VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299463 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-4204 | redhat_vex | kernel: improper input validation may lead to privilege escalation | fixed: 399 known affected: 136 known not affected: 14 | 2026-06-28T06:26:14+00:00 | Vulnerability · Source |
| CVE-2021-41864 | redhat_vex | kernel: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T06:26:14+00:00 | Vulnerability · Source |
| CVE-2021-4206 | redhat_vex | QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow | fixed: 1692 known affected: 64 known not affected: 24 | 2026-06-28T06:26:14+00:00 | Vulnerability · Source |
| CVE-2020-14852 | redhat_vex | mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T06:26:11+00:00 | Vulnerability · Source |
| CVE-2025-30195 | redhat_vex | pdns-recursor: A crafted zone can lead to an illegal memory access in the PowerDNS Recursor | known not affected: 1 | 2026-06-28T06:26:06+00:00 | Vulnerability · Source |
| CVE-2021-38160 | redhat_vex | kernel: data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c | known affected: 43 known not affected: 154 | 2026-06-28T06:26:02+00:00 | Vulnerability · Source |
| CVE-2021-38204 | redhat_vex | kernel: use-after-free and panic in drivers/usb/host/max3421-hcd.c by removing a MAX-3421 USB device in certain situations | known not affected: 198 | 2026-06-28T06:26:00+00:00 | Vulnerability · Source |
| CVE-2021-38202 | redhat_vex | kernel: out-of-bounds read in TRACE_EVENT() in fs/nfsd/trace.h by sending NFS traffic when the trace event framework is being used for nfsd | known not affected: 198 | 2026-06-28T06:25:59+00:00 | Vulnerability · Source |
| CVE-2012-5087 | redhat_vex | OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549) | fixed: 144 known affected: 9 known not affected: 20 | 2026-06-28T06:25:55+00:00 | Vulnerability · Source |
| CVE-2014-0585 | redhat_vex | flash-plugin: multiple code execution flaws (APSB14-24) | fixed: 6 | 2026-06-28T06:25:54+00:00 | Vulnerability · Source |
| CVE-2021-3759 | redhat_vex | kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks | fixed: 150 known not affected: 149 | 2026-06-28T06:25:54+00:00 | Vulnerability · Source |
| CVE-2021-3750 | redhat_vex | QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free | fixed: 2928 known affected: 64 | 2026-06-28T06:25:54+00:00 | Vulnerability · Source |
| CVE-2021-3667 | redhat_vex | libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API | fixed: 2713 known affected: 126 known not affected: 40 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2021-3735 | redhat_vex | QEMU: ahci: deadlock issue leads to denial of service | known affected: 126 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2025-59037 | redhat_vex | duckdb: DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware | known not affected: 1 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2021-3715 | redhat_vex | kernel: use-after-free in route4_change() in net/sched/cls_route.c | fixed: 848 known affected: 31 known not affected: 109 | 2026-06-28T06:25:51+00:00 | Vulnerability · Source |
| CVE-2021-3612 | redhat_vex | kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() | fixed: 150 known affected: 29 known not affected: 120 | 2026-06-28T06:25:50+00:00 | Vulnerability · Source |
| CVE-2021-3609 | redhat_vex | kernel: race condition in net/can/bcm.c leads to local privilege escalation | fixed: 597 known affected: 42 known not affected: 112 | 2026-06-28T06:25:49+00:00 | Vulnerability · Source |
| CVE-2025-32799 | redhat_vex | conda-build: Conda-build Path Traversal | known not affected: 1 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2021-3582 | redhat_vex | QEMU: pvrdma: unproperly mremap in pvrdma_map_to_pdir() | known not affected: 126 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2021-35577 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2021) | fixed: 125 known not affected: 134 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2022-27458 | redhat_vex | mariadb: use-after-poison in Binary_string::free_buffer | fixed: 736 known affected: 19 known not affected: 35 | 2026-06-28T06:25:48+00:00 | Vulnerability · Source |
| CVE-2021-4147 | redhat_vex | libvirt: deadlock and crash in libxl driver | known not affected: 166 | 2026-06-28T06:25:47+00:00 | Vulnerability · Source |
| CVE-2021-35477 | redhat_vex | kernel: BPF program can obtain sensitive information from kernel memory via a speculative store bypass side-channel attack because the technique used by the BPF verifier to manage speculation is unreliable | known affected: 91 known not affected: 106 | 2026-06-28T06:25:47+00:00 | Vulnerability · Source |
