VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-36499 | redhat_vex | openvswitch: Open vSwitch: Denial of service via resource exhaustion due to missing upper-bound check | known affected: 155 under investigation: 10 | 2026-06-28T11:23:03+00:00 | Vulnerability · Source |
| CVE-2020-8252 | redhat_vex | libuv: buffer overflow in realpath | fixed: 200 known affected: 1 known not affected: 18 | 2026-06-28T11:23:02+00:00 | Vulnerability · Source |
| CVE-2009-1855 | redhat_vex | acroread: multiple security fixes in version 8.1.6 (APSB09-07) | fixed: 20 | 2026-06-28T11:23:00+00:00 | Vulnerability · Source |
| CVE-2009-2670 | redhat_vex | OpenJDK Untrusted applet System properties access (6738524) | fixed: 434 | 2026-06-28T11:23:00+00:00 | Vulnerability · Source |
| CVE-2026-45968 | redhat_vex | kernel: cpuidle: Skip governor when only one idle state is available | known affected: 246 known not affected: 28 | 2026-06-28T11:22:57+00:00 | Vulnerability · Source |
| CVE-2026-23025 | redhat_vex | kernel: mm/page_alloc: prevent pcp corruption with SMP=n | known affected: 198 known not affected: 76 | 2026-06-28T11:22:56+00:00 | Vulnerability · Source |
| CVE-2026-12448 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in WebView | known not affected: 1 | 2026-06-28T11:22:55+00:00 | Vulnerability · Source |
| CVE-2026-53027 | redhat_vex | kernel: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | known not affected: 274 | 2026-06-28T11:22:55+00:00 | Vulnerability · Source |
| CVE-2018-2775 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018) | fixed: 186 known not affected: 105 | 2026-06-28T11:22:53+00:00 | Vulnerability · Source |
| CVE-2011-0863 | redhat_vex | JDK: unspecified vulnerability fixed in 6u26 (Deployment) | fixed: 323 known not affected: 11 | 2026-06-28T11:22:53+00:00 | Vulnerability · Source |
| CVE-2018-2773 | redhat_vex | mysql: pid file can be created in a world-writeable directory (CPU Apr 2018) | fixed: 266 known affected: 96 | 2026-06-28T11:22:53+00:00 | Vulnerability · Source |
| CVE-2018-2646 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Jan 2018) | fixed: 63 known not affected: 105 | 2026-06-28T11:22:52+00:00 | Vulnerability · Source |
| CVE-2026-11650 | redhat_vex | chromium-browser: Use after free in V8 | known not affected: 1 | 2026-06-28T11:22:52+00:00 | Vulnerability · Source |
| CVE-2006-0996 | redhat_vex | security flaw | fixed: 335 | 2026-06-28T11:22:50+00:00 | Vulnerability · Source |
| CVE-2006-0452 | redhat_vex | recursion causes OOM with bad DN in dn2ancestor | fixed: 1 | 2026-06-28T11:22:50+00:00 | Vulnerability · Source |
| CVE-2018-2618 | redhat_vex | OpenJDK: insufficient strength of key agreement (JCE, 8185292) | fixed: 856 known affected: 8 | 2026-06-28T11:22:49+00:00 | Vulnerability · Source |
| CVE-2018-25020 | redhat_vex | kernel: long jump over an instruction sequence can lead to overflow in the BPF subsystem | known not affected: 197 | 2026-06-28T11:22:48+00:00 | Vulnerability · Source |
| CVE-2019-19769 | redhat_vex | kernel: use-after-free in perf_trace_lock_acquire related to include/trace/events/lock.h | known affected: 12 known not affected: 92 | 2026-06-28T11:22:47+00:00 | Vulnerability · Source |
| CVE-2018-20852 | redhat_vex | python: Cookie domain check returns incorrect results | fixed: 818 known affected: 8 known not affected: 35 | 2026-06-28T11:22:47+00:00 | Vulnerability · Source |
| CVE-2019-19770 | redhat_vex | kernel: use-after-free in debugfs_remove in fs/debugfs/inode.c | fixed: 150 known affected: 56 | 2026-06-28T11:22:47+00:00 | Vulnerability · Source |
| CVE-2018-16845 | redhat_vex | nginx: Denial of service and memory disclosure via mp4 module | fixed: 302 known not affected: 21 | 2026-06-28T11:22:46+00:00 | Vulnerability · Source |
| CVE-2026-11297 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Reader Mode | known not affected: 1 | 2026-06-28T11:22:45+00:00 | Vulnerability · Source |
| CVE-2026-41726 | redhat_vex | spring-kafka: Spring-kafka: Denial of Service due to unbounded heap growth via unique header values | known affected: 2 | 2026-06-28T11:22:45+00:00 | Vulnerability · Source |
| CVE-2018-7566 | redhat_vex | kernel: race condition in snd_seq_write() may lead to UAF or OOB-access | fixed: 556 known not affected: 33 | 2026-06-28T11:22:42+00:00 | Vulnerability · Source |
| CVE-2022-25636 | redhat_vex | kernel: heap out of bounds write in nf_dup_netdev.c | fixed: 428 known not affected: 171 | 2026-06-28T11:22:42+00:00 | Vulnerability · Source |
