VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-9806 | redhat_vex | kernel: netlink: double-free in netlink_dump | fixed: 201 known not affected: 22 | 2026-06-28T11:07:51+00:00 | Vulnerability · Source |
| CVE-2015-1252 | redhat_vex | chromium-browser: Sandbox escape in Chrome. | fixed: 12 | 2026-06-28T11:07:51+00:00 | Vulnerability · Source |
| CVE-2015-1238 | redhat_vex | chromium-browser: Out-of-bounds write in Skia | fixed: 15 | 2026-06-28T11:07:49+00:00 | Vulnerability · Source |
| CVE-2016-9650 | redhat_vex | chromium-browser: csp referrer disclosure | fixed: 12 | 2026-06-28T11:07:45+00:00 | Vulnerability · Source |
| CVE-2025-8880 | redhat_vex | chromium-browser: Chrome V8 Sandbox Code Execution Vulnerability | known not affected: 1 | 2026-06-28T11:07:44+00:00 | Vulnerability · Source |
| CVE-2014-8161 | redhat_vex | postgresql: information leak through constraint violation errors | fixed: 347 known affected: 17 | 2026-06-28T11:07:42+00:00 | Vulnerability · Source |
| CVE-2024-36889 | redhat_vex | kernel: mptcp: ensure snd_nxt is properly initialized on connect | fixed: 929 known affected: 22 known not affected: 43 | 2026-06-28T11:07:41+00:00 | Vulnerability · Source |
| CVE-2015-0478 | redhat_vex | OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726) | fixed: 1043 | 2026-06-28T11:07:40+00:00 | Vulnerability · Source |
| CVE-2015-0329 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:07:39+00:00 | Vulnerability · Source |
| CVE-2019-5828 | redhat_vex | chromium-browser: Use after free in ServiceWorker | fixed: 14 | 2026-06-28T11:07:39+00:00 | Vulnerability · Source |
| CVE-2016-1620 | redhat_vex | chromium-browser: various fixes from internal audits | fixed: 12 | 2026-06-28T11:07:38+00:00 | Vulnerability · Source |
| CVE-2015-0321 | redhat_vex | flash-plugin: multiple code execution flaws (APSB15-04) | fixed: 5 | 2026-06-28T11:07:38+00:00 | Vulnerability · Source |
| CVE-2015-0241 | redhat_vex | postgresql: buffer overflow in the to_char() function | fixed: 347 known affected: 17 | 2026-06-28T11:07:38+00:00 | Vulnerability · Source |
| CVE-2014-7968 | redhat_vex | vdsm: ssl_accept may block connections on uncompleted handshake | fixed: 26 | 2026-06-28T11:07:37+00:00 | Vulnerability · Source |
| CVE-2015-0223 | redhat_vex | qpid-cpp: anonymous access to qpidd cannot be prevented | fixed: 1231 known affected: 14 | 2026-06-28T11:07:37+00:00 | Vulnerability · Source |
| CVE-2014-7945 | redhat_vex | chromium-browser: out-of-bounds read in PDFium | fixed: 15 | 2026-06-28T11:07:37+00:00 | Vulnerability · Source |
| CVE-2014-7169 | redhat_vex | bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271) | fixed: 171 | 2026-06-28T11:07:36+00:00 | Vulnerability · Source |
| CVE-2014-3668 | redhat_vex | php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() | fixed: 967 known not affected: 1 | 2026-06-28T11:07:35+00:00 | Vulnerability · Source |
| CVE-2016-9596 | redhat_vex | libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS) | fixed: 1 known affected: 1 known not affected: 11 | 2026-06-28T11:07:35+00:00 | Vulnerability · Source |
| CVE-2026-45624 | redhat_vex | ImageMagick: ImageMagick: Data exposure due to image processing vulnerability | known affected: 14 | 2026-06-28T11:07:34+00:00 | Vulnerability · Source |
| CVE-2014-6517 | redhat_vex | OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533) | fixed: 522 known not affected: 23 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2024-36941 | redhat_vex | kernel: wifi: nl80211: don't free NULL coalescing rule | fixed: 927 known affected: 64 known not affected: 11 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2014-6593 | redhat_vex | OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555) | fixed: 948 known not affected: 24 | 2026-06-28T11:07:33+00:00 | Vulnerability · Source |
| CVE-2014-5008 | redhat_vex | snoopy: incomplete fixes for command execution flaws | fixed: 18 known affected: 7 | 2026-06-28T11:07:31+00:00 | Vulnerability · Source |
| CVE-2014-3514 | redhat_vex | rubygem-activerecord: Strong Parameter bypass with create_with | fixed: 15 known not affected: 11 | 2026-06-28T11:07:31+00:00 | Vulnerability · Source |
