VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224786 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46195 | redhat_vex | kernel: smb: client: validate dacloffset before building DACL pointers | fixed: 453 known affected: 98 known not affected: 42 | 2026-06-30T03:47:14+00:00 | Vulnerability · Source |
| CVE-2026-46145 | redhat_vex | kernel: RDMA/mana: Validate rx_hash_key_len | fixed: 762 known affected: 22 known not affected: 42 | 2026-06-30T03:47:00+00:00 | Vulnerability · Source |
| CVE-2026-46125 | redhat_vex | kernel: wifi: mac80211: remove station if connection prep fails | fixed: 1880 known affected: 22 known not affected: 28 under investigation: 14 | 2026-06-30T03:46:58+00:00 | Vulnerability · Source |
| CVE-2026-45972 | redhat_vex | kernel: smb: client: fix potential UAF and double free in smb2_open_file() | known affected: 184 known not affected: 90 | 2026-06-30T03:46:40+00:00 | Vulnerability · Source |
| CVE-2026-45898 | redhat_vex | kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list | fixed: 1224 known affected: 22 known not affected: 76 under investigation: 14 | 2026-06-30T03:46:34+00:00 | Vulnerability · Source |
| CVE-2026-45696 | redhat_vex | OpenEXR: OpenEXR: Denial of Service and potential information disclosure via crafted EXR file | known affected: 3 known not affected: 9 | 2026-06-30T03:46:15+00:00 | Vulnerability · Source |
| CVE-2026-45664 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder | fixed: 51 known affected: 7 | 2026-06-30T03:46:11+00:00 | Vulnerability · Source |
| CVE-2026-45591 | redhat_vex | dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption | fixed: 1441 known not affected: 2 | 2026-06-30T03:46:10+00:00 | Vulnerability · Source |
| CVE-2026-45490 | redhat_vex | dotnet: .NET SDK workload elevate: arbitrary file creation/truncation via LogFile named pipe. | known not affected: 133 | 2026-06-30T03:46:07+00:00 | Vulnerability · Source |
| CVE-2026-45411 | redhat_vex | vm2: vm2: Arbitrary Code Execution due to sandbox escape vulnerability | known affected: 1 known not affected: 1 | 2026-06-30T03:46:05+00:00 | Vulnerability · Source |
| CVE-2026-45359 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Invalid Connected-Components Value | known affected: 7 known not affected: 7 | 2026-06-30T03:46:01+00:00 | Vulnerability · Source |
| CVE-2026-45186 | redhat_vex | libexpat: denial of service via crafted XML input | fixed: 86 known affected: 12 known not affected: 1 | 2026-06-30T03:45:56+00:00 | Vulnerability · Source |
| CVE-2026-45031 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder | fixed: 51 known not affected: 7 | 2026-06-30T03:45:45+00:00 | Vulnerability · Source |
| CVE-2026-44894 | redhat_vex | netty-codec-classes-quic: Netty: Denial of Service amplification via improper QUIC token validation | known affected: 1 | 2026-06-30T03:45:34+00:00 | Vulnerability · Source |
| CVE-2026-44673 | redhat_vex | libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob | fixed: 98 | 2026-06-30T03:45:20+00:00 | Vulnerability · Source |
| CVE-2026-44484 | redhat_vex | pytorch-lightning: PyTorch Lightning: Credential harvesting via introduced functionality | known not affected: 11 | 2026-06-30T03:44:44+00:00 | Vulnerability · Source |
| CVE-2026-5367 | redhat_vex | ovn: OVN: Information disclosure via crafted DHCPv6 packets | fixed: 333 known affected: 25 known not affected: 42 | 2026-06-30T03:44:04+00:00 | Vulnerability · Source |
| CVE-2026-5201 | redhat_vex | gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image | fixed: 812 known affected: 5 known not affected: 11 | 2026-06-30T03:44:02+00:00 | Vulnerability · Source |
| CVE-2026-5081 | redhat_vex | Apache::Session::Generate::ModUniqueId: Perl: mod_unique_id: Apache HTTP Server: Apache::Session::Generate::ModUniqueId: Session ID predictability allows unauthorized access | known not affected: 1 | 2026-06-30T03:43:55+00:00 | Vulnerability · Source |
| CVE-2026-4802 | redhat_vex | cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI | fixed: 296 known not affected: 7 | 2026-06-30T03:43:46+00:00 | Vulnerability · Source |
| CVE-2026-4775 | redhat_vex | libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing | fixed: 620 known affected: 4 | 2026-06-30T03:43:39+00:00 | Vulnerability · Source |
| CVE-2026-4636 | redhat_vex | keycloak: Keycloak: UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. | fixed: 20 | 2026-06-30T03:43:28+00:00 | Vulnerability · Source |
| CVE-2026-4660 | redhat_vex | go-getter: go-getter: Arbitrary file reads via maliciously crafted URL | fixed: 1 known affected: 2 known not affected: 1 | 2026-06-30T03:43:27+00:00 | Vulnerability · Source |
| CVE-2026-4634 | redhat_vex | keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters | fixed: 20 | 2026-06-30T03:43:22+00:00 | Vulnerability · Source |
