VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-0963 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T11:41:02+00:00 | Vulnerability · Source |
| CVE-2026-23312 | redhat_vex | kernel: net: usb: kaweth: validate USB endpoints | known affected: 274 | 2026-06-28T11:40:59+00:00 | Vulnerability · Source |
| CVE-2018-1000120 | redhat_vex | curl: FTP path trickery leads to NIL byte out of bounds write | fixed: 510 known affected: 13 known not affected: 5 | 2026-06-28T11:40:59+00:00 | Vulnerability · Source |
| CVE-2026-23302 | redhat_vex | kernel: net: annotate data-races around sk->sk_{data_ready,write_space} | known affected: 246 known not affected: 28 | 2026-06-28T11:40:58+00:00 | Vulnerability · Source |
| CVE-2026-46203 | redhat_vex | kernel: spi: cadence-quadspi: fix unclocked access on unbind | known affected: 76 known not affected: 198 | 2026-06-28T11:40:58+00:00 | Vulnerability · Source |
| CVE-2017-12618 | redhat_vex | apr-util: Out-of-bounds access in corrupted SDBM database | known affected: 32 under investigation: 1 | 2026-06-28T11:40:56+00:00 | Vulnerability · Source |
| CVE-2026-7992 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in UI | known not affected: 1 | 2026-06-28T11:40:56+00:00 | Vulnerability · Source |
| CVE-2026-46205 | redhat_vex | kernel: staging: media: atomisp: Disallow all private IOCTLs | known not affected: 274 | 2026-06-28T11:40:55+00:00 | Vulnerability · Source |
| CVE-2021-26341 | redhat_vex | hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch | fixed: 514 known affected: 42 | 2026-06-28T11:40:54+00:00 | Vulnerability · Source |
| CVE-2026-7911 | redhat_vex | chromium-browser: Use after free in Aura | known not affected: 1 | 2026-06-28T11:40:53+00:00 | Vulnerability · Source |
| CVE-2025-2828 | redhat_vex | langchain-community: SSRF Vulnerability in langchain-community | known not affected: 42 | 2026-06-28T11:40:53+00:00 | Vulnerability · Source |
| CVE-2007-4324 | redhat_vex | Flash movie can determine whether a TCP port is open | fixed: 20 | 2026-06-28T11:40:51+00:00 | Vulnerability · Source |
| CVE-2016-0636 | redhat_vex | OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666) | fixed: 488 | 2026-06-28T11:40:51+00:00 | Vulnerability · Source |
| CVE-2025-8341 | redhat_vex | github.com/grafana/grafana-infinity-datasource: Grafana Infinity datasource plugin URL Bypass Vulnerability | known affected: 1 | 2026-06-28T11:40:50+00:00 | Vulnerability · Source |
| CVE-2011-0558 | redhat_vex | flash-plugin: multiple code execution flaws (APSB11-02) | fixed: 8 | 2026-06-28T11:40:49+00:00 | Vulnerability · Source |
| CVE-2019-6974 | redhat_vex | Kernel: KVM: potential use-after-free via kvm_ioctl_create_device() | fixed: 430 known not affected: 75 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2026-31971 | redhat_vex | htslib: HTSlib: CRAM decoder vulnerable to buffer overflow | known not affected: 1 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2015-8956 | redhat_vex | kernel: NULL dereference in RFCOMM bind callback | fixed: 191 known affected: 27 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2025-57109 | redhat_vex | Kitware VTK: vtk: Kitware VTK (Visualization Toolkit) is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors | known not affected: 1 | 2026-06-28T11:40:48+00:00 | Vulnerability · Source |
| CVE-2015-8876 | redhat_vex | php: Zend/zend_exceptions.c does not validate certain Exception objects | fixed: 251 known affected: 28 known not affected: 82 | 2026-06-28T11:40:45+00:00 | Vulnerability · Source |
| CVE-2022-48804 | redhat_vex | kernel: vt_ioctl: fix array_index_nospec in vt_setactivate | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T11:40:45+00:00 | Vulnerability · Source |
| CVE-2019-6778 | redhat_vex | QEMU: slirp: heap buffer overflow in tcp_emu() | fixed: 107 known affected: 17 known not affected: 17 | 2026-06-28T11:40:44+00:00 | Vulnerability · Source |
| CVE-2026-7907 | redhat_vex | chromium-browser: Use after free in DOM | known not affected: 1 | 2026-06-28T11:40:44+00:00 | Vulnerability · Source |