| CVE-2014-3200 | redhat_vex | chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101 | fixed: 15 known affected: 9 | 2026-06-28T11:07:30+00:00 | Vulnerability · Source |
| CVE-2019-5780 | redhat_vex | chromium-browser: Insufficient policy enforcement | fixed: 12 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2007-6637 | redhat_vex | Flash Player content injection flaw | fixed: 10 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2017-15423 | redhat_vex | chromium-browser: issue with spake implementation in boringssl | fixed: 12 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0536 | redhat_vex | flash-plugin: arbitrary code execution flaws (APSB14-16) | fixed: 5 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0584 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T11:07:29+00:00 | Vulnerability · Source |
| CVE-2014-0504 | redhat_vex | flash-plugin: exposure of clipboard contents (APSB14-08) | fixed: 5 | 2026-06-28T11:07:28+00:00 | Vulnerability · Source |
| CVE-2019-5809 | redhat_vex | chromium-browser: Use after free in Blink | fixed: 14 | 2026-06-28T11:07:27+00:00 | Vulnerability · Source |
| CVE-2014-0459 | redhat_vex | lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335) | fixed: 404 known affected: 3 known not affected: 37 under investigation: 5 | 2026-06-28T11:07:26+00:00 | Vulnerability · Source |
| CVE-2014-0375 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:07:25+00:00 | Vulnerability · Source |
| CVE-2026-46055 | redhat_vex | kernel: apparmor: Fix string overrun due to missing termination | known not affected: 274 | 2026-06-28T11:07:25+00:00 | Vulnerability · Source |
| CVE-2025-14969 | redhat_vex | hibernate-reactive-core: Hibernate Reactive: Denial of Service due to connection leak on HTTP client disconnect | fixed: 1 known not affected: 6 | 2026-06-28T11:07:24+00:00 | Vulnerability · Source |
| CVE-2016-9576 | redhat_vex | kernel: Use after free in SCSI generic device interface | fixed: 381 known not affected: 8 | 2026-06-28T11:07:23+00:00 | Vulnerability · Source |
| CVE-2016-9083 | redhat_vex | kernel: State machine confusion bug in vfio driver leading to memory corruption | fixed: 191 known not affected: 27 | 2026-06-28T11:07:22+00:00 | Vulnerability · Source |
| CVE-2026-11158 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Downloads | known not affected: 1 | 2026-06-28T11:07:21+00:00 | Vulnerability · Source |
| CVE-2013-2415 | redhat_vex | OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542) | fixed: 272 known not affected: 13 | 2026-06-28T11:07:20+00:00 | Vulnerability · Source |
| CVE-2014-0199 | redhat_vex | ovirt-engine-reports: setup script logs database password in cleartext | fixed: 2 | 2026-06-28T11:07:19+00:00 | Vulnerability · Source |
| CVE-2026-11164 | redhat_vex | chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-28T11:07:19+00:00 | Vulnerability · Source |
| CVE-2014-0154 | redhat_vex | ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set | fixed: 18 | 2026-06-28T11:07:19+00:00 | Vulnerability · Source |
| CVE-2013-5896 | redhat_vex | OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022) | fixed: 583 known not affected: 21 | 2026-06-28T11:07:18+00:00 | Vulnerability · Source |
| CVE-2013-7421 | redhat_vex | kernel: crypto api unprivileged arbitrary module load via request_module() | fixed: 189 known not affected: 15 | 2026-06-28T11:07:18+00:00 | Vulnerability · Source |
| CVE-2026-34944 | redhat_vex | wasmtime: Wasmtime: Denial of Service due to out-of-bounds read during WebAssembly compilation | known affected: 2 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2013-5775 | redhat_vex | JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX) | fixed: 53 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2026-11215 | redhat_vex | chromium-browser: Inappropriate implementation in Cronet | known not affected: 1 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |
| CVE-2013-5888 | redhat_vex | JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment) | fixed: 420 known not affected: 7 | 2026-06-28T11:07:16+00:00 | Vulnerability · Source |