VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224803 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-67897 | redhat_vex | Sequoia: Sequoia: Application crash via crafted encrypted message | known affected: 16 | 2026-06-30T01:38:37+00:00 | Vulnerability · Source |
| CVE-2025-67499 | redhat_vex | CNI portmap plugin: github.com/containernetworking/plugins/plugins/meta/portmap: CNI portmap plugin: HostPort forwarding vulnerability allows traffic interception | known affected: 12 | 2026-06-30T01:38:34+00:00 | Vulnerability · Source |
| CVE-2025-66200 | redhat_vex | httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | fixed: 267 known affected: 16 known not affected: 77 | 2026-06-30T01:38:30+00:00 | Vulnerability · Source |
| CVE-2025-66035 | redhat_vex | angular: Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs | known affected: 194 known not affected: 51 | 2026-06-30T01:38:28+00:00 | Vulnerability · Source |
| CVE-2025-66030 | redhat_vex | node-forge: node-forge: Integer Overflow allows OID-based security bypass | known affected: 143 known not affected: 1 | 2026-06-30T01:38:24+00:00 | Vulnerability · Source |
| CVE-2025-65082 | redhat_vex | httpd: Apache HTTP Server: CGI environment variable override | fixed: 267 known affected: 16 known not affected: 77 | 2026-06-30T01:38:20+00:00 | Vulnerability · Source |
| CVE-2025-64524 | redhat_vex | cups-filters: cups-filters: Heap buffer overflow in rastertopclx filter may lead arbitrary code execution | known affected: 14 | 2026-06-30T01:38:15+00:00 | Vulnerability · Source |
| CVE-2025-64183 | redhat_vex | openexr: use after free in PyObject_StealAttrString | known not affected: 18 | 2026-06-30T01:38:06+00:00 | Vulnerability · Source |
| CVE-2025-64182 | redhat_vex | openexr: buffer overflow in PyOpenEXR_old's channels() and channel() | known not affected: 18 | 2026-06-30T01:38:04+00:00 | Vulnerability · Source |
| CVE-2025-6493 | redhat_vex | codemirror: CodeMirror Markdown Regex Complexity Vulnerability | known not affected: 28 | 2026-06-30T01:38:01+00:00 | Vulnerability · Source |
| CVE-2025-6491 | redhat_vex | php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix | fixed: 1115 known affected: 106 | 2026-06-30T01:38:01+00:00 | Vulnerability · Source |
| CVE-2025-6442 | redhat_vex | webrick: Ruby WEBrick Request Smuggling Vulnerability | known affected: 91 known not affected: 119 | 2026-06-30T01:37:58+00:00 | Vulnerability · Source |
| CVE-2025-6430 | redhat_vex | firefox: thunderbird: Content-Disposition header ignored when a file is included in an embed or object tag | fixed: 253 known affected: 8 | 2026-06-30T01:37:57+00:00 | Vulnerability · Source |
| CVE-2025-6429 | redhat_vex | firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com | fixed: 253 known affected: 8 | 2026-06-30T01:37:52+00:00 | Vulnerability · Source |
| CVE-2025-6428 | redhat_vex | firefox: Firefox for Android opened URLs specified in a link querystring parameter | known not affected: 12 | 2026-06-30T01:35:19+00:00 | Vulnerability · Source |
| CVE-2025-6427 | redhat_vex | firefox: connect-src Content Security Policy restriction could be bypassed | known not affected: 12 | 2026-06-30T01:35:16+00:00 | Vulnerability · Source |
| CVE-2025-6426 | redhat_vex | firefox: thunderbird: No warning when opening executable terminal files on macOS | known not affected: 23 | 2026-06-30T01:35:15+00:00 | Vulnerability · Source |
| CVE-2025-6425 | redhat_vex | firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID | fixed: 253 known affected: 8 | 2026-06-30T01:35:12+00:00 | Vulnerability · Source |
| CVE-2025-68331 | redhat_vex | kernel: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer | known affected: 184 known not affected: 90 | 2026-06-30T01:35:07+00:00 | Vulnerability · Source |
| CVE-2025-68254 | redhat_vex | kernel: staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | known not affected: 274 | 2026-06-30T01:35:04+00:00 | Vulnerability · Source |
| CVE-2025-68260 | redhat_vex | kernel: rust_binder: fix race condition on death_list | known not affected: 274 | 2026-06-30T01:34:55+00:00 | Vulnerability · Source |
| CVE-2025-68324 | redhat_vex | kernel: Linux kernel: Denial of Service via use-after-free in IMM SCSI host adapter | known not affected: 274 | 2026-06-30T01:34:53+00:00 | Vulnerability · Source |
| CVE-2025-68237 | redhat_vex | kernel: mtdchar: fix integer overflow in read/write ioctls | known affected: 90 known not affected: 184 | 2026-06-30T01:34:47+00:00 | Vulnerability · Source |
| CVE-2025-68255 | redhat_vex | kernel: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | known not affected: 274 | 2026-06-30T01:34:41+00:00 | Vulnerability · Source |
| CVE-2025-68242 | redhat_vex | kernel: NFS: Fix LTP test failures when timestamps are delegated | known affected: 198 known not affected: 76 | 2026-06-30T01:34:31+00:00 | Vulnerability · Source |
