VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224479 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-68201 | redhat_vex | kernel: drm/amdgpu: remove two invalid BUG_ON()s | known not affected: 274 | 2026-06-30T10:13:00+00:00 | Vulnerability · Source |
| CVE-2022-50155 | redhat_vex | kernel: mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset | known not affected: 274 | 2026-06-30T10:12:58+00:00 | Vulnerability · Source |
| CVE-2025-38171 | redhat_vex | kernel: power: supply: max77705: Fix workqueue error handling in probe | known not affected: 274 | 2026-06-30T10:12:56+00:00 | Vulnerability · Source |
| CVE-2026-35206 | redhat_vex | github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart | fixed: 16 known affected: 1 known not affected: 280 under investigation: 9 | 2026-06-30T10:08:27+00:00 | Vulnerability · Source |
| CVE-2026-23013 | redhat_vex | kernel: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback | known affected: 184 known not affected: 90 | 2026-06-30T09:37:44+00:00 | Vulnerability · Source |
| CVE-2025-60019 | redhat_vex | glib-networking: Uninitialized Memory Dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() | known not affected: 7 | 2026-06-30T09:17:13+00:00 | Vulnerability · Source |
| CVE-2025-60018 | redhat_vex | glib-networking: Out of Bound Reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" | known not affected: 7 | 2026-06-30T09:17:06+00:00 | Vulnerability · Source |
| CVE-2026-6776 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component | fixed: 368 known affected: 8 | 2026-06-30T09:13:25+00:00 | Vulnerability · Source |
| CVE-2026-6772 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS | fixed: 368 known affected: 8 | 2026-06-30T09:09:03+00:00 | Vulnerability · Source |
| CVE-2026-7321 | redhat_vex | firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component | fixed: 273 known affected: 8 | 2026-06-30T09:09:02+00:00 | Vulnerability · Source |
| CVE-2026-6771 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 368 known affected: 8 | 2026-06-30T09:08:57+00:00 | Vulnerability · Source |
| CVE-2026-6770 | redhat_vex | firefox: thunderbird: Other issue in the Storage: IndexedDB component | fixed: 368 known affected: 8 | 2026-06-30T09:08:52+00:00 | Vulnerability · Source |
| CVE-2026-6769 | redhat_vex | firefox: thunderbird: Privilege escalation in the Debugger component | fixed: 368 known affected: 8 | 2026-06-30T09:08:48+00:00 | Vulnerability · Source |
| CVE-2026-6767 | redhat_vex | firefox: thunderbird: Other issue in the Libraries component in NSS | fixed: 368 known affected: 8 | 2026-06-30T09:08:46+00:00 | Vulnerability · Source |
| CVE-2026-6766 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS | fixed: 368 known affected: 8 | 2026-06-30T09:08:41+00:00 | Vulnerability · Source |
| CVE-2026-6765 | redhat_vex | firefox: thunderbird: Information disclosure in the Form Autofill component | fixed: 368 known affected: 8 | 2026-06-30T09:08:39+00:00 | Vulnerability · Source |
| CVE-2026-6764 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component | fixed: 368 known affected: 8 | 2026-06-30T09:08:33+00:00 | Vulnerability · Source |
| CVE-2026-6763 | redhat_vex | firefox: thunderbird: Mitigation bypass in the File Handling component | fixed: 368 known affected: 8 | 2026-06-30T09:08:29+00:00 | Vulnerability · Source |
| CVE-2026-6762 | redhat_vex | firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component | fixed: 368 known affected: 8 | 2026-06-30T09:08:28+00:00 | Vulnerability · Source |
| CVE-2026-6761 | redhat_vex | firefox: thunderbird: Privilege escalation in the Networking component | fixed: 368 known affected: 8 | 2026-06-30T09:08:16+00:00 | Vulnerability · Source |
| CVE-2026-6760 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking: Cookies component | known not affected: 23 | 2026-06-30T09:08:11+00:00 | Vulnerability · Source |
| CVE-2026-6759 | redhat_vex | firefox: thunderbird: Use-after-free in the Widget: Cocoa component | fixed: 368 known affected: 8 | 2026-06-30T09:08:06+00:00 | Vulnerability · Source |
| CVE-2026-6757 | redhat_vex | firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component | fixed: 368 known affected: 8 | 2026-06-30T09:07:58+00:00 | Vulnerability · Source |
| CVE-2026-6756 | redhat_vex | firefox: Mitigation bypass in Firefox for Android | known not affected: 12 | 2026-06-30T09:07:55+00:00 | Vulnerability · Source |
