/block/floppy.c by setup_format_params division-by-zero | known affected: 56 known not affected: 48 | 2026-06-28T11:48:40+00:00 | Vulnerability · Source |
| CVE-2016-0686 | redhat_vex | OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952) | fixed: 1119 | 2026-06-28T11:48:38+00:00 | Vulnerability · Source |
| CVE-2022-30594 | redhat_vex | kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option | fixed: 671 known affected: 42 | 2026-06-28T11:48:36+00:00 | Vulnerability · Source |
| CVE-2026-33131 | redhat_vex | h3: H3: Middleware bypass with one gadget | known not affected: 1 | 2026-06-28T11:48:35+00:00 | Vulnerability · Source |
| CVE-2012-3174 | redhat_vex | OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933) | fixed: 202 known not affected: 17 | 2026-06-28T11:48:34+00:00 | Vulnerability · Source |
| CVE-2026-4719 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component | fixed: 320 known affected: 8 | 2026-06-28T11:48:33+00:00 | Vulnerability · Source |
| CVE-2012-3136 | redhat_vex | OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567) | fixed: 135 known affected: 9 known not affected: 29 | 2026-06-28T11:48:33+00:00 | Vulnerability · Source |
| CVE-2017-5083 | redhat_vex | chromium-browser: ui spoofing in blink | fixed: 12 | 2026-06-28T11:48:32+00:00 | Vulnerability · Source |
| CVE-2020-10776 | redhat_vex | keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS | fixed: 14 known not affected: 5 | 2026-06-28T11:48:31+00:00 | Vulnerability · Source |
| CVE-2011-1179 | redhat_vex | spice-xpi: unitialized pointer writes possible when getting plugin properties | fixed: 23 known affected: 1 | 2026-06-28T11:48:31+00:00 | Vulnerability · Source |
| CVE-2020-10768 | redhat_vex | kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. | fixed: 353 known not affected: 60 | 2026-06-28T11:48:30+00:00 | Vulnerability · Source |
| CVE-2012-1724 | redhat_vex | OpenJDK: XML parsing infinite loop (JAXP, 7157609) | fixed: 234 | 2026-06-28T11:48:29+00:00 | Vulnerability · Source |
| CVE-2018-10074 | redhat_vex | kernel: Null pointer dereference in drivers/clk/hisilicon/clk-hi3660-stub.c:hi3660_stub_clk_probe() allows local users to cause denial of service | known not affected: 88 | 2026-06-28T11:48:29+00:00 | Vulnerability · Source |
| CVE-2018-1000808 | redhat_vex | pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store | fixed: 10 known affected: 15 known not affected: 1 | 2026-06-28T11:48:27+00:00 | Vulnerability · Source |
| CVE-2022-30522 | redhat_vex | httpd: mod_sed: DoS vulnerability | fixed: 224 known affected: 11 known not affected: 111 | 2026-06-28T11:48:27+00:00 | Vulnerability · Source |
| CVE-2023-52615 | redhat_vex | kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng | fixed: 709 known affected: 64 known not affected: 16 | 2026-06-28T11:48:27+00:00 | Vulnerability · Source |
| CVE-2023-52581 | redhat_vex | kernel: netfilter: nf_tables: memory leak when more than 255 elements expired | fixed: 429 known affected: 50 known not affected: 14 | 2026-06-28T11:48:25+00:00 | Vulnerability · Source |
| CVE-2018-1000301 | redhat_vex | curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service | fixed: 509 known affected: 7 known not affected: 10 | 2026-06-28T11:48:24+00:00 | Vulnerability · Source |
| CVE-2018-15594 | redhat_vex | kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests | fixed: 204 known affected: 74 known not affected: 1 | 2026-06-28T11:48:24+00:00 | Vulnerability · Source |
| CVE-2017-3058 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-10 | fixed: 3 | 2026-06-28T11:48:23+00:00 | Vulnerability · Source |
| CVE-2017-3077 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB17-17 | fixed: 3 | 2026-06-28T11:48:22+00:00 | Vulnerability · Source |
