VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303348 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97974 | redhat_vex | kernel: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() | known affected: 200 known not affected: 76 | 2026-09-30T05:41:38+00:00 | Vulnerability · Source |
| CVE-2026-97973 | redhat_vex | kernel: net: macb: destroy the phylink instance on the probe error path | known not affected: 276 | 2026-09-30T05:41:33+00:00 | Vulnerability · Source |
| CVE-2026-102331 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in ANGLE | known not affected: 1 | 2026-09-30T05:41:28+00:00 | Vulnerability · Source |
| CVE-2026-56859 | redhat_vex | encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue | fixed: 5032 known affected: 269 known not affected: 3161 | 2026-09-30T05:41:27+00:00 | Vulnerability · Source |
| CVE-2026-81842 | redhat_vex | grafana: grafana: Authorization bypass via missing destination folder permission check | known affected: 33 | 2026-09-30T05:41:27+00:00 | Vulnerability · Source |
| CVE-2026-97972 | redhat_vex | kernel: net: macb: put the "mdio" child node reference on success | known not affected: 276 | 2026-09-30T05:34:54+00:00 | Vulnerability · Source |
| CVE-2026-97971 | redhat_vex | kernel: nstree: check listing permission before taking a namespace reference | known not affected: 276 | 2026-09-30T05:23:21+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 2046 known affected: 388 known not affected: 25141 under investigation: 496 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 1075 known affected: 216 known not affected: 6386 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-102252 | redhat_vex | github.com/google/osv-scalibr: osv-scalibr: Arbitrary file write via path traversal in VMDK extractor | known not affected: 1 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-97970 | redhat_vex | kernel: watchdog: msc313e: Avoid division by zero | known not affected: 276 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-97969 | redhat_vex | kernel: watchdog: msc313e: Fix clock leak and spurious timer in settimeout() | known not affected: 276 | 2026-09-30T05:11:25+00:00 | Vulnerability · Source |
| CVE-2026-97968 | redhat_vex | kernel: hwmon: (corsair-cpro) Create debugfs entries after hwmon registration | known not affected: 276 | 2026-09-30T05:11:23+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 890 known affected: 332 known not affected: 321 | 2026-09-30T05:05:45+00:00 | Vulnerability · Source |
| CVE-2026-56860 | redhat_vex | net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution | fixed: 5541 known affected: 289 known not affected: 2947 | 2026-09-30T05:04:37+00:00 | Vulnerability · Source |
| CVE-2026-56858 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via pathological input | fixed: 5210 known affected: 236 known not affected: 2705 | 2026-09-30T05:04:13+00:00 | Vulnerability · Source |
| CVE-2026-30922 | redhat_vex | pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion | fixed: 1724 known affected: 26 known not affected: 2541 | 2026-09-30T05:04:04+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 5482 known affected: 208 known not affected: 2554 | 2026-09-30T05:04:02+00:00 | Vulnerability · Source |
| CVE-2025-66471 | redhat_vex | urllib3: urllib3 Streaming API improperly handles highly compressed data | fixed: 1963 known affected: 127 known not affected: 3642 | 2026-09-30T05:03:48+00:00 | Vulnerability · Source |
| CVE-2025-66418 | redhat_vex | urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion | fixed: 1984 known affected: 381 known not affected: 2958 | 2026-09-30T05:03:48+00:00 | Vulnerability · Source |
| CVE-2026-97967 | redhat_vex | kernel: hwmon: (corsair-cpro) Remove debugfs entries when probe fails | known not affected: 276 | 2026-09-30T05:01:12+00:00 | Vulnerability · Source |
| CVE-2026-103111 | redhat_vex | pcre2: pcre2: Out-of-bounds write via crafted regular expression | known affected: 117 | 2026-09-30T05:01:12+00:00 | Vulnerability · Source |
| CVE-2026-97965 | redhat_vex | kernel: vxlan: initialize _md in vxlan_xmit_one() | known affected: 185 known not affected: 91 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |
| CVE-2026-102875 | redhat_vex | vlc: vlc: arbitrary code execution via path traversal in skin archives | known not affected: 1 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |
| CVE-2026-97966 | redhat_vex | kernel: octeontx2-pf: reset HTB scheduler topology before freeing queues | known affected: 183 known not affected: 93 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |
