VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291877 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-16387 | redhat_vex | firefox: thunderbird: Site isolation issue in the Networking component | fixed: 260 known affected: 8 | 2026-08-12T15:48:53+00:00 | Vulnerability · Source |
| CVE-2026-16383 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Networking component | fixed: 260 known affected: 8 | 2026-08-12T15:48:51+00:00 | Vulnerability · Source |
| CVE-2026-16381 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component | fixed: 260 known affected: 8 | 2026-08-12T15:48:47+00:00 | Vulnerability · Source |
| CVE-2026-16379 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Content Processes component | fixed: 260 known affected: 8 | 2026-08-12T15:48:46+00:00 | Vulnerability · Source |
| CVE-2026-16377 | redhat_vex | firefox: thunderbird: Mitigation bypass in the PDF Viewer component | fixed: 260 known affected: 8 | 2026-08-12T15:48:43+00:00 | Vulnerability · Source |
| CVE-2026-16374 | redhat_vex | firefox: thunderbird: Information disclosure in the Framework component in DevTools | fixed: 260 known affected: 8 | 2026-08-12T15:48:43+00:00 | Vulnerability · Source |
| CVE-2026-16375 | redhat_vex | firefox: thunderbird: Site isolation issue in the Networking: HTTP component | fixed: 260 known affected: 8 | 2026-08-12T15:48:40+00:00 | Vulnerability · Source |
| CVE-2026-16371 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Navigation component | fixed: 260 known affected: 8 | 2026-08-12T15:48:39+00:00 | Vulnerability · Source |
| CVE-2024-24785 | redhat_vex | golang: html/template: errors returned from MarshalJSON methods may break template escaping | fixed: 1456 known affected: 72 known not affected: 847 | 2026-08-12T15:47:49+00:00 | Vulnerability · Source |
| CVE-2024-53259 | redhat_vex | quic-go: quic-go affected by an ICMP Packet Too Large Injection Attack on Linux | fixed: 118 known affected: 6 known not affected: 32 | 2026-08-12T15:39:32+00:00 | Vulnerability · Source |
| CVE-2024-42005 | redhat_vex | python-django: Potential SQL injection in QuerySet.values() and values_list() | fixed: 26 known affected: 4 known not affected: 3976 | 2026-08-12T15:39:00+00:00 | Vulnerability · Source |
| CVE-2024-41990 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 14 known affected: 5 known not affected: 337 | 2026-08-12T15:38:56+00:00 | Vulnerability · Source |
| CVE-2024-45230 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 8 known affected: 14 known not affected: 115 | 2026-08-12T15:38:02+00:00 | Vulnerability · Source |
| CVE-2024-41989 | redhat_vex | python-django: Memory exhaustion in django.utils.numberformat.floatformat() | fixed: 18 known affected: 7 known not affected: 450 | 2026-08-12T15:37:58+00:00 | Vulnerability · Source |
| CVE-2023-48631 | redhat_vex | css-tools: regular expression denial of service (ReDoS) when parsing CSS | fixed: 23 known affected: 10 known not affected: 106 | 2026-08-12T15:31:13+00:00 | Vulnerability · Source |
| CVE-2023-45286 | redhat_vex | go-resty: HTTP request body disclosure in github.com/go-resty/resty/v2 | fixed: 78 known affected: 4 known not affected: 13 | 2026-08-12T15:31:01+00:00 | Vulnerability · Source |
| CVE-2026-43629 | redhat_vex | llama.cpp: llama.cpp: Arbitrary code execution via crafted KV cache state files | known affected: 4 | 2026-08-12T15:23:21+00:00 | Vulnerability · Source |
| CVE-2026-29035 | redhat_vex | CivetWeb: CivetWeb: Arbitrary code execution via crafted WebSocket frames | known not affected: 1 | 2026-08-12T15:23:15+00:00 | Vulnerability · Source |
| CVE-2026-19560 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in Blink | known not affected: 1 | 2026-08-12T15:23:12+00:00 | Vulnerability · Source |
| CVE-2026-19175 | redhat_vex | chromium-browser: Google Chrome: Remote sandbox escape via use-after-free in Payments | known not affected: 1 | 2026-08-12T15:23:11+00:00 | Vulnerability · Source |
| CVE-2026-19173 | redhat_vex | chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium | known not affected: 1 | 2026-08-12T15:23:07+00:00 | Vulnerability · Source |
| CVE-2026-19164 | redhat_vex | chromium-browser: Google Chrome Codecs: Sandbox escape via crafted HTML page | known not affected: 1 | 2026-08-12T15:23:06+00:00 | Vulnerability · Source |
| CVE-2026-19170 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use after free in WebGL | known not affected: 1 | 2026-08-12T15:23:06+00:00 | Vulnerability · Source |
| CVE-2026-19151 | redhat_vex | chromium-browser: Chromium-browser: Arbitrary code execution via use-after-free in V8 | known not affected: 1 | 2026-08-12T15:22:58+00:00 | Vulnerability · Source |
