VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297743 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47319 | redhat_vex | rlottie: rlottie: Denial of Service via excessive memory allocation | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47318 | redhat_vex | rlottie: rlottie: Denial of Service via stack-based buffer overflow | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-4727 | redhat_vex | firefox: Denial-of-service in the Libraries component in NSS | known not affected: 12 | 2026-06-28T07:42:49+00:00 | Vulnerability · Source |
| CVE-2026-4728 | redhat_vex | firefox: Spoofing issue in the Privacy: Anti-Tracking component | known not affected: 12 | 2026-06-28T07:42:49+00:00 | Vulnerability · Source |
| CVE-2026-4725 | redhat_vex | firefox: Sandbox escape due to use-after-free in the Graphics: Canvas2D component | known not affected: 12 | 2026-06-28T07:42:48+00:00 | Vulnerability · Source |
| CVE-2026-4724 | redhat_vex | firefox: Undefined behavior in the Audio/Video component | known not affected: 12 | 2026-06-28T07:42:48+00:00 | Vulnerability · Source |
| CVE-2026-4723 | redhat_vex | firefox: Use-after-free in the JavaScript Engine component | known not affected: 12 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4721 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 | fixed: 320 known affected: 8 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4722 | redhat_vex | firefox: Privilege escalation in the IPC component | known not affected: 12 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4717 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-28T07:42:46+00:00 | Vulnerability · Source |
| CVE-2026-4718 | redhat_vex | firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-28T07:42:46+00:00 | Vulnerability · Source |
| CVE-2026-4715 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:45+00:00 | Vulnerability · Source |
| CVE-2026-4716 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:45+00:00 | Vulnerability · Source |
| CVE-2021-2028 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20292 | redhat_vex | kernel: DRM Memory Management Double Free Privilege Escalation Vulnerability | known not affected: 92 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20286 | redhat_vex | libnbd: Assertion failure in nbd_unlocked_opt_go in lib/opt.c | known affected: 16 known not affected: 24 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20268 | redhat_vex | kernel: eBPF Improper Input Validation | known not affected: 197 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20265 | redhat_vex | kernel: increase slab leak leads to DoS | fixed: 241 known not affected: 170 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2023-46998 | redhat_vex | bootbox: cross-site scripting vulnerability | known affected: 1 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20269 | redhat_vex | kexec-tools: incorrect permissions on kdump dmesg file | fixed: 13 known affected: 6 known not affected: 1 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20262 | redhat_vex | keycloak: missing re-authentication while updating password | known affected: 1 known not affected: 6 | 2026-06-28T07:42:40+00:00 | Vulnerability · Source |
| CVE-2026-4712 | redhat_vex | firefox: thunderbird: Information disclosure in the Widget: Cocoa component | fixed: 320 known affected: 8 | 2026-06-28T07:42:40+00:00 | Vulnerability · Source |
| CVE-2026-4707 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2021-20257 | redhat_vex | QEMU: net: e1000: infinite loop while processing transmit descriptors | fixed: 1786 known affected: 81 known not affected: 5 | 2026-06-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-4709 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component | fixed: 320 known affected: 8 | 2026-06-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-4700 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking: HTTP component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4701 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4704 | redhat_vex | firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4702 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-4699 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component | fixed: 320 known affected: 8 | 2026-06-28T07:42:35+00:00 | Vulnerability · Source |
| CVE-2026-4679 | redhat_vex | chromium-browser: Integer overflow in Fonts | known not affected: 1 | 2026-06-28T07:42:35+00:00 | Vulnerability · Source |
| CVE-2026-4693 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | fixed: 320 known affected: 8 | 2026-06-28T07:42:34+00:00 | Vulnerability · Source |
| CVE-2026-4689 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | fixed: 320 known affected: 8 | 2026-06-28T07:42:33+00:00 | Vulnerability · Source |
| CVE-2026-4688 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component | fixed: 320 known affected: 8 | 2026-06-28T07:42:33+00:00 | Vulnerability · Source |
| CVE-2026-4684 | redhat_vex | firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4685 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4686 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4680 | redhat_vex | chromium-browser: Use after free in FedCM | known not affected: 1 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4687 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component | fixed: 320 known affected: 8 | 2026-06-28T07:42:31+00:00 | Vulnerability · Source |
| CVE-2026-4674 | redhat_vex | chromium-browser: Out of bounds read in CSS | known not affected: 1 | 2026-06-28T07:42:30+00:00 | Vulnerability · Source |
| CVE-2026-4675 | redhat_vex | chromium-browser: Heap buffer overflow in WebGL | known not affected: 1 | 2026-06-28T07:42:30+00:00 | Vulnerability · Source |
| CVE-2026-4673 | redhat_vex | chromium-browser: Heap buffer overflow in WebAudio | known not affected: 1 | 2026-06-28T07:42:30+00:00 | Vulnerability · Source |
| CVE-2026-4677 | redhat_vex | chromium-browser: Out of bounds read in WebAudio | known not affected: 1 | 2026-06-28T07:42:30+00:00 | Vulnerability · Source |
| CVE-2026-4678 | redhat_vex | chromium-browser: Use after free in WebGPU | known not affected: 1 | 2026-06-28T07:42:30+00:00 | Vulnerability · Source |
| CVE-2026-46718 | redhat_vex | calcite: org.apache.calcite.avatica/avatica-core: Apache Calcite: Unsafe Reflection vulnerability allows externally-controlled input to select classes or code. | known affected: 3 | 2026-06-28T07:42:30+00:00 | Vulnerability · Source |
| CVE-2021-20239 | redhat_vex | kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure | fixed: 150 known affected: 15 known not affected: 135 | 2026-06-28T07:42:29+00:00 | Vulnerability · Source |
| CVE-2026-46527 | redhat_vex | cpp-httplib: cpp-httplib: Denial of Service via malformed X-Forwarded-For header | known not affected: 1 | 2026-06-28T07:42:27+00:00 | Vulnerability · Source |
| CVE-2026-4649 | redhat_vex | Apache Artemis: KNIME Business Hub: Apache Artemis and KNIME Business Hub: Authentication bypass allows information disclosure and message injection. | known affected: 16 | 2026-06-28T07:42:26+00:00 | Vulnerability · Source |
| CVE-2021-20222 | redhat_vex | keycloak: reflected XSS attack with referrer in new account console | known not affected: 7 | 2026-06-28T07:42:25+00:00 | Vulnerability · Source |
| CVE-2021-2022 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 855 known affected: 31 | 2026-06-28T07:42:23+00:00 | Vulnerability · Source |