VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-19176 | redhat_vex | chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page | fixed: 92 known affected: 4 known not affected: 21 | 2026-10-16T11:16:09+00:00 | Vulnerability · Source |
| CVE-2026-19173 | redhat_vex | chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia | fixed: 92 known affected: 4 known not affected: 21 | 2026-10-16T11:16:07+00:00 | Vulnerability · Source |
| CVE-2026-19161 | redhat_vex | chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use | fixed: 92 known affected: 4 known not affected: 21 | 2026-10-16T11:16:05+00:00 | Vulnerability · Source |
| CVE-2026-19154 | redhat_vex | chromium-browser: skia: chromium-browser: Use after free in Skia | fixed: 92 known affected: 4 known not affected: 21 | 2026-10-16T11:16:02+00:00 | Vulnerability · Source |
| CVE-2026-12795 | redhat_vex | litellm: BerriAI litellm: Missing authentication in SSO Debug Flow allows remote access. | known not affected: 7 | 2026-10-16T11:15:29+00:00 | Vulnerability · Source |
| CVE-2026-12717 | redhat_vex | BigQuery Data Transfer Service: big query data transfer: Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection | known not affected: 1 | 2026-10-16T11:15:26+00:00 | Vulnerability · Source |
| CVE-2026-10879 | redhat_vex | perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. | fixed: 64 known affected: 2 | 2026-10-16T11:15:19+00:00 | Vulnerability · Source |
| CVE-2026-6100 | redhat_vex | python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules | fixed: 1733 known affected: 19 known not affected: 94 | 2026-10-16T11:15:11+00:00 | Vulnerability · Source |
| CVE-2026-4786 | redhat_vex | python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API | fixed: 1968 known affected: 106 known not affected: 77 | 2026-10-16T11:15:10+00:00 | Vulnerability · Source |
| CVE-2026-28421 | redhat_vex | vim: Vim: Denial of service and information disclosure via crafted swap file | fixed: 658 known not affected: 177 | 2026-10-16T11:09:36+00:00 | Vulnerability · Source |
| CVE-2026-28417 | redhat_vex | vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin | fixed: 638 known not affected: 197 | 2026-10-16T11:09:33+00:00 | Vulnerability · Source |
| CVE-2026-25749 | redhat_vex | vim: Vim: Arbitrary code execution via 'helpfile' option processing | fixed: 649 known affected: 6 known not affected: 164 | 2026-10-16T11:09:30+00:00 | Vulnerability · Source |
| CVE-2025-12801 | redhat_vex | nfs-utils: rpc.mountd in the nfs-utils privilege escalation | fixed: 425 known affected: 7 | 2026-10-16T11:09:20+00:00 | Vulnerability · Source |
| CVE-2026-59280 | redhat_vex | org.springframework/spring-webmvc: Spring Framework: Path Traversal via untrusted input in FreeMarker integration | known affected: 4 known not affected: 12 | 2026-10-16T11:08:17+00:00 | Vulnerability · Source |
| CVE-2026-9080 | redhat_vex | libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback | fixed: 48 known affected: 34 known not affected: 71 | 2026-10-16T11:00:55+00:00 | Vulnerability · Source |
| CVE-2026-104045 | redhat_vex | sssd: sssd: Denial of Service via race condition in autofs responder | known affected: 166 | 2026-10-16T10:57:47+00:00 | Vulnerability · Source |
| CVE-2026-104041 | redhat_vex | sssd: sssd: Denial of Service via unbounded negative cache growth | known affected: 166 | 2026-10-16T10:57:44+00:00 | Vulnerability · Source |
| CVE-2026-104038 | redhat_vex | sssd: sssd: Denial of Service via missing SID extension in certificate mapping | known affected: 166 | 2026-10-16T10:57:43+00:00 | Vulnerability · Source |
| CVE-2026-104039 | redhat_vex | sssd: sssd: Denial of service via stale connection state reuse in PAM GSSAPI responder | known affected: 166 | 2026-10-16T10:57:42+00:00 | Vulnerability · Source |
| CVE-2026-104037 | redhat_vex | sssd: sssd: Denial of Service via packet length underflow in autofs responder | known affected: 166 | 2026-10-16T10:57:37+00:00 | Vulnerability · Source |
| CVE-2026-104035 | redhat_vex | sssd: sssd: Denial of Service via memory exhaustion in KCM responder | known affected: 166 | 2026-10-16T10:57:33+00:00 | Vulnerability · Source |
| CVE-2026-104036 | redhat_vex | sssd: sssd: Denial of service via out-of-bounds write in NFS idmap plugin | known affected: 166 | 2026-10-16T10:57:33+00:00 | Vulnerability · Source |
| CVE-2026-104034 | redhat_vex | sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewal | known affected: 166 | 2026-10-16T10:57:29+00:00 | Vulnerability · Source |
| CVE-2026-104033 | redhat_vex | sssd: sssd: Access control bypass via improper LDAP shadow expiration check | known affected: 166 | 2026-10-16T10:57:27+00:00 | Vulnerability · Source |
