VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224786 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33999 | redhat_vex | xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling | fixed: 1428 known affected: 9 | 2026-06-30T03:52:05+00:00 | Vulnerability · Source |
| CVE-2026-33984 | redhat_vex | FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data | fixed: 750 known affected: 12 | 2026-06-30T03:52:02+00:00 | Vulnerability · Source |
| CVE-2026-33986 | redhat_vex | FreeRDP: FreeRDP: Arbitrary code execution or denial of service via H.264 codec memory allocation vulnerability | known affected: 12 known not affected: 19 | 2026-06-30T03:52:00+00:00 | Vulnerability · Source |
| CVE-2026-33983 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages | fixed: 750 known affected: 12 | 2026-06-30T03:51:55+00:00 | Vulnerability · Source |
| CVE-2026-33943 | redhat_vex | happy-dom: Happy DOM: Remote Code Execution via JavaScript expression injection | known affected: 1 known not affected: 1 | 2026-06-30T03:51:53+00:00 | Vulnerability · Source |
| CVE-2026-4282 | redhat_vex | keycloak: Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw | fixed: 20 | 2026-06-30T03:51:48+00:00 | Vulnerability · Source |
| CVE-2026-4154 | redhat_vex | gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow | fixed: 587 known affected: 6 | 2026-06-30T03:51:46+00:00 | Vulnerability · Source |
| CVE-2026-4153 | redhat_vex | gimp: GIMP: Remote Code Execution via PSP file parsing | fixed: 587 known affected: 6 | 2026-06-30T03:51:44+00:00 | Vulnerability · Source |
| CVE-2026-4152 | redhat_vex | gimp: GIMP: Remote Code Execution via malicious JP2 file parsing | fixed: 168 known affected: 24 known not affected: 5 | 2026-06-30T03:51:41+00:00 | Vulnerability · Source |
| CVE-2026-4151 | redhat_vex | gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow | fixed: 48 known affected: 24 known not affected: 5 | 2026-06-30T03:51:40+00:00 | Vulnerability · Source |
| CVE-2026-4150 | redhat_vex | GIMP: GIMP: Arbitrary code execution via specially crafted PSD file | fixed: 587 known affected: 6 | 2026-06-30T03:51:37+00:00 | Vulnerability · Source |
| CVE-2026-4111 | redhat_vex | libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive | fixed: 485 known affected: 3 known not affected: 9 | 2026-06-30T03:51:35+00:00 | Vulnerability · Source |
| CVE-2026-4035 | redhat_vex | python-mlflow: MLflow: Sensitive credential exfiltration via environment variable resolution in AI Gateway secrets | known affected: 14 known not affected: 5 | 2026-06-30T03:51:32+00:00 | Vulnerability · Source |
| CVE-2026-3872 | redhat_vex | keycloak: Keycloak: Information disclosure due to redirect_uri validation bypass | fixed: 20 | 2026-06-30T03:51:31+00:00 | Vulnerability · Source |
| CVE-2026-3608 | redhat_vex | Kea: Kea: Denial of Service via maliciously crafted message | fixed: 168 | 2026-06-30T03:51:30+00:00 | Vulnerability · Source |
| CVE-2026-3605 | redhat_vex | Vault: Vault: Denial of Service due to unauthorized secret deletion via policy bypass | known affected: 6 known not affected: 7 | 2026-06-30T03:51:27+00:00 | Vulnerability · Source |
| CVE-2026-3593 | redhat_vex | bind: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation | fixed: 4 known not affected: 86 | 2026-06-30T03:51:24+00:00 | Vulnerability · Source |
| CVE-2026-3520 | redhat_vex | multer: Multer: Denial of Service via malformed requests | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T03:51:22+00:00 | Vulnerability · Source |
| CVE-2026-3497 | redhat_vex | openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables | fixed: 938 known not affected: 146 under investigation: 3 | 2026-06-30T03:51:18+00:00 | Vulnerability · Source |
| CVE-2026-53622 | redhat_vex | github.com/traefik/traefik: Traefik: mTLS enforcement bypass due to HTTP/3 TLS configuration flaw | known affected: 1 | 2026-06-30T03:51:12+00:00 | Vulnerability · Source |
| CVE-2026-53461 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds heap write in ICON decoder | known affected: 7 known not affected: 7 | 2026-06-30T03:51:11+00:00 | Vulnerability · Source |
| CVE-2026-53460 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via missing memory request check | fixed: 51 known affected: 7 | 2026-06-30T03:51:09+00:00 | Vulnerability · Source |
| CVE-2026-53322 | redhat_vex | kernel: vfio/pci: Clean up DMABUFs before disabling function | known affected: 76 known not affected: 198 | 2026-06-30T03:51:08+00:00 | Vulnerability · Source |
| CVE-2026-53277 | redhat_vex | kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation | known affected: 76 known not affected: 198 | 2026-06-30T03:51:01+00:00 | Vulnerability · Source |
| CVE-2026-53203 | redhat_vex | kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl | known affected: 184 known not affected: 90 | 2026-06-30T03:50:59+00:00 | Vulnerability · Source |
