VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291949 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47086 | redhat_vex | cyrus-imapd: cyrus-imapd: Information disclosure via URLAUTH token bypass of Access Control Lists | known affected: 20 | 2026-07-27T13:09:55+00:00 | Vulnerability · Source |
| CVE-2026-49875 | redhat_vex | cxf: org.apache.cxf/cxf-core: Apache CXF: Information disclosure via out-of-band external entity resolution due to missing JAXP hardening | fixed: 2 known affected: 6 known not affected: 1 | 2026-07-27T12:46:59+00:00 | Vulnerability · Source |
| CVE-2026-54422 | redhat_vex | ironic-python-agent: ironic-python-agent: Credential extraction from bootc container deployment via /proc/1/root | known affected: 4 known not affected: 5 | 2026-07-27T12:42:12+00:00 | Vulnerability · Source |
| CVE-2026-8949 | redhat_vex | firefox: thunderbird: Integer overflow in the Widget: Win32 component | known not affected: 23 | 2026-07-27T12:29:02+00:00 | Vulnerability · Source |
| CVE-2026-65920 | redhat_vex | diffusers: Diffusers: Information disclosure via path traversal vulnerability | known affected: 16 | 2026-07-27T10:51:35+00:00 | Vulnerability · Source |
| CVE-2026-50264 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat | fixed: 1006 known affected: 14 | 2026-07-27T09:48:12+00:00 | Vulnerability · Source |
| CVE-2026-16807 | redhat_vex | chromium-browser: Google Chrome Codecs: Sandbox escape via crafted HTML page | known not affected: 1 | 2026-07-27T09:42:31+00:00 | Vulnerability · Source |
| CVE-2026-64331 | redhat_vex | kernel: usbip: vudc: fix NULL deref in vep_dequeue() | known not affected: 274 | 2026-07-27T09:34:49+00:00 | Vulnerability · Source |
| CVE-2026-64269 | redhat_vex | kernel: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | known not affected: 275 | 2026-07-27T09:34:44+00:00 | Vulnerability · Source |
| CVE-2026-16410 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 23 | 2026-07-27T09:34:41+00:00 | Vulnerability · Source |
| CVE-2026-16409 | redhat_vex | firefox: thunderbird: Invalid pointer in the Security: PSM component | known not affected: 23 | 2026-07-27T09:34:40+00:00 | Vulnerability · Source |
| CVE-2026-16408 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video: Playback component | known affected: 6 known not affected: 12 | 2026-07-27T09:34:39+00:00 | Vulnerability · Source |
| CVE-2026-16407 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Service Workers component | known not affected: 23 | 2026-07-27T09:34:34+00:00 | Vulnerability · Source |
| CVE-2026-16406 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking component | known affected: 6 known not affected: 12 | 2026-07-27T09:34:29+00:00 | Vulnerability · Source |
| CVE-2026-16404 | redhat_vex | firefox: Spoofing issue in Firefox for Android | known not affected: 12 | 2026-07-27T09:34:27+00:00 | Vulnerability · Source |
| CVE-2026-16403 | redhat_vex | firefox: thunderbird: Spoofing issue in the Address Bar component | known not affected: 23 | 2026-07-27T09:34:25+00:00 | Vulnerability · Source |
| CVE-2026-64309 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) | known affected: 184 known not affected: 90 | 2026-07-27T09:25:25+00:00 | Vulnerability · Source |
| CVE-2026-16401 | redhat_vex | firefox: thunderbird: Privilege escalation in the Data Loss Prevention component | known not affected: 18 | 2026-07-27T09:25:18+00:00 | Vulnerability · Source |
| CVE-2026-64477 | redhat_vex | kernel: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled | known affected: 184 known not affected: 90 | 2026-07-27T09:25:15+00:00 | Vulnerability · Source |
| CVE-2026-64363 | redhat_vex | kernel: HID: appleir: fix UAF on pending key_up_timer in remove() | known affected: 260 known not affected: 14 | 2026-07-27T09:25:12+00:00 | Vulnerability · Source |
| CVE-2026-16402 | redhat_vex | firefox: thunderbird: Integer overflow in the Graphics: ImageLib component | known not affected: 23 | 2026-07-27T09:25:11+00:00 | Vulnerability · Source |
| CVE-2026-16400 | redhat_vex | firefox: thunderbird: Information disclosure in the DOM: Security component | known not affected: 23 | 2026-07-27T09:25:09+00:00 | Vulnerability · Source |
| CVE-2026-16399 | redhat_vex | firefox: thunderbird: Site isolation issue in the DOM: Navigation component | known not affected: 20 | 2026-07-27T09:25:07+00:00 | Vulnerability · Source |