| CVE-2026-104032 | redhat_vex | sssd: sssd: Denial of Service via unprivileged autofs cache invalidation | known affected: 166 | 2026-10-16T10:57:24+00:00 | Vulnerability · Source |
| CVE-2026-104031 | redhat_vex | sssd: SSSD: Denial of Service via memory exhaustion in autofs responder | known affected: 166 | 2026-10-16T10:57:22+00:00 | Vulnerability · Source |
| CVE-2025-14333 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 | fixed: 320 known affected: 8 | 2026-10-16T10:57:17+00:00 | Vulnerability · Source |
| CVE-2025-14330 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-10-16T10:57:13+00:00 | Vulnerability · Source |
| CVE-2025-14329 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-10-16T10:57:11+00:00 | Vulnerability · Source |
| CVE-2025-14328 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-10-16T10:57:09+00:00 | Vulnerability · Source |
| CVE-2025-14327 | redhat_vex | firefox: Spoofing issue in the Downloads Panel component | fixed: 320 known affected: 7 | 2026-10-16T10:57:07+00:00 | Vulnerability · Source |
| CVE-2024-12798 | redhat_vex | logback-core: arbitrary code execution via JaninoEventEvaluator | fixed: 1 known affected: 14 known not affected: 5 | 2026-10-16T10:57:05+00:00 | Vulnerability · Source |
| CVE-2025-4949 | redhat_vex | org.eclipse.jgit: XXE vulnerability in Eclipse JGit | fixed: 530 known affected: 11 known not affected: 5065 | 2026-10-16T10:56:55+00:00 | Vulnerability · Source |
| CVE-2026-11998 | redhat_vex | angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass | known affected: 1 known not affected: 47 | 2026-10-16T10:48:58+00:00 | Vulnerability · Source |
| CVE-2025-64460 | redhat_vex | Django: Django: Algorithmic complexity in XML Deserializer leads to denial of service | fixed: 42 known not affected: 544 | 2026-10-16T10:47:36+00:00 | Vulnerability · Source |
| CVE-2026-73507 | redhat_vex | io.netty/netty-codec-xml: Netty: Denial of Service via CPU Exhaustion in XmlFrameDecoder | fixed: 1 known affected: 1 known not affected: 4 | 2026-10-16T10:47:00+00:00 | Vulnerability · Source |
| CVE-2026-59647 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of Service via unbounded iteration in CRMF/CMP password-MAC | known affected: 2 known not affected: 12 | 2026-10-16T10:45:52+00:00 | Vulnerability · Source |
| CVE-2026-59640 | redhat_vex | org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-fips: Bouncy Castle for Java: Information disclosure via OpenPGP CFB quick-check oracle | known affected: 2 | 2026-10-16T10:45:42+00:00 | Vulnerability · Source |
| CVE-2026-58063 | redhat_vex | org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Denial of Service via unbounded KDF cost in BCFKS keystore load | known affected: 4 known not affected: 13 | 2026-10-16T10:45:28+00:00 | Vulnerability · Source |
| CVE-2026-50734 | redhat_vex | Apache ActiveMQ Client: Apache ActiveMQ: Apache ActiveMQ All: Apache ActiveMQ: Denial of Service via crafted WireFormatInfo frame | fixed: 3 known affected: 76 known not affected: 43 | 2026-10-16T10:44:50+00:00 | Vulnerability · Source |
| CVE-2026-45205 | redhat_vex | commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input | fixed: 3 known affected: 25 known not affected: 22 | 2026-10-16T10:44:41+00:00 | Vulnerability · Source |
| CVE-2026-18212 | redhat_vex | keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state | fixed: 20 known affected: 2 known not affected: 1 | 2026-10-16T10:44:37+00:00 | Vulnerability · Source |
| CVE-2026-16102 | redhat_vex | keycloak-services: keycloak-services: Default DCR policy allows role forgery via User Property mappers | fixed: 20 known affected: 1 known not affected: 2 | 2026-10-16T10:44:33+00:00 | Vulnerability · Source |
| CVE-2026-4890 | redhat_vex | dnsmasq: NSEC bitmap parsing infinite loop | fixed: 88 known affected: 6 under investigation: 1 | 2026-10-16T10:44:17+00:00 | Vulnerability · Source |
| CVE-2026-8763 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI | known affected: 47 known not affected: 16 under investigation: 13 | 2026-10-16T10:41:02+00:00 | Vulnerability · Source |
| CVE-2025-59952 | redhat_vex | io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution | fixed: 2 known affected: 2 known not affected: 5 | 2026-10-16T10:40:57+00:00 | Vulnerability · Source |
| CVE-2025-14324 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-10-16T10:39:40+00:00 | Vulnerability · Source |
| CVE-2025-14323 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Notifications component | fixed: 320 known affected: 8 | 2026-10-16T10:39:30+00:00 | Vulnerability · Source |
| CVE-2025-14322 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 320 known affected: 8 | 2026-10-16T10:39:20+00:00 | Vulnerability · Source |
| CVE-2025-14321 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-10-16T10:39:12+00:00 | Vulnerability · Source |