| CVE-2026-56788 | redhat_vex | rtklib: RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri | known not affected: 1 | 2026-06-30T01:34:29+00:00 | Vulnerability · Source |
| CVE-2025-68228 | redhat_vex | kernel: drm/plane: Fix create_in_format_blob() return value | known affected: 184 known not affected: 90 | 2026-06-30T01:34:29+00:00 | Vulnerability · Source |
| CVE-2025-68293 | redhat_vex | kernel: mm/huge_memory: fix NULL pointer deference when splitting folio | known affected: 76 known not affected: 198 | 2026-06-30T01:34:25+00:00 | Vulnerability · Source |
| CVE-2026-53276 | redhat_vex | kernel: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer | known affected: 76 known not affected: 198 | 2026-06-30T01:34:22+00:00 | Vulnerability · Source |
| CVE-2026-53253 | redhat_vex | kernel: Bluetooth: bnep: reject short frames before parsing | known affected: 274 | 2026-06-30T01:34:15+00:00 | Vulnerability · Source |
| CVE-2026-49839 | redhat_vex | jq: jq: Heap out-of-bounds write via oversized raw file processing | fixed: 3 known affected: 16 | 2026-06-30T01:34:09+00:00 | Vulnerability · Source |
| CVE-2025-68303 | redhat_vex | kernel: platform/x86: intel: punit_ipc: fix memory corruption | known not affected: 274 | 2026-06-30T01:33:58+00:00 | Vulnerability · Source |
| CVE-2025-68257 | redhat_vex | kernel: comedi: check device's attached status in compat ioctls | known not affected: 274 | 2026-06-30T01:33:52+00:00 | Vulnerability · Source |
| CVE-2025-68231 | redhat_vex | kernel: mm/mempool: fix poisoning order>0 pages with HIGHMEM | known affected: 246 known not affected: 28 | 2026-06-30T01:33:45+00:00 | Vulnerability · Source |
| CVE-2025-68282 | redhat_vex | kernel: Linux kernel: Use-after-free in USB gadget driver due to race condition during teardown | known affected: 184 known not affected: 90 | 2026-06-30T01:33:41+00:00 | Vulnerability · Source |
| CVE-2025-40011 | redhat_vex | kernel: drm/gma500: Fix null dereference in hdmi teardown | known affected: 274 | 2026-06-30T01:29:00+00:00 | Vulnerability · Source |
| CVE-2025-40009 | redhat_vex | kernel: fs/proc/task_mmu: check p->vec_buf for NULL | known affected: 90 known not affected: 184 | 2026-06-30T01:28:57+00:00 | Vulnerability · Source |
| CVE-2025-40007 | redhat_vex | kernel: netfs: fix reference leak | known affected: 76 known not affected: 198 | 2026-06-30T01:28:54+00:00 | Vulnerability · Source |
| CVE-2025-40005 | redhat_vex | kernel: spi: cadence-quadspi: Implement refcount to handle unbind during busy | known affected: 76 known not affected: 198 | 2026-06-30T01:28:52+00:00 | Vulnerability · Source |
| CVE-2025-40001 | redhat_vex | kernel: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | known affected: 42 known not affected: 232 | 2026-06-30T01:28:48+00:00 | Vulnerability · Source |
| CVE-2025-39999 | redhat_vex | kernel: blk-mq: fix blk_mq_tags double free while nr_requests grown | known affected: 76 known not affected: 198 | 2026-06-30T01:28:44+00:00 | Vulnerability · Source |
| CVE-2025-39996 | redhat_vex | kernel: Linux kernel (media: b2c2): Use-after-free vulnerability in flexcop_pci_remove leading to denial of service. | known affected: 76 known not affected: 198 | 2026-06-30T01:28:40+00:00 | Vulnerability · Source |
| CVE-2025-39992 | redhat_vex | kernel: mm: swap: check for stable address space before operating on the VMA | known affected: 198 known not affected: 76 | 2026-06-30T01:28:33+00:00 | Vulnerability · Source |
| CVE-2025-39989 | redhat_vex | kernel: x86/mce: use is_copy_from_user() to determine copy-from-user context | known affected: 184 known not affected: 90 | 2026-06-30T01:28:31+00:00 | Vulnerability · Source |
| CVE-2025-39984 | redhat_vex | kernel: net: tun: Update napi->skb after XDP process | fixed: 616 known not affected: 198 | 2026-06-30T01:28:28+00:00 | Vulnerability · Source |
| CVE-2025-39980 | redhat_vex | kernel: nexthop: Forbid FDB status change while nexthop is in a group | known affected: 184 known not affected: 90 | 2026-06-30T01:28:19+00:00 | Vulnerability · Source |
| CVE-2025-39955 | redhat_vex | kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() | fixed: 2416 known affected: 22 known not affected: 14 | 2026-06-30T01:25:34+00:00 | Vulnerability · Source |
| CVE-2025-39953 | redhat_vex | kernel: cgroup: split cgroup_destroy_wq into 3 workqueues | known affected: 232 known not affected: 42 | 2026-06-30T01:25:30+00:00 | Vulnerability · Source |
| CVE-2025-39947 | redhat_vex | kernel: net/mlx5e: Harden uplink netdev access against device unbind | known affected: 246 known not affected: 28 | 2026-06-30T01:25:25+00:00 | Vulnerability · Source |
| CVE-2025-39940 | redhat_vex | kernel: Linux kernel: Denial of Service via integer overflow in dm-stripe | known affected: 274 | 2026-06-30T01:25:20+00:00 | Vulnerability · Source |