VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-1628 | redhat_vex | chromium-browser: out-of-bounds read in PDFium | fixed: 12 | 2026-06-28T11:09:12+00:00 | Vulnerability · Source |
| CVE-2016-1634 | redhat_vex | chromium-browser: use-after-free in Blink | fixed: 12 | 2026-06-28T11:09:12+00:00 | Vulnerability · Source |
| CVE-2026-3407 | redhat_vex | yosys: YosysHQ yosys: Denial of Service via heap-based buffer overflow in BLIF File Parser | known not affected: 1 | 2026-06-28T11:09:11+00:00 | Vulnerability · Source |
| CVE-2016-1613 | redhat_vex | chromium-browser: use-after-free in PDFium | fixed: 12 | 2026-06-28T11:09:11+00:00 | Vulnerability · Source |
| CVE-2024-35877 | redhat_vex | kernel: x86/mm/pat: fix VM_PAT handling in COW mappings | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T11:09:10+00:00 | Vulnerability · Source |
| CVE-2016-1101 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-15 | fixed: 5 | 2026-06-28T11:09:10+00:00 | Vulnerability · Source |
| CVE-2018-13405 | redhat_vex | kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members | fixed: 854 known affected: 13 known not affected: 41 | 2026-06-28T11:09:08+00:00 | Vulnerability · Source |
| CVE-2024-35900 | redhat_vex | kernel: netfilter: nf_tables: reject new basechain after table flag update | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T11:09:06+00:00 | Vulnerability · Source |
| CVE-2016-10750 | redhat_vex | hazelcast: java deserialization in join cluster procedure leading to remote code execution | fixed: 1 known affected: 2 | 2026-06-28T11:09:05+00:00 | Vulnerability · Source |
| CVE-2016-10741 | redhat_vex | kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c | fixed: 201 known affected: 15 known not affected: 71 | 2026-06-28T11:09:04+00:00 | Vulnerability · Source |
| CVE-2016-1031 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:09:04+00:00 | Vulnerability · Source |
| CVE-2016-1030 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:09:03+00:00 | Vulnerability · Source |
| CVE-2016-1028 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-10 | fixed: 5 | 2026-06-28T11:09:02+00:00 | Vulnerability · Source |
| CVE-2016-1000346 | redhat_vex | bouncycastle: Other party DH public keys are not fully validated | fixed: 1105 known affected: 5 known not affected: 13 | 2026-06-28T11:09:01+00:00 | Vulnerability · Source |
| CVE-2025-64763 | redhat_vex | Envoy: Envoy: De-synchronized CONNECT tunnel state due to early data handling in TCP proxy mode | known affected: 17 | 2026-06-28T11:08:59+00:00 | Vulnerability · Source |
| CVE-2026-23287 | redhat_vex | kernel: irqchip/sifive-plic: Fix frozen interrupt due to affinity setting | known affected: 76 known not affected: 198 | 2026-06-28T11:08:59+00:00 | Vulnerability · Source |
| CVE-2026-46141 | redhat_vex | kernel: powerpc/xive: fix kmemleak caused by incorrect chip_data lookup | known not affected: 274 | 2026-06-28T11:08:58+00:00 | Vulnerability · Source |
| CVE-2019-10086 | redhat_vex | apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default | fixed: 2551 known affected: 20 known not affected: 27 | 2026-06-28T11:08:57+00:00 | Vulnerability · Source |
| CVE-2015-7804 | redhat_vex | php: uninitialized pointer in phar_make_dirstream() | fixed: 240 known affected: 110 | 2026-06-28T11:08:57+00:00 | Vulnerability · Source |
| CVE-2016-1000344 | redhat_vex | bouncycastle: DHIES implementation allowed the use of ECB mode | fixed: 1111 known affected: 5 known not affected: 7 | 2026-06-28T11:08:57+00:00 | Vulnerability · Source |
| CVE-2016-1000342 | redhat_vex | bouncycastle: ECDSA improper validation of ASN.1 encoding of signature | fixed: 1111 known affected: 6 known not affected: 6 | 2026-06-28T11:08:57+00:00 | Vulnerability · Source |
| CVE-2016-0999 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T11:08:56+00:00 | Vulnerability · Source |
| CVE-2016-0985 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-04 | fixed: 5 | 2026-06-28T11:08:55+00:00 | Vulnerability · Source |
| CVE-2016-0988 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-08 | fixed: 5 | 2026-06-28T11:08:55+00:00 | Vulnerability · Source |
| CVE-2021-45960 | redhat_vex | expat: Large number of prefixed XML attributes on a single tag can crash libexpat | fixed: 92 known affected: 32 known not affected: 29 | 2026-06-28T11:08:55+00:00 | Vulnerability · Source |