| CVE-2026-6755 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: postMessage component | known not affected: 23 | 2026-06-30T09:07:52+00:00 | Vulnerability · Source |
| CVE-2026-41326 | redhat_vex | kata-containers: Arbitrary file write inside guest image via CopyFile policy | fixed: 4 known affected: 2 known not affected: 8 | 2026-06-30T09:07:30+00:00 | Vulnerability · Source |
| CVE-2026-8093 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 150.0.2 | known not affected: 12 | 2026-06-30T09:07:20+00:00 | Vulnerability · Source |
| CVE-2026-7324 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 150.0.1 | known not affected: 12 | 2026-06-30T09:07:11+00:00 | Vulnerability · Source |
| CVE-2026-7322 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 | fixed: 273 known affected: 8 | 2026-06-30T09:07:08+00:00 | Vulnerability · Source |
| CVE-2026-7320 | redhat_vex | firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component | fixed: 273 known affected: 8 | 2026-06-30T09:07:07+00:00 | Vulnerability · Source |
| CVE-2026-6786 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 | fixed: 368 known affected: 8 | 2026-06-30T09:07:05+00:00 | Vulnerability · Source |
| CVE-2026-6785 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 | fixed: 368 known affected: 8 | 2026-06-30T09:07:01+00:00 | Vulnerability · Source |
| CVE-2026-6754 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 368 known affected: 8 | 2026-06-30T09:07:00+00:00 | Vulnerability · Source |
| CVE-2026-6753 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the WebRTC component | fixed: 368 known affected: 8 | 2026-06-30T09:06:55+00:00 | Vulnerability · Source |
| CVE-2026-6751 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component | fixed: 368 known affected: 8 | 2026-06-30T09:06:48+00:00 | Vulnerability · Source |
| CVE-2026-6750 | redhat_vex | firefox: thunderbird: Privilege escalation in the Graphics: WebRender component | fixed: 368 known affected: 8 | 2026-06-30T09:06:44+00:00 | Vulnerability · Source |
| CVE-2025-11234 | redhat_vex | qemu-kvm: VNC WebSocket handshake use-after-free | fixed: 1629 known affected: 5 known not affected: 15 | 2026-06-30T08:26:55+00:00 | Vulnerability · Source |
| CVE-2026-41989 | redhat_vex | Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext | fixed: 3 known affected: 15 known not affected: 6 | 2026-06-30T08:21:59+00:00 | Vulnerability · Source |
| CVE-2026-40080 | redhat_vex | cacti: open redirect via HTTP_REFERER substring check in auth_login_redirect | known not affected: 1 | 2026-06-30T08:18:22+00:00 | Vulnerability · Source |
| CVE-2026-11786 | redhat_vex | 389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type() | known affected: 33 | 2026-06-30T07:57:45+00:00 | Vulnerability · Source |
| CVE-2024-7592 | redhat_vex | cpython: python: Uncontrolled CPU resource consumption when in http.cookies module | fixed: 179 known affected: 227 | 2026-06-30T07:57:26+00:00 | Vulnerability · Source |
| CVE-2022-1733 | redhat_vex | vim: Heap-based Buffer Overflow in cindent.c | known not affected: 30 | 2026-06-30T07:57:19+00:00 | Vulnerability · Source |
| CVE-2022-1623 | redhat_vex | libtiff: out-of-bounds read in LZWDecode | known not affected: 21 | 2026-06-30T07:57:12+00:00 | Vulnerability · Source |
| CVE-2022-1769 | redhat_vex | vim: buffer over-read in scriptfile.c | known not affected: 30 | 2026-06-30T07:57:10+00:00 | Vulnerability · Source |
| CVE-2022-1622 | redhat_vex | libtiff: out-of-bounds read in LZWDecode | known not affected: 21 | 2026-06-30T07:57:06+00:00 | Vulnerability · Source |
| CVE-2023-25815 | redhat_vex | git: malicious placement of crafted messages when git was compiled with runtime prefix | fixed: 356 known affected: 32 | 2026-06-30T07:57:02+00:00 | Vulnerability · Source |
| CVE-2025-58160 | redhat_vex | tracing-subscriber: Tracing log pollution | known affected: 203 | 2026-06-30T07:56:45+00:00 | Vulnerability · Source |
| CVE-2025-55304 | redhat_vex | exiv2: Exiv2 has quadratic performance in ICC profile parsing | known affected: 28 | 2026-06-30T07:56:39+00:00 | Vulnerability · Source |
| CVE-2025-55158 | redhat_vex | vim: Vim double-free vulnerability during Vim9 script import operations | known not affected: 33 | 2026-06-30T07:56:38+00:00 | Vulnerability · Source |
| CVE-2025-55157 | redhat_vex | vim: Vim heap use-after-free vulnerability when processing recursive tuple data types | known not affected: 33 | 2026-06-30T07:56:33+00:00 | Vulnerability · Source |