| CVE-2026-53175 | redhat_vex | kernel: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush | known not affected: 260 under investigation: 14 | 2026-06-30T03:50:47+00:00 | Vulnerability · Source |
| CVE-2026-53153 | redhat_vex | kernel: mm/list_lru: drain before clearing xarray entry on reparent | known affected: 76 known not affected: 198 | 2026-06-30T03:50:46+00:00 | Vulnerability · Source |
| CVE-2026-53145 | redhat_vex | kernel: drm/gem: Try to fix change_handle ioctl, attempt 4 | known affected: 260 under investigation: 14 | 2026-06-30T03:50:37+00:00 | Vulnerability · Source |
| CVE-2026-53091 | redhat_vex | kernel: net: pull headers in qdisc_pkt_len_segs_init() | known affected: 260 under investigation: 14 | 2026-06-30T03:50:32+00:00 | Vulnerability · Source |
| CVE-2026-53002 | redhat_vex | kernel: netfilter: conntrack: remove sprintf usage | known affected: 260 known not affected: 14 | 2026-06-30T03:50:09+00:00 | Vulnerability · Source |
| CVE-2026-53000 | redhat_vex | kernel: netfilter: nat: use kfree_rcu to release ops | known affected: 184 known not affected: 90 | 2026-06-30T03:50:07+00:00 | Vulnerability · Source |
| CVE-2026-52991 | redhat_vex | kernel: sched/psi: fix race between file release and pressure write | known affected: 232 known not affected: 42 | 2026-06-30T03:50:01+00:00 | Vulnerability · Source |
| CVE-2026-52989 | redhat_vex | kernel: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | known affected: 76 known not affected: 198 | 2026-06-30T03:49:59+00:00 | Vulnerability · Source |
| CVE-2026-52952 | redhat_vex | kernel: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset | known affected: 76 known not affected: 198 | 2026-06-30T03:49:44+00:00 | Vulnerability · Source |
| CVE-2026-52951 | redhat_vex | kernel: drm/xe/dma-buf: handle empty bo and UAF races | known affected: 184 known not affected: 90 | 2026-06-30T03:49:42+00:00 | Vulnerability · Source |
| CVE-2026-52860 | redhat_vex | vim: Vim: Arbitrary code execution through Python omni-completion. | known affected: 6 known not affected: 27 | 2026-06-30T03:49:31+00:00 | Vulnerability · Source |
| CVE-2026-52845 | redhat_vex | github.com/caddyserver/caddy: Caddy: Remote client can inject or override identity headers via header normalization | known not affected: 1 | 2026-06-30T03:49:29+00:00 | Vulnerability · Source |
| CVE-2026-49759 | redhat_vex | erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk | known not affected: 41 | 2026-06-30T03:48:48+00:00 | Vulnerability · Source |
| CVE-2026-49468 | redhat_vex | litellm: LiteLLM: Authentication Bypass via Host Header Injection | known affected: 6 | 2026-06-30T03:48:47+00:00 | Vulnerability · Source |
| CVE-2026-49218 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted DCM image with invalid dimensions | fixed: 51 known affected: 7 | 2026-06-30T03:48:43+00:00 | Vulnerability · Source |
| CVE-2026-48818 | redhat_vex | starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | fixed: 6 known not affected: 68 | 2026-06-30T03:48:35+00:00 | Vulnerability · Source |
| CVE-2026-48748 | redhat_vex | netty: Netty: Denial of Service due to memory exhaustion in HTTP/3 codec | under investigation: 1 | 2026-06-30T03:48:32+00:00 | Vulnerability · Source |
| CVE-2026-48491 | redhat_vex | Traefik: Traefik: Unauthorized access due to mutual TLS bypass | known affected: 1 | 2026-06-30T03:48:30+00:00 | Vulnerability · Source |
| CVE-2026-48020 | redhat_vex | github.com/traefik/traefik: Traefik: Authentication bypass in StripPrefix middleware allows unauthorized access to protected paths | known affected: 1 | 2026-06-30T03:48:18+00:00 | Vulnerability · Source |
| CVE-2026-47783 | redhat_vex | memcached: memcached: Username enumeration via timing side channel | fixed: 34 known affected: 8 | 2026-06-30T03:48:14+00:00 | Vulnerability · Source |
| CVE-2026-47220 | redhat_vex | envoy: Envoy: Denial of Service via missing host header in specific logging configurations | known not affected: 2 | 2026-06-30T03:48:07+00:00 | Vulnerability · Source |
| CVE-2026-47162 | redhat_vex | vim: Vim: Arbitrary Code Execution via crafted directory names | known affected: 33 | 2026-06-30T03:48:05+00:00 | Vulnerability · Source |
| CVE-2026-46523 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MSL image leading to heap-use-after-free | fixed: 51 known affected: 7 | 2026-06-30T03:47:51+00:00 | Vulnerability · Source |
| CVE-2026-46522 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MIFF file | fixed: 51 known affected: 7 | 2026-06-30T03:47:50+00:00 | Vulnerability · Source |
| CVE-2026-46520 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write when processing multiple images | fixed: 51 known affected: 7 | 2026-06-30T03:47:47+00:00 | Vulnerability · Source |