VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291704 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-73584 | redhat_vex | sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling | known affected: 5 | 2026-08-13T14:34:26+00:00 | Vulnerability · Source |
| CVE-2026-72913 | redhat_vex | kitty: Kitty: Arbitrary Code Execution via Chained DCS Escape Sequences | known affected: 7 known not affected: 1 | 2026-08-13T14:25:49+00:00 | Vulnerability · Source |
| CVE-2026-64228 | redhat_vex | kernel: net: ethtool: phy: avoid NULL deref when PHY driver is unbound | known affected: 79 known not affected: 198 | 2026-08-13T13:31:11+00:00 | Vulnerability · Source |
| CVE-2026-64227 | redhat_vex | kernel: ACPI: driver: Check ACPI_COMPANION() against NULL during probe | known affected: 277 | 2026-08-13T13:31:11+00:00 | Vulnerability · Source |
| CVE-2026-64545 | redhat_vex | kernel: net, bpf: check master for NULL in xdp_master_redirect() | known affected: 198 known not affected: 76 | 2026-08-13T13:31:01+00:00 | Vulnerability · Source |
| CVE-2026-73583 | redhat_vex | sblim-sfcb: Unsafe deserialization in sblim-sfcb provider-manager IPC allows out-of-bounds memory access via malformed OperationHdr | known affected: 5 | 2026-08-13T13:31:00+00:00 | Vulnerability · Source |
| CVE-2026-64354 | redhat_vex | kernel: bpf: Validate BTF repeated field counts before expansion | known affected: 184 known not affected: 90 | 2026-08-13T13:30:49+00:00 | Vulnerability · Source |
| CVE-2026-50162 | redhat_vex | oras-go: oras-go: File store write outside working directory via symlink traversal | fixed: 6 known affected: 81 known not affected: 34 under investigation: 8 | 2026-08-13T13:15:44+00:00 | Vulnerability · Source |
| CVE-2026-67201 | redhat_vex | v: V: Server-Side Request Forgery (SSRF) bypass due to URL parser differential | known not affected: 1 | 2026-08-13T12:43:50+00:00 | Vulnerability · Source |
| CVE-2026-18358 | redhat_vex | gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service | fixed: 13 known not affected: 4 | 2026-08-13T11:07:35+00:00 | Vulnerability · Source |
| CVE-2025-14925 | redhat_vex | accelerate: Hugging Face Accelerate: Remote Code Execution via Deserialization of Untrusted Data | fixed: 35 known affected: 23 known not affected: 501 | 2026-08-13T11:07:06+00:00 | Vulnerability · Source |
| CVE-2026-73216 | redhat_vex | coturn: coturn: Authenticated client can exhaust relay capacity via quota bypass | known not affected: 1 | 2026-08-13T10:20:46+00:00 | Vulnerability · Source |
| CVE-2026-66484 | redhat_vex | cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives. | fixed: 3 known affected: 7 | 2026-08-13T09:11:13+00:00 | Vulnerability · Source |
| CVE-2026-19163 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use-after-free in Media component | known not affected: 1 | 2026-08-13T08:35:57+00:00 | Vulnerability · Source |
| CVE-2026-19149 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use-after-free vulnerability in Aura | known not affected: 1 | 2026-08-13T07:07:19+00:00 | Vulnerability · Source |
| CVE-2026-19165 | redhat_vex | chromium-browser: Google Chrome Extensions: Arbitrary code execution via use-after-free vulnerability | known not affected: 1 | 2026-08-13T07:07:18+00:00 | Vulnerability · Source |
| CVE-2026-19166 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape due to use-after-free in Web Authentication | known not affected: 1 | 2026-08-13T07:07:17+00:00 | Vulnerability · Source |
| CVE-2026-19145 | redhat_vex | chromium-browser: Chromium: Arbitrary code execution via use-after-free in Translate component | known not affected: 1 | 2026-08-13T07:07:13+00:00 | Vulnerability · Source |
| CVE-2026-19171 | redhat_vex | chromium-browser: Chromium: Sandbox escape via use-after-free in Media component | known not affected: 1 | 2026-08-13T07:07:03+00:00 | Vulnerability · Source |
| CVE-2026-19147 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use-after-free vulnerability in Aura | known not affected: 1 | 2026-08-13T07:07:00+00:00 | Vulnerability · Source |
| CVE-2026-19142 | redhat_vex | chromium-browser: Google Chrome: Remote code execution via use after free in Views | known not affected: 1 | 2026-08-13T07:06:58+00:00 | Vulnerability · Source |
| CVE-2026-19144 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-08-13T07:06:54+00:00 | Vulnerability · Source |
| CVE-2026-19140 | redhat_vex | chromium-browser: Google Chrome GPU: Sandbox escape via use after free vulnerability in crafted HTML. | known not affected: 1 | 2026-08-13T07:06:49+00:00 | Vulnerability · Source |
