VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-103059 | redhat_vex | code.gitea.io/gitea: Gitea: Authentication bypass via case-insensitive SSH public key lookup | known not affected: 1 | 2026-10-16T09:43:59+00:00 | Vulnerability · Source |
| CVE-2026-102828 | redhat_vex | simple-git: simple-git unsafe-operation guard does not block trailer command configuration | known affected: 9 known not affected: 25 | 2026-10-16T09:43:55+00:00 | Vulnerability · Source |
| CVE-2026-102826 | redhat_vex | simple-git: simple-git allows command execution through unblocked Git configuration includes | known affected: 30 known not affected: 4 | 2026-10-16T09:43:53+00:00 | Vulnerability · Source |
| CVE-2026-102495 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing | known affected: 9 known not affected: 9 | 2026-10-16T09:43:49+00:00 | Vulnerability · Source |
| CVE-2026-102496 | redhat_vex | org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures | known affected: 9 known not affected: 9 | 2026-10-16T09:43:49+00:00 | Vulnerability · Source |
| CVE-2026-102313 | redhat_vex | chromium-browser: angle: chromium-browser: Information disclosure via uninitialized resource in ANGLE | known affected: 27 known not affected: 18 | 2026-10-16T09:43:43+00:00 | Vulnerability · Source |
| CVE-2026-100832 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component | known affected: 23 | 2026-10-16T09:43:33+00:00 | Vulnerability · Source |
| CVE-2026-100811 | redhat_vex | firefox: firefox: Sandbox escape via use-after-free in DOM component | known affected: 23 | 2026-10-16T09:43:32+00:00 | Vulnerability · Source |
| CVE-2026-100793 | redhat_vex | firefox: JIT miscompilation in the JavaScript Engine component | known not affected: 12 | 2026-10-16T09:43:30+00:00 | Vulnerability · Source |
| CVE-2026-100792 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component | known affected: 23 | 2026-10-16T09:43:28+00:00 | Vulnerability · Source |
| CVE-2026-100791 | redhat_vex | firefox: Use-after-free in the DOM: Core & HTML component | known affected: 23 | 2026-10-16T09:43:24+00:00 | Vulnerability · Source |
| CVE-2026-100789 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component | known affected: 22 known not affected: 1 | 2026-10-16T09:43:20+00:00 | Vulnerability · Source |
| CVE-2026-100788 | redhat_vex | firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component | known affected: 23 | 2026-10-16T09:43:18+00:00 | Vulnerability · Source |
| CVE-2026-100787 | redhat_vex | firefox: Sandbox escape in the XUL component | known not affected: 12 | 2026-10-16T09:43:16+00:00 | Vulnerability · Source |
| CVE-2026-100784 | redhat_vex | firefox: Use-after-free in the Layout: Text and Fonts component | known affected: 23 | 2026-10-16T09:43:09+00:00 | Vulnerability · Source |
| CVE-2026-100783 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Audio/Video component | known affected: 23 | 2026-10-16T09:43:07+00:00 | Vulnerability · Source |
| CVE-2026-100782 | redhat_vex | firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component | known affected: 23 | 2026-10-16T09:43:05+00:00 | Vulnerability · Source |
| CVE-2026-100781 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | known affected: 23 | 2026-10-16T09:43:03+00:00 | Vulnerability · Source |
| CVE-2026-100780 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | known affected: 23 | 2026-10-16T09:43:00+00:00 | Vulnerability · Source |
| CVE-2026-100779 | redhat_vex | firefox: thunderbird: Use-after-free in the XSLT component | known affected: 23 | 2026-10-16T09:42:59+00:00 | Vulnerability · Source |
| CVE-2026-100778 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component | known affected: 23 | 2026-10-16T09:42:56+00:00 | Vulnerability · Source |
| CVE-2026-100777 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component | known affected: 23 | 2026-10-16T09:42:55+00:00 | Vulnerability · Source |
| CVE-2026-100776 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | known affected: 23 | 2026-10-16T09:42:53+00:00 | Vulnerability · Source |
| CVE-2026-100775 | redhat_vex | firefox: thunderbird: Sandbox escape in the Graphics component | known affected: 23 | 2026-10-16T09:42:50+00:00 | Vulnerability · Source |
