VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-5199 | redhat_vex | chromium-browser: heap corruption in ffmpeg | fixed: 12 | 2026-06-28T11:31:33+00:00 | Vulnerability · Source |
| CVE-2025-71094 | redhat_vex | kernel: net: usb: asix: validate PHY address before use | known affected: 232 known not affected: 42 | 2026-06-28T11:31:32+00:00 | Vulnerability · Source |
| CVE-2019-13738 | redhat_vex | chromium-browser: Insufficient policy enforcement in navigation | fixed: 14 | 2026-06-28T11:31:31+00:00 | Vulnerability · Source |
| CVE-2016-5164 | redhat_vex | chromium-browser: universal xss using devtools | fixed: 12 | 2026-06-28T11:31:29+00:00 | Vulnerability · Source |
| CVE-2016-5191 | redhat_vex | chromium-browser: universal xss in bookmarks | fixed: 12 | 2026-06-28T11:31:29+00:00 | Vulnerability · Source |
| CVE-2016-7875 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-39 | fixed: 3 known affected: 1 | 2026-06-28T11:31:27+00:00 | Vulnerability · Source |
| CVE-2019-13716 | redhat_vex | chromium-browser: Service worker state error | fixed: 14 | 2026-06-28T11:31:26+00:00 | Vulnerability · Source |
| CVE-2019-17053 | redhat_vex | kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol | fixed: 354 known affected: 42 known not affected: 1 | 2026-06-28T11:31:25+00:00 | Vulnerability · Source |
| CVE-2019-13687 | redhat_vex | chromium-browser: Use-after-free in media | fixed: 14 | 2026-06-28T11:31:24+00:00 | Vulnerability · Source |
| CVE-2020-12364 | redhat_vex | kernel: Null pointer dereference in some Intel(R) Graphics Drivers | fixed: 357 known affected: 33 known not affected: 140 | 2026-06-28T11:31:22+00:00 | Vulnerability · Source |
| CVE-2019-13686 | redhat_vex | chromium-browser: Use-after-free in offline pages | fixed: 14 | 2026-06-28T11:31:22+00:00 | Vulnerability · Source |
| CVE-2026-23371 | redhat_vex | kernel: sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting | known not affected: 274 | 2026-06-28T11:31:21+00:00 | Vulnerability · Source |
| CVE-2026-31762 | redhat_vex | kernel: iio: gyro: mpu3050: Fix irq resource leak | known not affected: 274 | 2026-06-28T11:31:21+00:00 | Vulnerability · Source |
| CVE-2016-5363 | redhat_vex | openstack-neutron: MAC source address spoofing vulnerability | fixed: 49 known affected: 15 known not affected: 12 | 2026-06-28T11:31:20+00:00 | Vulnerability · Source |
| CVE-2016-5325 | redhat_vex | nodejs: reason argument in ServerResponse#writeHead() not properly validated | fixed: 93 known affected: 5 known not affected: 1 | 2026-06-28T11:31:19+00:00 | Vulnerability · Source |
| CVE-2025-27148 | redhat_vex | gradle: Gradle vulnerable to local privilege escalation through system temporary directory | known not affected: 1 | 2026-06-28T11:31:19+00:00 | Vulnerability · Source |
| CVE-2016-5362 | redhat_vex | openstack-neutron: DHCP spoofing vulnerability | fixed: 49 known affected: 15 known not affected: 12 | 2026-06-28T11:31:18+00:00 | Vulnerability · Source |
| CVE-2020-14386 | redhat_vex | kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege | fixed: 413 known not affected: 45 | 2026-06-28T11:31:18+00:00 | Vulnerability · Source |
| CVE-2016-5009 | redhat_vex | crash: mon_command crashes ceph monitors on receiving empty prefix | fixed: 71 known not affected: 11 | 2026-06-28T11:31:17+00:00 | Vulnerability · Source |
| CVE-2025-5472 | redhat_vex | llama-index: Denial of Service in llama_index | known affected: 12 | 2026-06-28T11:31:15+00:00 | Vulnerability · Source |
| CVE-2005-2628 | redhat_vex | security flaw | fixed: 2 | 2026-06-28T11:31:14+00:00 | Vulnerability · Source |
| CVE-2026-22996 | redhat_vex | kernel: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv | known affected: 246 known not affected: 28 | 2026-06-28T11:31:14+00:00 | Vulnerability · Source |
| CVE-2023-2680 | redhat_vex | QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) | fixed: 114 known not affected: 58 | 2026-06-28T11:31:11+00:00 | Vulnerability · Source |
| CVE-2026-23320 | redhat_vex | kernel: usb: gadget: f_ncm: align net_device lifecycle with bind/unbind | known affected: 76 known not affected: 198 | 2026-06-28T11:31:07+00:00 | Vulnerability · Source |