| CVE-2025-68158 | redhat_vex | Authlib: Authlib: Cross-Site Request Forgery due to improper session management in state storage | fixed: 12 known affected: 1 known not affected: 54 | 2026-08-13T06:34:15+00:00 | Vulnerability · Source |
| CVE-2025-5988 | redhat_vex | aap-gateway: CSRF origin checking is disabled | fixed: 2 known not affected: 70 | 2026-08-13T06:33:09+00:00 | Vulnerability · Source |
| CVE-2025-9909 | redhat_vex | aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration | fixed: 309 known not affected: 409 | 2026-08-13T05:44:26+00:00 | Vulnerability · Source |
| CVE-2026-10579 | redhat_vex | picketlink-federation: auth bypass in Picketlink SAML unsolicited-response | fixed: 102 known not affected: 1 | 2026-08-13T05:44:24+00:00 | Vulnerability · Source |
| CVE-2026-12481 | redhat_vex | keras: Keras: Arbitrary code execution via deserialization vulnerability | known affected: 2 known not affected: 7 | 2026-08-13T05:04:54+00:00 | Vulnerability · Source |
| CVE-2026-14180 | redhat_vex | undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap | known affected: 26 | 2026-08-13T04:31:11+00:00 | Vulnerability · Source |
| CVE-2026-16243 | redhat_vex | Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD | fixed: 52 | 2026-08-13T04:31:02+00:00 | Vulnerability · Source |
| CVE-2026-14615 | redhat_vex | keycloak-services: keycloak: FGAP v2 parent group children endpoint bypasses per-child view permission filter | fixed: 20 | 2026-08-13T04:30:52+00:00 | Vulnerability · Source |
| CVE-2026-14450 | redhat_vex | maas-billing: MaaS API: Privilege escalation via forged HTTP headers due to missing authentication | fixed: 4 known not affected: 130 | 2026-08-13T04:30:21+00:00 | Vulnerability · Source |
| CVE-2026-55957 | redhat_vex | tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration | fixed: 4 known affected: 64 under investigation: 14 | 2026-08-13T03:59:40+00:00 | Vulnerability · Source |
| CVE-2026-19519 | redhat_vex | claircore: claircore: denial of service via unchecked type assertion in RPM header parser | known affected: 11 | 2026-08-13T03:54:18+00:00 | Vulnerability · Source |
| CVE-2026-18663 | redhat_vex | 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical Session Tracking control | known affected: 8 known not affected: 25 | 2026-08-13T03:12:56+00:00 | Vulnerability · Source |
| CVE-2026-16439 | redhat_vex | Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments | fixed: 52 | 2026-08-13T03:12:53+00:00 | Vulnerability · Source |
| CVE-2026-18381 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address | known affected: 1 | 2026-08-13T03:07:48+00:00 | Vulnerability · Source |
| CVE-2026-18427 | redhat_vex | @fastify/static: @fastify/static: Information disclosure via route guard bypass | known affected: 12 known not affected: 1 | 2026-08-13T03:07:45+00:00 | Vulnerability · Source |
| CVE-2021-21148 | suse_vex | SUSE CVE CVE-2021-21148 | known not affected: 425 recommended: 47 | 2026-08-13T02:47:47+00:00 | Vulnerability · Source |
| CVE-2021-21299 | suse_vex | SUSE CVE CVE-2021-21299 | known not affected: 366 recommended: 3 | 2026-08-13T02:47:45+00:00 | Vulnerability · Source |
| CVE-2021-21348 | suse_vex | SUSE CVE CVE-2021-21348 | known affected: 394 recommended: 67 | 2026-08-13T02:47:42+00:00 | Vulnerability · Source |
| CVE-2021-21702 | suse_vex | SUSE CVE CVE-2021-21702 | known affected: 1060 known not affected: 673 recommended: 4281 | 2026-08-13T02:47:39+00:00 | Vulnerability · Source |
| CVE-2021-21775 | suse_vex | SUSE CVE CVE-2021-21775 | known affected: 1 known not affected: 117 recommended: 1090 | 2026-08-13T02:47:36+00:00 | Vulnerability · Source |
| CVE-2021-21779 | suse_vex | SUSE CVE CVE-2021-21779 | known affected: 1 known not affected: 117 recommended: 1078 | 2026-08-13T02:47:34+00:00 | Vulnerability · Source |
| CVE-2021-22004 | suse_vex | SUSE CVE CVE-2021-22004 | known not affected: 496 | 2026-08-13T02:47:33+00:00 | Vulnerability · Source |
| CVE-2021-22931 | suse_vex | SUSE CVE CVE-2021-22931 | known affected: 20 known not affected: 175 recommended: 359 | 2026-08-13T02:47:30+00:00 | Vulnerability · Source |
| CVE-2021-22940 | suse_vex | SUSE CVE CVE-2021-22940 | known not affected: 129 recommended: 371 | 2026-08-13T02:47:28+00:00 | Vulnerability · Source |
| CVE-2021-23214 | suse_vex | SUSE CVE CVE-2021-23214 | known affected: 612 known not affected: 1 recommended: 2156 | 2026-08-13T02:47:26+00:00 | Vulnerability · Source |
| CVE-2021-23362 | suse_vex | SUSE CVE CVE-2021-23362 | recommended: 549 | 2026-08-13T02:47:25+00:00 | Vulnerability · Source |
| CVE-2021-25313 | suse_vex | SUSE CVE CVE-2021-25313 | known not affected: 809 | 2026-08-13T02:47:18+00:00 | Vulnerability · Source |