VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224771 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3047 | redhat_vex | org.keycloak.broker.saml: Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login | fixed: 20 | 2026-06-30T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-3039 | redhat_vex | bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation | fixed: 466 known affected: 25 known not affected: 5 | 2026-06-30T04:00:39+00:00 | Vulnerability · Source |
| CVE-2026-3029 | redhat_vex | PyMuPDF: PyMuPDF: Arbitrary file write via path traversal vulnerability | known affected: 3 | 2026-06-30T04:00:35+00:00 | Vulnerability · Source |
| CVE-2026-3009 | redhat_vex | org.keycloak/keycloak-services: Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass) | fixed: 10 known affected: 1 known not affected: 2 | 2026-06-30T04:00:25+00:00 | Vulnerability · Source |
| CVE-2026-3006 | redhat_vex | winfsp: winfsp: Local privilege escalation via race condition and kernel heap overflow | known not affected: 1 | 2026-06-30T04:00:20+00:00 | Vulnerability · Source |
| CVE-2026-2818 | redhat_vex | org.springframework.data/spring-data-geode: Spring Data Geode: Path traversal vulnerability allows arbitrary file write via import snapshot functionality. | known not affected: 1 | 2026-06-30T04:00:09+00:00 | Vulnerability · Source |
| CVE-2026-2798 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | known not affected: 18 | 2026-06-30T04:00:03+00:00 | Vulnerability · Source |
| CVE-2026-2796 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component | known not affected: 23 | 2026-06-30T04:00:02+00:00 | Vulnerability · Source |
| CVE-2026-2795 | redhat_vex | firefox: Use-after-free in the JavaScript: GC component | known not affected: 12 | 2026-06-30T04:00:01+00:00 | Vulnerability · Source |
| CVE-2026-2794 | redhat_vex | firefox: Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android | known not affected: 12 | 2026-06-30T03:59:58+00:00 | Vulnerability · Source |
| CVE-2026-2792 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | fixed: 320 known affected: 6 | 2026-06-30T03:59:55+00:00 | Vulnerability · Source |
| CVE-2026-2778 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component | fixed: 320 known affected: 6 | 2026-06-30T03:59:53+00:00 | Vulnerability · Source |
| CVE-2026-2776 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software | fixed: 320 known affected: 6 | 2026-06-30T03:59:50+00:00 | Vulnerability · Source |
| CVE-2026-2775 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: HTML Parser component | fixed: 320 known affected: 8 | 2026-06-30T03:59:47+00:00 | Vulnerability · Source |
| CVE-2026-2772 | redhat_vex | firefox: thunderbird: Use-after-free in the Audio/Video: Playback component | fixed: 320 known affected: 8 | 2026-06-30T03:59:41+00:00 | Vulnerability · Source |
| CVE-2026-2769 | redhat_vex | firefox: thunderbird: Use-after-free in the Storage: IndexedDB component | fixed: 320 known affected: 8 | 2026-06-30T03:59:38+00:00 | Vulnerability · Source |
| CVE-2026-2768 | redhat_vex | firefox: thunderbird: Sandbox escape in the Storage: IndexedDB component | fixed: 320 known affected: 6 | 2026-06-30T03:59:35+00:00 | Vulnerability · Source |
| CVE-2026-2767 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | fixed: 320 known affected: 6 | 2026-06-30T03:59:34+00:00 | Vulnerability · Source |
| CVE-2026-2757 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component | fixed: 320 known affected: 6 | 2026-06-30T03:59:22+00:00 | Vulnerability · Source |
| CVE-2026-2603 | redhat_vex | keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider | fixed: 20 | 2026-06-30T03:59:17+00:00 | Vulnerability · Source |
| CVE-2026-44020 | redhat_vex | docling: Docling: Information disclosure via XML External Entity (XXE) vulnerability | known affected: 1 | 2026-06-30T03:59:16+00:00 | Vulnerability · Source |
| CVE-2026-44017 | redhat_vex | docling: Docling: Remote code execution via Zip Slip vulnerability in model download | known affected: 1 | 2026-06-30T03:59:16+00:00 | Vulnerability · Source |
| CVE-2026-44009 | redhat_vex | vm2: vm2: Arbitrary Code Execution via Sandbox Escape | known affected: 1 known not affected: 1 | 2026-06-30T03:59:12+00:00 | Vulnerability · Source |
| CVE-2026-44016 | redhat_vex | docling: Docling: Remote code execution via malicious HTML in Playwright-based rendering | known not affected: 1 | 2026-06-30T03:59:11+00:00 | Vulnerability · Source |
| CVE-2026-44008 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox escape | known affected: 1 known not affected: 1 | 2026-06-30T03:59:07+00:00 | Vulnerability · Source |
| CVE-2026-44007 | redhat_vex | vm2: vm2: Arbitrary code execution via nested NodeVM bypass | known affected: 1 known not affected: 1 | 2026-06-30T03:59:04+00:00 | Vulnerability · Source |
