VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224345 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-27623 | redhat_vex | Valkey: Valkey: Denial of Service via specially crafted network requests | known not affected: 6 | 2026-06-30T04:02:47+00:00 | Vulnerability · Source |
| CVE-2026-27622 | redhat_vex | openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing | fixed: 368 known affected: 3 known not affected: 32 | 2026-06-30T04:02:45+00:00 | Vulnerability · Source |
| CVE-2026-27489 | redhat_vex | onnx: ONNX: Information Disclosure via Path Traversal Vulnerability | fixed: 26 known affected: 1 known not affected: 182 | 2026-06-30T04:02:38+00:00 | Vulnerability · Source |
| CVE-2026-27446 | redhat_vex | org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication | fixed: 36 known affected: 4 known not affected: 197 | 2026-06-30T04:02:33+00:00 | Vulnerability · Source |
| CVE-2026-27148 | redhat_vex | storybook: Storybook: Remote Code Execution via WebSocket Hijacking | known affected: 1 known not affected: 7 | 2026-06-30T04:02:32+00:00 | Vulnerability · Source |
| CVE-2026-27135 | redhat_vex | nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination | fixed: 919 known not affected: 58 | 2026-06-30T04:02:24+00:00 | Vulnerability · Source |
| CVE-2026-27134 | redhat_vex | strimzi-kafka-operator: Strimzi: Unauthorized authentication via misconfigured mTLS CA chain | known affected: 2 known not affected: 2 | 2026-06-30T04:02:20+00:00 | Vulnerability · Source |
| CVE-2026-26999 | redhat_vex | github.com/traefik/traefik: Traefik: Denial of Service due to incomplete TLS handshake | fixed: 4 known not affected: 57 | 2026-06-30T04:02:19+00:00 | Vulnerability · Source |
| CVE-2026-26965 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path | fixed: 732 known not affected: 5 | 2026-06-30T04:02:16+00:00 | Vulnerability · Source |
| CVE-2026-26956 | redhat_vex | vm2: Node.js: vm2: Arbitrary code execution via sandbox escape | known not affected: 3 | 2026-06-30T04:02:15+00:00 | Vulnerability · Source |
| CVE-2026-26955 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline | fixed: 732 known not affected: 5 | 2026-06-30T04:02:11+00:00 | Vulnerability · Source |
| CVE-2026-26332 | redhat_vex | vm2: vm2: Arbitrary code execution via SuppressedError sandbox escape | known affected: 1 known not affected: 1 | 2026-06-30T04:02:06+00:00 | Vulnerability · Source |
| CVE-2026-26318 | redhat_vex | systeminformation: systeminformation: Arbitrary code execution via unsanitized `locate` output | known affected: 1 | 2026-06-30T04:02:06+00:00 | Vulnerability · Source |
| CVE-2026-26280 | redhat_vex | systeminformation: systeminformation: Arbitrary command execution via unsanitized network interface parameter | known affected: 1 | 2026-06-30T04:02:03+00:00 | Vulnerability · Source |
| CVE-2026-26200 | redhat_vex | hdf5: HDF5: Denial of Service due to heap buffer overflow when parsing a crafted h5 file | known affected: 1 | 2026-06-30T04:01:58+00:00 | Vulnerability · Source |
| CVE-2026-26171 | redhat_vex | dotnet: .NET: Security Bypass and Denial of Service Vulnerability | fixed: 1469 known not affected: 6 | 2026-06-30T04:01:54+00:00 | Vulnerability · Source |
| CVE-2026-26158 | redhat_vex | busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries | fixed: 3 known affected: 3 | 2026-06-30T04:01:53+00:00 | Vulnerability · Source |
| CVE-2026-26157 | redhat_vex | busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization | fixed: 3 known affected: 3 | 2026-06-30T04:01:52+00:00 | Vulnerability · Source |
| CVE-2026-26130 | redhat_vex | asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation | fixed: 1466 known not affected: 22 | 2026-06-30T04:01:48+00:00 | Vulnerability · Source |
| CVE-2026-26103 | redhat_vex | udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API | fixed: 146 known not affected: 25 | 2026-06-30T04:01:44+00:00 | Vulnerability · Source |
| CVE-2026-25985 | redhat_vex | ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder | fixed: 33 known affected: 7 known not affected: 18 | 2026-06-30T04:01:30+00:00 | Vulnerability · Source |
| CVE-2026-25965 | redhat_vex | ImageMagick: ImageMagick: Local File Disclosure via Path Traversal | fixed: 33 known affected: 7 known not affected: 18 | 2026-06-30T04:01:28+00:00 | Vulnerability · Source |
| CVE-2026-25949 | redhat_vex | github.com/traefik/traefik: Traefik: Denial of Service via stalled STARTTLS requests | fixed: 4 known not affected: 57 | 2026-06-30T04:01:23+00:00 | Vulnerability · Source |
| CVE-2026-25794 | redhat_vex | ImageMagick: ImageMagick: Denial of service and potential arbitrary code execution via integer overflow in image processing | known affected: 7 known not affected: 7 | 2026-06-30T04:01:15+00:00 | Vulnerability · Source |