| CVE-2026-16398 | redhat_vex | firefox: thunderbird: Site isolation issue in the Graphics component | known not affected: 23 | 2026-07-27T09:25:05+00:00 | Vulnerability · Source |
| CVE-2026-16397 | redhat_vex | firefox: Clickjacking issue in the WebExtensions component in Firefox for Android | known not affected: 12 | 2026-07-27T09:25:02+00:00 | Vulnerability · Source |
| CVE-2026-16395 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video component | known not affected: 23 | 2026-07-27T09:25:01+00:00 | Vulnerability · Source |
| CVE-2026-16394 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:58+00:00 | Vulnerability · Source |
| CVE-2026-16393 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:57+00:00 | Vulnerability · Source |
| CVE-2026-16386 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:53+00:00 | Vulnerability · Source |
| CVE-2026-16388 | redhat_vex | firefox: thunderbird: Sandbox escape in the DOM: Networking component | known not affected: 23 | 2026-07-27T09:24:53+00:00 | Vulnerability · Source |
| CVE-2026-16385 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: WebGPU component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:50+00:00 | Vulnerability · Source |
| CVE-2026-16384 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:48+00:00 | Vulnerability · Source |
| CVE-2026-16382 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Service Workers component | known not affected: 23 | 2026-07-27T09:24:47+00:00 | Vulnerability · Source |
| CVE-2026-16380 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking component | known not affected: 23 | 2026-07-27T09:24:43+00:00 | Vulnerability · Source |
| CVE-2026-16378 | redhat_vex | firefox: thunderbird: Other issue in the DOM: Copy & Paste and Drag & Drop component | known not affected: 23 | 2026-07-27T09:24:39+00:00 | Vulnerability · Source |
| CVE-2026-16376 | redhat_vex | firefox: thunderbird: Denial-of-service in the Graphics: WebGPU component | known not affected: 23 | 2026-07-27T09:24:35+00:00 | Vulnerability · Source |
| CVE-2026-16373 | redhat_vex | firefox: Information disclosure in the Privacy component in Firefox for Android | known not affected: 12 | 2026-07-27T09:24:34+00:00 | Vulnerability · Source |
| CVE-2026-16372 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Content Processes component | known not affected: 23 | 2026-07-27T09:24:34+00:00 | Vulnerability · Source |
| CVE-2026-16370 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Networking component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:33+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-07-27T09:10:44+00:00 | Vulnerability · Source |
| CVE-2026-16411 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 153 | known not affected: 23 | 2026-07-27T08:58:51+00:00 | Vulnerability · Source |
| CVE-2026-16367 | redhat_vex | firefox: thunderbird: Sandbox escape due to invalid pointer in the Disability Access APIs component | known not affected: 23 | 2026-07-27T08:58:47+00:00 | Vulnerability · Source |
| CVE-2026-16365 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Workers component | known not affected: 23 | 2026-07-27T08:58:37+00:00 | Vulnerability · Source |
| CVE-2026-14241 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 152.0.4 | known not affected: 12 | 2026-07-27T08:58:33+00:00 | Vulnerability · Source |
| CVE-2026-16364 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | known not affected: 18 | 2026-07-27T08:57:59+00:00 | Vulnerability · Source |
| CVE-2026-64452 | redhat_vex | kernel: 6lowpan: fix NHC entry use-after-free on error path | known affected: 156 known not affected: 119 | 2026-07-27T08:23:42+00:00 | Vulnerability · Source |
| CVE-2026-64285 | redhat_vex | kernel: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest | known not affected: 275 | 2026-07-27T08:17:04+00:00 | Vulnerability · Source |
| CVE-2026-64342 | redhat_vex | kernel: USB: iowarrior: fix use-after-free on disconnect | known affected: 274 known not affected: 1 | 2026-07-27T08:01:56+00:00 | Vulnerability · Source |
| CVE-2026-64459 | redhat_vex | kernel: tcp: restore RCU grace period in tcp_ao_destroy_sock | known not affected: 275 | 2026-07-27T07:52:57+00:00 | Vulnerability · Source |
| CVE-2026-64314 | redhat_vex | kernel: crypto: chacha20poly1305 - validate poly1305 template argument | known not affected: 274 | 2026-07-27T07:52:48+00:00 | Vulnerability · Source |