| CVE-2019-12614 | redhat_vex | kernel: null pointer dereference in dlpar_parse_cc_property in arch/powerrc/platforms/pseries/dlpar.c causing denial of service | fixed: 319 known not affected: 54 | 2026-06-28T11:31:07+00:00 | Vulnerability · Source |
| CVE-2025-2588 | redhat_vex | augeas: Hercules Augeas fa.c re_case_expand null pointer dereference | known affected: 3 | 2026-06-28T11:31:06+00:00 | Vulnerability · Source |
| CVE-2026-43162 | redhat_vex | kernel: media: tegra-video: Fix memory leak in __tegra_channel_try_format() | known not affected: 274 | 2026-06-28T11:31:04+00:00 | Vulnerability · Source |
| CVE-2026-22748 | redhat_vex | Spring Security: Spring Security: Integrity impact due to improper JSON Web Token (JWT) validation | known affected: 18 | 2026-06-28T11:31:04+00:00 | Vulnerability · Source |
| CVE-2020-14389 | redhat_vex | keycloak: user can manage resources with just "view-profile" role using new Account Console | fixed: 14 known not affected: 5 | 2026-06-28T11:31:02+00:00 | Vulnerability · Source |
| CVE-2016-5224 | redhat_vex | chromium-browser: same-origin bypass in svg | fixed: 12 | 2026-06-28T11:31:02+00:00 | Vulnerability · Source |
| CVE-2016-5226 | redhat_vex | chromium-browser: limited xss in blink | fixed: 12 | 2026-06-28T11:31:02+00:00 | Vulnerability · Source |
| CVE-2016-5223 | redhat_vex | chromium-browser: integer overflow in pdfium | fixed: 12 | 2026-06-28T11:31:01+00:00 | Vulnerability · Source |
| CVE-2016-5221 | redhat_vex | chromium-browser: integer overflow in angle | fixed: 12 | 2026-06-28T11:30:59+00:00 | Vulnerability · Source |
| CVE-2016-5218 | redhat_vex | chromium-browser: address spoofing in omnibox | fixed: 12 | 2026-06-28T11:30:58+00:00 | Vulnerability · Source |
| CVE-2016-5211 | redhat_vex | chromium-browser: use after free in pdfium | fixed: 12 | 2026-06-28T11:30:56+00:00 | Vulnerability · Source |
| CVE-2020-14888 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T11:30:55+00:00 | Vulnerability · Source |
| CVE-2026-2242 | redhat_vex | janet-lang: janet-lang: Denial of Service via out-of-bounds read | known not affected: 1 | 2026-06-28T11:30:54+00:00 | Vulnerability · Source |
| CVE-2016-5205 | redhat_vex | chromium-browser: universal xss in blink | fixed: 12 | 2026-06-28T11:30:54+00:00 | Vulnerability · Source |
| CVE-2022-0002 | redhat_vex | hw: cpu: intel: Intra-Mode BTI | fixed: 150 known affected: 42 known not affected: 108 | 2026-06-28T11:30:54+00:00 | Vulnerability · Source |
| CVE-2024-42245 | redhat_vex | kernel: Revert "sched/fair: Make sure to try to detach at least one movable task" | fixed: 280 known affected: 60 known not affected: 60 | 2026-06-28T11:30:53+00:00 | Vulnerability · Source |
| CVE-2016-5186 | redhat_vex | chromium-browser: out of bounds read in devtools | fixed: 12 | 2026-06-28T11:30:51+00:00 | Vulnerability · Source |
| CVE-2016-5174 | redhat_vex | chromium-browser: popup not correctly suppressed | fixed: 12 | 2026-06-28T11:30:49+00:00 | Vulnerability · Source |
| CVE-2026-22045 | redhat_vex | traefik: Traefik: Denial of Service via ACME TLS-ALPN fast path resource exhaustion | fixed: 4 known not affected: 57 | 2026-06-28T11:30:49+00:00 | Vulnerability · Source |
| CVE-2026-44597 | redhat_vex | Tor: Tor: Denial of Service due to out-of-bounds read | known not affected: 1 | 2026-06-28T11:30:48+00:00 | Vulnerability · Source |
| CVE-2016-5172 | redhat_vex | chromium-browser: arbitrary memory read in v8 | fixed: 12 | 2026-06-28T11:30:48+00:00 | Vulnerability · Source |
| CVE-2020-29368 | redhat_vex | kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check | fixed: 450 known not affected: 148 | 2026-06-28T11:30:47+00:00 | Vulnerability · Source |
| CVE-2026-22009 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Apr 2026) | fixed: 395 known not affected: 9 | 2026-06-28T11:30:46+00:00 | Vulnerability · Source |
| CVE-2026-21883 | redhat_vex | Bokeh: Bokeh: Information disclosure and unauthorized actions via flawed WebSocket origin validation | known affected: 7 | 2026-06-28T11:30:44+00:00 | Vulnerability · Source |
| CVE-2026-23285 | redhat_vex | kernel: drbd: fix null-pointer dereference on local read error | known not affected: 274 | 2026-06-28T11:30:44+00:00 | Vulnerability · Source |
| CVE-2016-6480 | redhat_vex | kernel: scsi: aacraid: double fetch in ioctl_send_fib() | fixed: 371 known affected: 13 | 2026-06-28T11:30:43+00:00 | Vulnerability · Source |