| CVE-2026-3338 | redhat_vex | aws-lc: AWS-LC: Signature bypass due to improper validation in PKCS7_verify() | fixed: 2 known affected: 7 known not affected: 6 | 2026-06-30T04:01:14+00:00 | Vulnerability · Source |
| CVE-2026-3336 | redhat_vex | aws-lc: aws-lc: Certificate validation bypass via improper handling of PKCS7 objects | fixed: 2 known affected: 7 known not affected: 6 | 2026-06-30T04:01:11+00:00 | Vulnerability · Source |
| CVE-2026-3304 | redhat_vex | multer: Multer: Denial of Service via malformed requests | fixed: 2 known affected: 1 known not affected: 34 | 2026-06-30T04:01:10+00:00 | Vulnerability · Source |
| CVE-2026-3195 | redhat_vex | qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730) | known not affected: 82 | 2026-06-30T04:01:09+00:00 | Vulnerability · Source |
| CVE-2026-3238 | redhat_vex | samba: Denial of service against AD DC WINS server | known not affected: 174 | 2026-06-30T04:01:06+00:00 | Vulnerability · Source |
| CVE-2026-3104 | redhat_vex | bind: BIND: Denial of Service via specially crafted domain query causing a memory leak | fixed: 4 known not affected: 86 | 2026-06-30T04:00:59+00:00 | Vulnerability · Source |
| CVE-2026-3086 | redhat_vex | GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in H.266 Codec Parser | known affected: 6 known not affected: 16 | 2026-06-30T04:00:57+00:00 | Vulnerability · Source |
| CVE-2026-3084 | redhat_vex | GStreamer: GStreamer: Remote Code Execution via integer underflow in H.266 Codec Parser | known affected: 6 known not affected: 16 | 2026-06-30T04:00:53+00:00 | Vulnerability · Source |
| CVE-2026-3081 | redhat_vex | GStreamer: GStreamer: Arbitrary code execution via H.266 codec parsing stack-based buffer overflow | known not affected: 22 | 2026-06-30T04:00:47+00:00 | Vulnerability · Source |
| CVE-2026-3047 | redhat_vex | org.keycloak.broker.saml: Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login | fixed: 20 | 2026-06-30T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-3039 | redhat_vex | bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation | fixed: 466 known affected: 25 known not affected: 5 | 2026-06-30T04:00:39+00:00 | Vulnerability · Source |
| CVE-2026-3029 | redhat_vex | PyMuPDF: PyMuPDF: Arbitrary file write via path traversal vulnerability | known affected: 3 | 2026-06-30T04:00:35+00:00 | Vulnerability · Source |
| CVE-2026-3009 | redhat_vex | org.keycloak/keycloak-services: Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass) | fixed: 10 known affected: 1 known not affected: 2 | 2026-06-30T04:00:25+00:00 | Vulnerability · Source |
| CVE-2026-3006 | redhat_vex | winfsp: winfsp: Local privilege escalation via race condition and kernel heap overflow | known not affected: 1 | 2026-06-30T04:00:20+00:00 | Vulnerability · Source |
| CVE-2026-2818 | redhat_vex | org.springframework.data/spring-data-geode: Spring Data Geode: Path traversal vulnerability allows arbitrary file write via import snapshot functionality. | known not affected: 1 | 2026-06-30T04:00:09+00:00 | Vulnerability · Source |
| CVE-2026-2798 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | known not affected: 18 | 2026-06-30T04:00:03+00:00 | Vulnerability · Source |
| CVE-2026-2796 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component | known not affected: 23 | 2026-06-30T04:00:02+00:00 | Vulnerability · Source |
| CVE-2026-2795 | redhat_vex | firefox: Use-after-free in the JavaScript: GC component | known not affected: 12 | 2026-06-30T04:00:01+00:00 | Vulnerability · Source |
| CVE-2026-2794 | redhat_vex | firefox: Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android | known not affected: 12 | 2026-06-30T03:59:58+00:00 | Vulnerability · Source |
| CVE-2026-2792 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | fixed: 320 known affected: 6 | 2026-06-30T03:59:55+00:00 | Vulnerability · Source |
| CVE-2026-2778 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component | fixed: 320 known affected: 6 | 2026-06-30T03:59:53+00:00 | Vulnerability · Source |
| CVE-2026-2776 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software | fixed: 320 known affected: 6 | 2026-06-30T03:59:50+00:00 | Vulnerability · Source |
| CVE-2026-2775 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: HTML Parser component | fixed: 320 known affected: 8 | 2026-06-30T03:59:47+00:00 | Vulnerability · Source |
| CVE-2026-2772 | redhat_vex | firefox: thunderbird: Use-after-free in the Audio/Video: Playback component | fixed: 320 known affected: 8 | 2026-06-30T03:59:41+00:00 | Vulnerability · Source |
| CVE-2026-2769 | redhat_vex | firefox: thunderbird: Use-after-free in the Storage: IndexedDB component | fixed: 320 known affected: 8 | 2026-06-30T03:59:38+00:00 | Vulnerability · Source |
| CVE-2026-2768 | redhat_vex | firefox: thunderbird: Sandbox escape in the Storage: IndexedDB component | fixed: 320 known affected: 6 | 2026-06-30T03:59:35+00:00 | Vulnerability · Source |