| CVE-2026-44006 | redhat_vex | vm2: vm2: Sandbox escape via arbitrary prototype access leading to arbitrary code execution | known affected: 1 known not affected: 1 | 2026-06-30T03:59:03+00:00 | Vulnerability · Source |
| CVE-2026-44004 | redhat_vex | vm2: vm2: Denial of Service via host memory exhaustion | known affected: 1 known not affected: 1 | 2026-06-30T03:58:59+00:00 | Vulnerability · Source |
| CVE-2026-44005 | redhat_vex | vm2: vm2: Sandbox Escape leading to Arbitrary Code Execution | known affected: 1 known not affected: 1 | 2026-06-30T03:58:59+00:00 | Vulnerability · Source |
| CVE-2026-43999 | redhat_vex | vm2: vm2: Remote code execution via NodeVM builtin allowlist bypass | known affected: 1 known not affected: 1 | 2026-06-30T03:58:57+00:00 | Vulnerability · Source |
| CVE-2026-44001 | redhat_vex | vm2: vm2: Sandbox escape leads to Denial of Service | known affected: 1 known not affected: 1 | 2026-06-30T03:58:55+00:00 | Vulnerability · Source |
| CVE-2026-43998 | redhat_vex | vm2: vm2: Remote code execution due to path restriction bypass via symlinks | known affected: 1 known not affected: 1 | 2026-06-30T03:58:51+00:00 | Vulnerability · Source |
| CVE-2026-43997 | redhat_vex | vm2: vm2: Arbitrary code execution via sandbox escape | known affected: 1 known not affected: 1 | 2026-06-30T03:58:49+00:00 | Vulnerability · Source |
| CVE-2026-43964 | redhat_vex | postfix: buffer over-read via malformed enhanced status code | fixed: 251 known affected: 6 | 2026-06-30T03:58:46+00:00 | Vulnerability · Source |
| CVE-2026-43824 | redhat_vex | github.com/argoproj/argo-cd/: Argo CD: Information disclosure via ServerSideDiff allows reading Kubernetes Secret data | known affected: 1 known not affected: 10 | 2026-06-30T03:58:45+00:00 | Vulnerability · Source |
| CVE-2026-43658 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T03:58:42+00:00 | Vulnerability · Source |
| CVE-2026-43618 | redhat_vex | rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding | fixed: 46 known affected: 5 known not affected: 2 | 2026-06-30T03:58:40+00:00 | Vulnerability · Source |
| CVE-2026-43494 | redhat_vex | kernel: net/rds: reset op_nents when zerocopy page pin fails | known not affected: 274 | 2026-06-30T03:58:33+00:00 | Vulnerability · Source |
| CVE-2026-43178 | redhat_vex | kernel: procfs: fix possible double mmput() in do_procmap_query() | known not affected: 260 under investigation: 14 | 2026-06-30T03:58:28+00:00 | Vulnerability · Source |
| CVE-2026-43038 | redhat_vex | kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() | fixed: 1980 known affected: 22 known not affected: 42 | 2026-06-30T03:58:16+00:00 | Vulnerability · Source |
| CVE-2026-43003 | redhat_vex | ironic-python-agent: OpenStack ironic-python-agent: Arbitrary code execution via malicious image | known affected: 2 | 2026-06-30T03:58:15+00:00 | Vulnerability · Source |
| CVE-2026-42965 | redhat_vex | openshift/router: openshift/router: cloud metadata SSRF via FQDN-typed EndpointSlice bypasses destination validation | known affected: 2 | 2026-06-30T03:58:03+00:00 | Vulnerability · Source |
| CVE-2026-42959 | redhat_vex | unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages | fixed: 183 known affected: 11 | 2026-06-30T03:58:02+00:00 | Vulnerability · Source |
| CVE-2026-42944 | redhat_vex | unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options | fixed: 183 known affected: 11 | 2026-06-30T03:57:58+00:00 | Vulnerability · Source |
| CVE-2026-42899 | redhat_vex | dotnet: .NET: infinite loop allows an attacker to cause a denial of service | fixed: 1437 known not affected: 6 | 2026-06-30T03:57:55+00:00 | Vulnerability · Source |
| CVE-2026-42573 | redhat_vex | svelte: Svelte: Cross-Site Scripting via DOM Clobbering | known not affected: 1 | 2026-06-30T03:57:44+00:00 | Vulnerability · Source |
| CVE-2026-42296 | redhat_vex | Argo Workflows: github.com/argoproj/argo-workflows: Argo Workflows: Privilege escalation via security control bypass | known affected: 7 | 2026-06-30T03:57:30+00:00 | Vulnerability · Source |
| CVE-2026-42294 | redhat_vex | Argo Workflows: github.com/argoproj/argo-workflows: Argo Workflows: Denial of Service via large request body to Webhook Interceptor | known affected: 2 | 2026-06-30T03:57:26+00:00 | Vulnerability · Source |
| CVE-2026-42271 | redhat_vex | litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints | fixed: 8 known not affected: 19 | 2026-06-30T03:57:25+00:00 | Vulnerability · Source |
| CVE-2026-42203 | redhat_vex | litellm: LiteLLM: Arbitrary code execution via unsandboxed prompt templates | known affected: 1 known not affected: 2 | 2026-06-30T03:57:10+00:00 | Vulnerability · Source |