| CVE-2026-46077 | redhat_vex | kernel: crypto: atmel-tdes - fix DMA sync direction | known not affected: 274 | 2026-06-28T11:08:53+00:00 | Vulnerability · Source |
| CVE-2016-0967 | redhat_vex | flash-plugin: multiple code execution issues fixed in APSB16-04 | fixed: 5 | 2026-06-28T11:08:53+00:00 | Vulnerability · Source |
| CVE-2024-50186 | redhat_vex | kernel: net: explicitly clear the sk pointer, when pf->create fails | fixed: 305 known affected: 112 | 2026-06-28T11:08:52+00:00 | Vulnerability · Source |
| CVE-2026-41477 | redhat_vex | Deskflow: Deskflow: Privilege escalation and arbitrary code execution via unauthenticated IPC named pipe | known not affected: 1 | 2026-06-28T11:08:52+00:00 | Vulnerability · Source |
| CVE-2026-11227 | redhat_vex | chromium-browser: Incorrect security UI in Tab Hover Cards | known not affected: 1 | 2026-06-28T11:08:52+00:00 | Vulnerability · Source |
| CVE-2026-45918 | redhat_vex | kernel: ovpn: tcp - don't deref NULL sk_socket member after tcp_close() | known not affected: 274 | 2026-06-28T11:08:51+00:00 | Vulnerability · Source |
| CVE-2026-35377 | redhat_vex | rust-coreutils: env: local denial of service via improper handling of backslashes in split-string mode | known not affected: 1 | 2026-06-28T11:08:49+00:00 | Vulnerability · Source |
| CVE-2024-50081 | redhat_vex | kernel: blk-mq: setup queue ->tag_set before initializing hctx | fixed: 305 known affected: 50 known not affected: 62 | 2026-06-28T11:08:47+00:00 | Vulnerability · Source |
| CVE-2026-32102 | redhat_vex | olivetin: OliveTin Unauthorized Action Output Disclosure via EventStream | known not affected: 1 | 2026-06-28T11:08:46+00:00 | Vulnerability · Source |
| CVE-2026-45850 | redhat_vex | kernel: ipvs: skip ipv6 extension headers for csum checks | known not affected: 274 | 2026-06-28T11:08:46+00:00 | Vulnerability · Source |
| CVE-2026-23256 | redhat_vex | kernel: net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup | known affected: 76 known not affected: 198 | 2026-06-28T11:08:46+00:00 | Vulnerability · Source |
| CVE-2026-35368 | redhat_vex | rust-coreutils: uutils coreutils: Privilege escalation and arbitrary code execution in chroot utility | known not affected: 1 | 2026-06-28T11:08:44+00:00 | Vulnerability · Source |
| CVE-2025-43965 | redhat_vex | ImageMagick: Incorrect Handling of Image Depth in MIFF Processing in ImageMagick | known affected: 14 | 2026-06-28T11:08:43+00:00 | Vulnerability · Source |
| CVE-2017-5105 | redhat_vex | chromium-browser: url spoofing in omnibox | fixed: 12 | 2026-06-28T11:08:43+00:00 | Vulnerability · Source |
| CVE-2026-35375 | redhat_vex | rust-coreutils: split: local data integrity issue via lossy filename encoding | known not affected: 1 | 2026-06-28T11:08:43+00:00 | Vulnerability · Source |
| CVE-2026-52914 | redhat_vex | kernel: batman-adv: fix fragment reassembly length accounting | known not affected: 274 | 2026-06-28T11:08:42+00:00 | Vulnerability · Source |
| CVE-2017-15387 | redhat_vex | chromium-browser: content security bypass | fixed: 12 | 2026-06-28T11:08:42+00:00 | Vulnerability · Source |
| CVE-2025-63757 | redhat_vex | ffmpeg: FFmpeg: Integer overflow vulnerability leads to Denial of Service | known affected: 1 | 2026-06-28T11:08:42+00:00 | Vulnerability · Source |
| CVE-2024-49993 | redhat_vex | kernel: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count | fixed: 305 known affected: 70 known not affected: 42 | 2026-06-28T11:08:41+00:00 | Vulnerability · Source |
| CVE-2023-3180 | redhat_vex | QEMU: virtio-crypto: heap buffer overflow in virtio_crypto_sym_op_helper() | known not affected: 77 | 2026-06-28T11:08:40+00:00 | Vulnerability · Source |
| CVE-2017-1000112 | redhat_vex | kernel: Exploitable memory corruption due to UFO to non-UFO path switch | fixed: 550 known affected: 16 | 2026-06-28T11:08:40+00:00 | Vulnerability · Source |
| CVE-2026-35370 | redhat_vex | rust-coreutils: id: incorrect access-control decisions via misrepresented group membership | known not affected: 1 | 2026-06-28T11:08:40+00:00 | Vulnerability · Source |
| CVE-2014-6484 | redhat_vex | mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T11:08:37+00:00 | Vulnerability · Source |
| CVE-2014-6476 | redhat_vex | JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment) | fixed: 297 | 2026-06-28T11:08:35+00:00 | Vulnerability · Source |
| CVE-2017-3450 | redhat_vex | mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017) | fixed: 114 known not affected: 57 | 2026-06-28T11:08:35+00:00 | Vulnerability · Source |