| CVE-2026-4525 | redhat_vex | Vault: Vault: Information disclosure of authentication tokens via incorrect header handling | known affected: 6 known not affected: 7 | 2026-06-30T03:43:11+00:00 | Vulnerability · Source |
| CVE-2026-4519 | redhat_vex | python: Python: Command-line option injection in webbrowser.open() via crafted URLs | fixed: 1772 known not affected: 96 | 2026-06-30T03:43:08+00:00 | Vulnerability · Source |
| CVE-2026-4480 | redhat_vex | samba: Samba: Remote Code Execution in printing subsystem via unescaped job description | fixed: 4182 known affected: 29 known not affected: 1 | 2026-06-30T03:43:05+00:00 | Vulnerability · Source |
| CVE-2026-4424 | redhat_vex | libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing | fixed: 736 known affected: 3 known not affected: 1 | 2026-06-30T03:43:01+00:00 | Vulnerability · Source |
| CVE-2026-57281 | redhat_vex | jenkins-script-security-plugin: Jenkins Script Security Plugin: Arbitrary code execution outside sandbox | known affected: 4 | 2026-06-30T03:42:55+00:00 | Vulnerability · Source |
| CVE-2026-56379 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection | fixed: 51 known affected: 7 | 2026-06-30T03:42:54+00:00 | Vulnerability · Source |
| CVE-2026-56121 | redhat_vex | feast: Feast: Remote Code Execution via Unsafe Deserialization in gRPC Registry Server | known affected: 14 | 2026-06-30T03:42:40+00:00 | Vulnerability · Source |
| CVE-2026-54230 | redhat_vex | abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites | known affected: 59 | 2026-06-30T03:42:29+00:00 | Vulnerability · Source |
| CVE-2026-9795 | redhat_vex | keycloak: Keycloak: Privilege escalation via improper scope mapping enforcement | fixed: 20 | 2026-06-30T03:42:14+00:00 | Vulnerability · Source |
| CVE-2026-9099 | redhat_vex | keycloak: Group-Admin Escalation to Realm-Admin | fixed: 20 | 2026-06-30T03:42:06+00:00 | Vulnerability · Source |
| CVE-2026-9086 | redhat_vex | keycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive URI validation bypass | fixed: 20 | 2026-06-30T03:42:02+00:00 | Vulnerability · Source |
| CVE-2026-8390 | redhat_vex | firefox: Use-after-free in the JavaScript: WebAssembly component | known not affected: 12 | 2026-06-30T03:41:49+00:00 | Vulnerability · Source |
| CVE-2026-7598 | redhat_vex | libssh2: integer overflow via large username or password arguments | fixed: 8 known affected: 9 known not affected: 3 | 2026-06-30T03:41:41+00:00 | Vulnerability · Source |
| CVE-2026-7507 | redhat_vex | org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover | fixed: 20 | 2026-06-30T03:41:37+00:00 | Vulnerability · Source |
| CVE-2026-7504 | redhat_vex | org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak | fixed: 20 | 2026-06-30T03:41:34+00:00 | Vulnerability · Source |
| CVE-2026-7323 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 | fixed: 273 known affected: 8 | 2026-06-30T03:41:26+00:00 | Vulnerability · Source |
| CVE-2026-7307 | redhat_vex | keycloak: Keycloak: Denial of Service via specially crafted SAML input | fixed: 20 | 2026-06-30T03:41:23+00:00 | Vulnerability · Source |
| CVE-2026-7263 | redhat_vex | php: denial of service via DOMNode::C14N() | fixed: 201 known not affected: 253 | 2026-06-30T03:41:19+00:00 | Vulnerability · Source |
| CVE-2026-6951 | redhat_vex | simple-git: simple-git: Remote Code Execution due to incomplete fix bypass | known affected: 15 known not affected: 6 | 2026-06-30T03:41:10+00:00 | Vulnerability · Source |
| CVE-2026-6918 | redhat_vex | Eclipse Open9J: Denial of Service in JITServer via crafted TCP message | fixed: 51 | 2026-06-30T03:41:06+00:00 | Vulnerability · Source |
| CVE-2026-6893 | redhat_vex | dracut: dracut: Root code execution via DHCP options command injection | fixed: 142 known affected: 19 | 2026-06-30T03:41:03+00:00 | Vulnerability · Source |
| CVE-2026-6859 | redhat_vex | instructlab: InstructLab: Arbitrary code execution due to hardcoded `trust_remote_code=True` | known affected: 4 known not affected: 2 | 2026-06-30T03:41:00+00:00 | Vulnerability · Source |
| CVE-2026-6857 | redhat_vex | camel-infinispan: camel-infinispan: Remote Code Execution via Unsafe Deserialization | fixed: 2 known affected: 2 known not affected: 2 | 2026-06-30T03:40:57+00:00 | Vulnerability · Source |
| CVE-2026-6654 | redhat_vex | thin-vec: mozilla/thin-vec: Memory corruption vulnerability via Double-Free/Use-After-Free | known not affected: 71 | 2026-06-30T03:40:28+00:00 | Vulnerability · Source |
| CVE-2026-6388 | redhat_vex | argocd-image-updater: ArgoCD Image Updater: Cross-Namespace Privilege Escalation via insufficient namespace validation | known affected: 1 | 2026-06-30T03:40:07+00:00 | Vulnerability · Source |
| CVE-2026-6384 | redhat_vex | gimp: GIMP: Arbitrary code execution or denial of service via buffer overflow in GIF image processing | known affected: 24 known not affected: 8 | 2026-06-30T03:40:04+00:00 | Vulnerability · Source |