| CVE-2015-4760 | redhat_vex | ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715) | fixed: 1026 known affected: 11 | 2026-06-28T11:22:41+00:00 | Vulnerability · Source |
| CVE-2015-5131 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-19) | fixed: 5 | 2026-06-28T11:22:40+00:00 | Vulnerability · Source |
| CVE-2015-4860 | redhat_vex | OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688) | fixed: 1136 | 2026-06-28T11:22:40+00:00 | Vulnerability · Source |
| CVE-2020-36516 | redhat_vex | kernel: off-path attacker may inject data or terminate victim's TCP session | fixed: 475 known affected: 42 | 2026-06-28T11:22:38+00:00 | Vulnerability · Source |
| CVE-2019-19528 | redhat_vex | kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver | fixed: 150 known affected: 55 known not affected: 1 | 2026-06-28T11:22:33+00:00 | Vulnerability · Source |
| CVE-2018-20449 | redhat_vex | kernel: reading "callback=" lines in a debugfs file in drivers/dma/qcom/hidma_dbg.c results in information disclosure | known not affected: 104 | 2026-06-28T11:22:32+00:00 | Vulnerability · Source |
| CVE-2020-25220 | redhat_vex | kernel: use-after-free because skcd->no_refcnt was not considered during the backport of CVE-2020-14356 | known not affected: 104 | 2026-06-28T11:22:31+00:00 | Vulnerability · Source |
| CVE-2020-10734 | redhat_vex | keycloak: OIDC logout endpoint CSRF | known affected: 4 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-11669 | redhat_vex | chromium-browser: Integer overflow in Media | known not affected: 1 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2010-2221 | redhat_vex | scsi-target-utils: stack buffer overflow vulnerability | fixed: 9 known affected: 1 known not affected: 2 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2018-20225 | redhat_vex | python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. | known affected: 11 | 2026-06-28T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-53039 | redhat_vex | kernel: ocfs2: validate group add input before caching | known not affected: 274 | 2026-06-28T11:22:29+00:00 | Vulnerability · Source |
| CVE-2025-48997 | redhat_vex | multer: Multer vulnerable to Denial of Service via unhandled exception | fixed: 1 known affected: 1 known not affected: 3 | 2026-06-28T11:22:28+00:00 | Vulnerability · Source |
| CVE-2026-9912 | redhat_vex | chromium-browser: Inappropriate implementation in GPU | known not affected: 1 | 2026-06-28T11:22:28+00:00 | Vulnerability · Source |
| CVE-2024-50169 | redhat_vex | kernel: vsock: Update rx_bytes on read_skb() | fixed: 305 known affected: 50 known not affected: 62 | 2026-06-28T11:22:27+00:00 | Vulnerability · Source |
| CVE-2021-47560 | redhat_vex | kernel: mlxsw: spectrum: Protect driver from buggy firmware | fixed: 651 known affected: 28 known not affected: 14 | 2026-06-28T11:22:27+00:00 | Vulnerability · Source |
| CVE-2025-49466 | redhat_vex | aerc: Aerc Attachment Path Traversal Vulnerability | known not affected: 1 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2021-47556 | redhat_vex | kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() | fixed: 346 known affected: 42 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2014-7924 | redhat_vex | chromium-browser: use-after-free in IndexedDB | fixed: 15 | 2026-06-28T11:22:26+00:00 | Vulnerability · Source |
| CVE-2024-49878 | redhat_vex | kernel: resource: fix region_intersects() vs add_memory_driver_managed() | fixed: 305 known affected: 64 known not affected: 48 | 2026-06-28T11:22:25+00:00 | Vulnerability · Source |
| CVE-2026-12045 | redhat_vex | pgadmin4: pgAdmin 4: Remote code execution via prompt injection in AI Assistant | known not affected: 1 | 2026-06-28T11:22:25+00:00 | Vulnerability · Source |
| CVE-2007-5240 | redhat_vex | Applets or Applications are allowed to display an oversized window | fixed: 430 | 2026-06-28T11:22:24+00:00 | Vulnerability · Source |
| CVE-2026-9995 | redhat_vex | chromium-browser: Use after free in WebXR | known not affected: 1 | 2026-06-28T11:22:18+00:00 | Vulnerability · Source |
| CVE-2026-10007 | redhat_vex | chromium-browser: Use after free in SVG | known not affected: 1 | 2026-06-28T11:22:16+00:00 | Vulnerability · Source |
| CVE-2015-8047 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB15-32 | fixed: 5 | 2026-06-28T11:22:15+00:00 | Vulnerability · Source |