| CVE-2026-100774 | redhat_vex | firefox: Use-after-free in the DOM: Core & HTML component | known affected: 23 | 2026-10-16T09:42:47+00:00 | Vulnerability · Source |
| CVE-2026-100773 | redhat_vex | firefox: thunderbird: Use-after-free in the Storage: IndexedDB component | known affected: 23 | 2026-10-16T09:42:45+00:00 | Vulnerability · Source |
| CVE-2026-100771 | redhat_vex | firefox: thunderbird: Undefined behavior in the DOM: Streams component | known affected: 23 | 2026-10-16T09:42:44+00:00 | Vulnerability · Source |
| CVE-2026-100772 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | known affected: 23 | 2026-10-16T09:42:40+00:00 | Vulnerability · Source |
| CVE-2026-100770 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component | known affected: 23 | 2026-10-16T09:42:36+00:00 | Vulnerability · Source |
| CVE-2026-100768 | redhat_vex | firefox: Use-after-free in the Graphics: WebGPU component | known not affected: 12 | 2026-10-16T09:42:33+00:00 | Vulnerability · Source |
| CVE-2026-100767 | redhat_vex | firefox: thunderbird: Use-after-free in the Networking: Cache component | known affected: 23 | 2026-10-16T09:42:30+00:00 | Vulnerability · Source |
| CVE-2026-100763 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-10-16T09:42:27+00:00 | Vulnerability · Source |
| CVE-2026-100761 | redhat_vex | firefox: Privilege escalation due to use-after-free in the Graphics: WebGPU component | known not affected: 12 | 2026-10-16T09:42:24+00:00 | Vulnerability · Source |
| CVE-2026-100762 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component | known affected: 23 | 2026-10-16T09:42:24+00:00 | Vulnerability · Source |
| CVE-2026-100760 | redhat_vex | firefox: Sandbox escape in the Security: Process Sandboxing component | known not affected: 12 | 2026-10-16T09:42:19+00:00 | Vulnerability · Source |
| CVE-2026-100758 | redhat_vex | firefox: thunderbird: Sandbox escape in the DOM: Navigation component | known affected: 23 | 2026-10-16T09:42:14+00:00 | Vulnerability · Source |
| CVE-2026-100757 | redhat_vex | firefox: thunderbird: Use-after-free in the Widget component | known affected: 23 | 2026-10-16T09:42:11+00:00 | Vulnerability · Source |
| CVE-2026-100756 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | known affected: 23 | 2026-10-16T09:42:08+00:00 | Vulnerability · Source |
| CVE-2026-100706 | redhat_vex | github.com/kyverno/kyverno: kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath | known not affected: 1 | 2026-10-16T09:42:04+00:00 | Vulnerability · Source |
| CVE-2026-100657 | redhat_vex | io.netty/netty-codec-stomp: netty-codec-stomp: Denial of Service via memory leak during frame decoding | known affected: 6 known not affected: 1 | 2026-10-16T09:42:00+00:00 | Vulnerability · Source |
| CVE-2025-71407 | redhat_vex | rubygem-nokogiri: Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free | known not affected: 6 | 2026-10-16T09:41:43+00:00 | Vulnerability · Source |
| CVE-2026-106188 | microsoft_vex | Chromium CVE-2026-106188: Confused deputy | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106421 | microsoft_vex | Chromium CVE-2026-106421: Use after free | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106265 | microsoft_vex | Chromium CVE-2026-106265: UI misrepresentation | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106330 | microsoft_vex | Chromium CVE-2026-106330: Information leak | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106307 | microsoft_vex | Chromium CVE-2026-106307: Incorrect authorization | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106236 | microsoft_vex | Chromium CVE-2026-106236: UI misrepresentation | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106251 | microsoft_vex | Chromium CVE-2026-106251: UI misrepresentation | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106393 | microsoft_vex | Chromium CVE-2026-106393: Use after free | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-106338 | microsoft_vex | Chromium CVE-2026-106338: UI misrepresentation | fixed: 1 known affected: 1 | 2026-10-16T07:00:00+00:00 | Vulnerability · Source |