| CVE-2015-8866 | redhat_vex | php: libxml_disable_entity_loader setting is shared between threads | fixed: 251 known affected: 110 | 2026-06-28T11:40:41+00:00 | Vulnerability · Source |
| CVE-2015-8863 | redhat_vex | jq: heap-buffer-overflow in tokenadd() function | fixed: 9 known not affected: 7 | 2026-06-28T11:40:41+00:00 | Vulnerability · Source |
| CVE-2015-8660 | redhat_vex | kernel: Permission bypass on overlayfs during copy_up | fixed: 207 known not affected: 15 | 2026-06-28T11:40:39+00:00 | Vulnerability · Source |
| CVE-2021-26708 | redhat_vex | kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c | fixed: 150 known not affected: 149 | 2026-06-28T11:40:37+00:00 | Vulnerability · Source |
| CVE-2022-48760 | redhat_vex | kernel: USB: core: Fix hang in usb_kill_urb by adding memory barriers | fixed: 150 known affected: 150 | 2026-06-28T11:40:37+00:00 | Vulnerability · Source |
| CVE-2015-8635 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-01 | fixed: 5 | 2026-06-28T11:40:36+00:00 | Vulnerability · Source |
| CVE-2017-12188 | redhat_vex | Kernel: KVM: MMU potential stack buffer overrun during page walks | fixed: 191 known not affected: 43 | 2026-06-28T11:40:34+00:00 | Vulnerability · Source |
| CVE-2017-15425 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T11:40:33+00:00 | Vulnerability · Source |
| CVE-2017-15424 | redhat_vex | chromium-browser: url spoof in omnibox | fixed: 12 | 2026-06-28T11:40:33+00:00 | Vulnerability · Source |
| CVE-2017-15420 | redhat_vex | chromium-browser: url spoofing in omnibox | fixed: 12 | 2026-06-28T11:40:33+00:00 | Vulnerability · Source |
| CVE-2010-3557 | redhat_vex | OpenJDK Swing mutable static (6938813) | fixed: 733 | 2026-06-28T11:40:32+00:00 | Vulnerability · Source |
| CVE-2026-43272 | redhat_vex | kernel: ring-buffer: Fix possible dereference of uninitialized pointer | known affected: 76 known not affected: 198 | 2026-06-28T11:40:31+00:00 | Vulnerability · Source |
| CVE-2017-15415 | redhat_vex | chromium-browser: pointer information disclosure in ipc call | fixed: 12 | 2026-06-28T11:40:31+00:00 | Vulnerability · Source |
| CVE-2017-15413 | redhat_vex | chromium-browser: type confusion in webassembly | fixed: 12 | 2026-06-28T11:40:30+00:00 | Vulnerability · Source |
| CVE-2017-15412 | redhat_vex | libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c | fixed: 91 known affected: 9 known not affected: 4 | 2026-06-28T11:40:30+00:00 | Vulnerability · Source |
| CVE-2026-43264 | redhat_vex | kernel: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() | known affected: 76 known not affected: 198 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2010-2174 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2010-2177 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2010-2173 | redhat_vex | flash-plugin: multiple security flaws (APSB10-14) | fixed: 10 | 2026-06-28T11:40:29+00:00 | Vulnerability · Source |
| CVE-2025-71232 | redhat_vex | kernel: scsi: qla2xxx: Free sp in error path to fix system crash | known affected: 274 | 2026-06-28T11:40:28+00:00 | Vulnerability · Source |
| CVE-2015-8045 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-15395 | redhat_vex | chromium-browser: null pointer dereference in imagecapture | fixed: 12 | 2026-06-28T11:40:27+00:00 | Vulnerability · Source |
| CVE-2015-8044 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-28 | fixed: 5 | 2026-06-28T11:40:27+00:00 | Vulnerability · Source |
| CVE-2017-15393 | redhat_vex | chromium-browser: referrer leak in devtools | fixed: 12 | 2026-06-28T11:40:25+00:00 | Vulnerability · Source |
| CVE-2017-15388 | redhat_vex | chromium-browser: out of bounds read in skia | fixed: 12 | 2026-06-28T11:40:24+00:00 | Vulnerability · Source |
| CVE-2020-10701 | redhat_vex | libvirt: guest agent timeout can be set under read-only mode leading to DoS | known not affected: 102 | 2026-06-28T11:40:23+00:00 | Vulnerability · Source |
| CVE-2015-7632 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-25 | fixed: 5 | 2026-06-28T11:40:22+00:00 | Vulnerability · Source |