| CVE-2026-97964 | redhat_vex | kernel: ppp_synctty: ensure a writeable skb header | known affected: 185 known not affected: 91 | 2026-09-30T04:21:55+00:00 | Vulnerability · Source |
| CVE-2026-97948 | redhat_vex | kernel: powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver | known affected: 183 known not affected: 93 | 2026-09-30T04:21:33+00:00 | Vulnerability · Source |
| CVE-2026-97947 | redhat_vex | kernel: x86/amd_node: Fix potential NULL pointer dereference | known affected: 183 known not affected: 93 | 2026-09-30T04:21:32+00:00 | Vulnerability · Source |
| CVE-2026-97944 | redhat_vex | kernel: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() | known affected: 14 known not affected: 262 | 2026-09-30T04:21:28+00:00 | Vulnerability · Source |
| CVE-2026-97928 | redhat_vex | kernel: drm/amdgpu: skip the VMID 0 flush for VRAM | known affected: 197 known not affected: 79 | 2026-09-30T04:21:27+00:00 | Vulnerability · Source |
| CVE-2026-97473 | redhat_vex | kernel: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() | known affected: 183 known not affected: 93 | 2026-09-30T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-97950 | redhat_vex | kernel: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry | known affected: 276 | 2026-09-30T04:21:20+00:00 | Vulnerability · Source |
| CVE-2026-97949 | redhat_vex | kernel: configfs: unhash the dentry before dropping the item in rmdir | known affected: 276 | 2026-09-30T04:21:16+00:00 | Vulnerability · Source |
| CVE-2026-97946 | redhat_vex | kernel: x86/amd_node: Fix PCI device reference counting in amd_smn_init() | known affected: 183 known not affected: 93 | 2026-09-30T04:21:13+00:00 | Vulnerability · Source |
| CVE-2026-97945 | redhat_vex | kernel: x86/mm: Fix user-space data loss with MADV_FREE and THP | known affected: 197 known not affected: 79 | 2026-09-30T04:21:11+00:00 | Vulnerability · Source |
| CVE-2026-97486 | redhat_vex | kernel: hpfs: handle set_blocksize failures | known not affected: 276 | 2026-09-30T04:21:10+00:00 | Vulnerability · Source |
| CVE-2026-97929 | redhat_vex | kernel: ALSA: usbusx2y: validate URB actual_length in interrupt callback | known affected: 276 | 2026-09-30T04:21:07+00:00 | Vulnerability · Source |
| CVE-2026-97485 | redhat_vex | kernel: omfs: handle set_blocksize failures | known not affected: 276 | 2026-09-30T04:21:05+00:00 | Vulnerability · Source |
| CVE-2026-103046 | redhat_vex | WikiLambda: MediaWiki: WikiLambda: Stored cross-site scripting via unsafe string replacements in WikifunctionsFragmentRenderer | known not affected: 1 | 2026-09-30T04:21:03+00:00 | Vulnerability · Source |
| CVE-2026-97963 | redhat_vex | kernel: net: stmmac: initialize ptp_lock at probe time | known affected: 234 known not affected: 42 | 2026-09-30T04:21:01+00:00 | Vulnerability · Source |
| CVE-2026-97915 | redhat_vex | kernel: accel/ivpu: Limit firmware log name prints to field size | known affected: 76 known not affected: 200 | 2026-09-30T04:21:00+00:00 | Vulnerability · Source |
| CVE-2026-97914 | redhat_vex | kernel: accel: ethosu: Fix ethosu_job_open() return value | known not affected: 276 | 2026-09-30T04:20:55+00:00 | Vulnerability · Source |
| CVE-2026-97913 | redhat_vex | kernel: accel: ethosu: Ensure cmd stream ends with a stop op | known not affected: 276 | 2026-09-30T04:20:53+00:00 | Vulnerability · Source |
| CVE-2026-97912 | redhat_vex | kernel: accel: ethosu: Ensure SRAM size is 0 on mapping failure | known not affected: 276 | 2026-09-30T04:20:52+00:00 | Vulnerability · Source |
| CVE-2026-97472 | redhat_vex | kernel: ipv6: addrconf: fix temp address generation after prefix deprecation | known affected: 276 | 2026-09-30T04:20:50+00:00 | Vulnerability · Source |
| CVE-2026-27904 | redhat_vex | minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions | fixed: 653 known affected: 74 known not affected: 3879 | 2026-09-30T04:11:26+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 113 known not affected: 4133 | 2026-09-30T04:10:42+00:00 | Vulnerability · Source |
| CVE-2025-58183 | redhat_vex | golang: archive/tar: Unbounded allocation when parsing GNU sparse map | fixed: 8922 known affected: 132 known not affected: 8347 | 2026-09-30T04:10:02+00:00 | Vulnerability · Source |
| CVE-2026-33186 | redhat_vex | google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation | fixed: 3331 known affected: 372 known not affected: 39048 | 2026-09-30T04:09:42+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 4571 known affected: 134 known not affected: 7220 | 2026-09-30T04:09:30+00:00 | Vulnerability · Source |