| CVE-2022-26377 | redhat_vex | httpd: mod_proxy_ajp: Possible request smuggling | fixed: 224 known affected: 17 known not affected: 105 | 2026-06-28T06:25:45+00:00 | Vulnerability · Source |
| CVE-2026-10016 | redhat_vex | chromium-browser: Use after free in DOM | known not affected: 1 | 2026-06-28T06:25:44+00:00 | Vulnerability · Source |
| CVE-2022-26373 | redhat_vex | hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions | fixed: 856 known affected: 14 | 2026-06-28T06:25:44+00:00 | Vulnerability · Source |
| CVE-2022-26353 | redhat_vex | QEMU: virtio-net: map leaking on error during receive | fixed: 1809 known affected: 59 | 2026-06-28T06:25:43+00:00 | Vulnerability · Source |
| CVE-2021-3492 | redhat_vex | kernel: shiftfs file system double free vulnerability | known not affected: 197 | 2026-06-28T06:25:40+00:00 | Vulnerability · Source |
| CVE-2020-14814 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Oct 2020) | fixed: 155 known not affected: 92 | 2026-06-28T06:25:39+00:00 | Vulnerability · Source |
| CVE-2014-7929 | redhat_vex | chromium-browser: use-after-free in DOM | fixed: 15 | 2026-06-28T06:25:39+00:00 | Vulnerability · Source |
| CVE-2022-2625 | redhat_vex | postgresql: Extension scripts replace objects not belonging to the extension. | fixed: 1400 known affected: 55 | 2026-06-28T06:25:35+00:00 | Vulnerability · Source |
| CVE-2021-39259 | redhat_vex | ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length | fixed: 2813 known affected: 8 | 2026-06-28T06:25:33+00:00 | Vulnerability · Source |
| CVE-2021-3426 | redhat_vex | python: Information disclosure via pydoc | fixed: 650 known affected: 9 known not affected: 65 | 2026-06-28T06:25:31+00:00 | Vulnerability · Source |
| CVE-2012-0768 | redhat_vex | flash-plugin: code execution flaw (APSB12-05) | fixed: 5 | 2026-06-28T06:25:31+00:00 | Vulnerability · Source |
| CVE-2026-23235 | redhat_vex | kernel: f2fs: fix out-of-bounds access in sysfs attribute read/write | known not affected: 274 | 2026-06-28T06:25:30+00:00 | Vulnerability · Source |
| CVE-2021-3411 | redhat_vex | kernel: broken KRETPROBES reports corruption of .text section while running a FTRACE stress tester | known affected: 17 known not affected: 182 | 2026-06-28T06:25:27+00:00 | Vulnerability · Source |
| CVE-2025-31720 | redhat_vex | jenkins: Missing permission check allows retrieving agent configurations | known not affected: 2 | 2026-06-28T06:25:26+00:00 | Vulnerability · Source |
| CVE-2025-25208 | redhat_vex | RHCL: Authorino Denial of Service Through AuthPolicy With sharedSecretRef Severity | known affected: 1 | 2026-06-28T06:25:24+00:00 | Vulnerability · Source |
| CVE-2013-1737 | redhat_vex | Mozilla: User-defined properties on DOM proxies get the wrong "this" object (MFSA 2013-91) | fixed: 140 known affected: 1 | 2026-06-28T06:25:24+00:00 | Vulnerability · Source |
| CVE-2021-33624 | redhat_vex | kernel: Linux kernel BPF protection against speculative execution attacks can be bypassed to read arbitrary kernel memory | known affected: 77 known not affected: 120 | 2026-06-28T06:25:23+00:00 | Vulnerability · Source |
| CVE-2014-6530 | redhat_vex | mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014) | fixed: 278 under investigation: 9 | 2026-06-28T06:25:22+00:00 | Vulnerability · Source |
| CVE-2014-6591 | redhat_vex | ICU: font parsing OOB read (OpenJDK 2D, 8056276) | fixed: 948 known affected: 11 known not affected: 24 | 2026-06-28T06:25:22+00:00 | Vulnerability · Source |
| CVE-2014-6587 | redhat_vex | OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264) | fixed: 841 known not affected: 24 | 2026-06-28T06:25:21+00:00 | Vulnerability · Source |
| CVE-2014-6511 | redhat_vex | ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540) | fixed: 961 known affected: 11 | 2026-06-28T06:25:19+00:00 | Vulnerability · Source |
| CVE-2014-6504 | redhat_vex | OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783) | fixed: 522 | 2026-06-28T06:25:18+00:00 | Vulnerability · Source |
| CVE-2021-33285 | redhat_vex | ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records | fixed: 2813 known affected: 8 | 2026-06-28T06:25:17+00:00 | Vulnerability · Source |
| CVE-2021-33193 | redhat_vex | httpd: Request splitting via HTTP/2 method injection and mod_proxy | fixed: 149 known affected: 15 known not affected: 143 | 2026-06-28T06:25:16+00:00 | Vulnerability · Source |
| CVE-2013-5801 | redhat_vex | JDK: unspecified vulnerability fixed in 7u45 (2D) | fixed: 471 | 2026-06-28T06:25:15+00:00 | Vulnerability · Source |
| CVE-2026-23150 | redhat_vex | kernel: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame() | known not affected: 274 | 2026-06-28T06:25:12+00:00 | Vulnerability · Source |