| CVE-2026-4711 | redhat_vex | firefox: thunderbird: Use-after-free in the Widget: Cocoa component | fixed: 320 known affected: 8 | 2026-06-28T11:48:21+00:00 | Vulnerability · Source |
| CVE-2022-45887 | redhat_vex | kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c | fixed: 399 known affected: 42 known not affected: 108 | 2026-06-28T11:48:21+00:00 | Vulnerability · Source |
| CVE-2018-1000028 | redhat_vex | kernel: Improper sorting of GIDs in nfsd can lead to incorrect permissions being applied | known not affected: 104 | 2026-06-28T11:48:19+00:00 | Vulnerability · Source |
| CVE-2012-1535 | redhat_vex | flash-plugin: code execution flaw (APSB12-18) | fixed: 5 | 2026-06-28T11:48:17+00:00 | Vulnerability · Source |
| CVE-2025-5279 | redhat_vex | redshift-connector: SSL Certificate Validation Bypass in Amazon Redshift Python Connector | known not affected: 1 | 2026-06-28T11:48:17+00:00 | Vulnerability · Source |
| CVE-2025-54510 | redhat_vex | AMD Platform Security Processor: AMD EPYC 9005 Series CPUs: AMD Platform Security Processor: Information disclosure via missing lock check | known affected: 76 known not affected: 198 | 2026-06-28T11:48:16+00:00 | Vulnerability · Source |
| CVE-2020-26143 | redhat_vex | kernel: accepting fragmented plaintext frames in protected networks | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T11:48:14+00:00 | Vulnerability · Source |
| CVE-2018-14851 | redhat_vex | php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE() | fixed: 486 known affected: 88 known not affected: 77 | 2026-06-28T11:48:11+00:00 | Vulnerability · Source |
| CVE-2008-5344 | redhat_vex | Java WebStart unprivileged local file and network access | fixed: 571 | 2026-06-28T11:48:11+00:00 | Vulnerability · Source |
| CVE-2013-0442 | redhat_vex | OpenJDK: insufficient privilege checking issue (AWT, 7192977) | fixed: 543 known affected: 1 | 2026-06-28T11:48:11+00:00 | Vulnerability · Source |
| CVE-2015-6780 | redhat_vex | chromium-browser: Use-after-free in Infobars | fixed: 12 | 2026-06-28T11:48:10+00:00 | Vulnerability · Source |
| CVE-2023-52635 | redhat_vex | kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop] | fixed: 793 known affected: 22 known not affected: 99 | 2026-06-28T11:48:10+00:00 | Vulnerability · Source |
| CVE-2017-9310 | redhat_vex | Qemu: net: infinite loop in e1000e NIC emulation | fixed: 47 known affected: 1 known not affected: 18 | 2026-06-28T11:48:10+00:00 | Vulnerability · Source |
| CVE-2026-32936 | redhat_vex | github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests | fixed: 8 known not affected: 26 | 2026-06-28T11:48:09+00:00 | Vulnerability · Source |
| CVE-2011-0619 | redhat_vex | flash-plugin: crash and potential arbitrary code execution (APSB11-12) | fixed: 5 | 2026-06-28T11:48:09+00:00 | Vulnerability · Source |
| CVE-2017-9075 | redhat_vex | kernel: net: sctp_v6_create_accept_sk function mishandles inheritance | fixed: 381 known affected: 1 known not affected: 7 | 2026-06-28T11:48:07+00:00 | Vulnerability · Source |
| CVE-2020-2604 | redhat_vex | OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) | fixed: 965 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2018-20511 | redhat_vex | kernel: Memory address exposure in drivers/net/appletalk/ipddp.c:ipddp_ioctl() by users with CAP_NET_ADMIN | known not affected: 104 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2018-1050 | redhat_vex | samba: NULL pointer dereference in printer server process | fixed: 714 known not affected: 38 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |
| CVE-2011-0606 | redhat_vex | acroread: critical APSB11-03 | fixed: 18 | 2026-06-28T11:48:06+00:00 | Vulnerability · Source |