| CVE-2026-18536 | redhat_vex | Data-Entropy: Data-Entropy: Predictable random numbers due to unencrypted remote entropy sources | known not affected: 1 | 2026-08-12T15:22:53+00:00 | Vulnerability · Source |
| CVE-2026-66373 | redhat_vex | redis: Redis: Remote Code Execution via specially crafted RESTORE payload | fixed: 4 known affected: 18 known not affected: 1 | 2026-08-12T15:21:32+00:00 | Vulnerability · Source |
| CVE-2026-64300 | redhat_vex | kernel: perf/aux: Fix page UAF in map_range() | fixed: 309 known not affected: 198 | 2026-08-12T15:19:18+00:00 | Vulnerability · Source |
| CVE-2026-54230 | redhat_vex | abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites | fixed: 168 known affected: 36 | 2026-08-12T15:18:54+00:00 | Vulnerability · Source |
| CVE-2026-54229 | redhat_vex | abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking | fixed: 179 known affected: 14 known not affected: 476 | 2026-08-12T15:18:50+00:00 | Vulnerability · Source |
| CVE-2026-54228 | redhat_vex | abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories | fixed: 179 known affected: 14 known not affected: 476 | 2026-08-12T15:18:50+00:00 | Vulnerability · Source |
| CVE-2026-16349 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component | fixed: 260 known affected: 8 | 2026-08-12T15:18:40+00:00 | Vulnerability · Source |
| CVE-2026-15719 | redhat_vex | firefox: thunderbird: Site isolation issue in the DOM: Navigation component | fixed: 260 known affected: 8 | 2026-08-12T15:18:37+00:00 | Vulnerability · Source |
| CVE-2026-16352 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component | fixed: 260 known affected: 8 | 2026-08-12T15:18:34+00:00 | Vulnerability · Source |
| CVE-2026-16351 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component | fixed: 260 known affected: 8 | 2026-08-12T15:18:32+00:00 | Vulnerability · Source |
| CVE-2026-16368 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component | fixed: 260 known affected: 8 | 2026-08-12T15:18:28+00:00 | Vulnerability · Source |
| CVE-2026-16363 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component | fixed: 260 known affected: 8 | 2026-08-12T15:18:23+00:00 | Vulnerability · Source |
| CVE-2026-16362 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component | fixed: 260 known affected: 8 | 2026-08-12T15:18:18+00:00 | Vulnerability · Source |
| CVE-2026-16361 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 | fixed: 260 known affected: 8 | 2026-08-12T15:18:14+00:00 | Vulnerability · Source |
| CVE-2026-16360 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 | fixed: 260 known affected: 8 | 2026-08-12T15:18:11+00:00 | Vulnerability · Source |
| CVE-2026-16356 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component | fixed: 260 known affected: 8 | 2026-08-12T15:18:05+00:00 | Vulnerability · Source |
| CVE-2026-16355 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 260 known affected: 8 | 2026-08-12T15:18:01+00:00 | Vulnerability · Source |
| CVE-2026-16412 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 | fixed: 260 known affected: 8 | 2026-08-12T15:17:46+00:00 | Vulnerability · Source |
| CVE-2026-72718 | redhat_vex | goose: Goose: Arbitrary command execution via malicious Git configuration in `goose review` | known affected: 2 | 2026-08-12T12:52:02+00:00 | Vulnerability · Source |
| CVE-2026-73235 | redhat_vex | FreeCAD: FreeCAD: Information disclosure and server-side request forgery through crafted files | known not affected: 1 | 2026-08-12T09:35:23+00:00 | Vulnerability · Source |
| CVE-2026-19588 | redhat_vex | rlottie: rlottie: Denial of Service via integer overflow leading to buffer overflow | known not affected: 1 | 2026-08-12T09:35:22+00:00 | Vulnerability · Source |
| CVE-2026-53009 | redhat_vex | kernel: ice: fix double-free of tx_buf skb | fixed: 459 known affected: 136 known not affected: 14 | 2026-08-12T09:35:19+00:00 | Vulnerability · Source |
| CVE-2026-73234 | redhat_vex | FreeCAD: FreeCAD: Arbitrary file write via path traversal | known not affected: 1 | 2026-08-12T09:20:06+00:00 | Vulnerability · Source |
| CVE-2026-73233 | redhat_vex | FreeCAD: FreeCAD: Arbitrary code execution via crafted FEM formula | known not affected: 1 | 2026-08-12T09:20:06+00:00 | Vulnerability · Source |
| CVE-2026-73214 | redhat_vex | coturn: coturn: Denial of Service via unverified DTLS session state | known not affected: 1 | 2026-08-12T09:19:59+00:00 | Vulnerability · Source |
| CVE-2026-19559 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via use after free in HTML | known not affected: 1 | 2026-08-12T09:19:57+00:00 | Vulnerability · Source |