VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303400 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-73078 | redhat_vex | vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries | fixed: 237 known affected: 6 known not affected: 204 | 2026-09-30T10:07:20+00:00 | Vulnerability · Source |
| CVE-2026-73077 | redhat_vex | vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling | fixed: 215 known not affected: 153 | 2026-09-30T10:07:18+00:00 | Vulnerability · Source |
| CVE-2026-73076 | redhat_vex | vim: Vim: Arbitrary command execution via crafted vimball | fixed: 237 known affected: 6 known not affected: 204 | 2026-09-30T10:07:15+00:00 | Vulnerability · Source |
| CVE-2026-73072 | redhat_vex | vim: Vim: Heap buffer overflow allows arbitrary code execution | fixed: 249 known affected: 6 known not affected: 192 | 2026-09-30T10:07:06+00:00 | Vulnerability · Source |
| CVE-2026-73066 | redhat_vex | tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata | fixed: 263 | 2026-09-30T10:07:00+00:00 | Vulnerability · Source |
| CVE-2026-69244 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses | fixed: 263 known affected: 60 known not affected: 1756 | 2026-09-30T10:06:54+00:00 | Vulnerability · Source |
| CVE-2026-60002 | redhat_vex | openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side | fixed: 353 known not affected: 56 | 2026-09-30T10:06:49+00:00 | Vulnerability · Source |
| CVE-2026-57456 | redhat_vex | vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion | fixed: 265 known not affected: 273 | 2026-09-30T10:06:45+00:00 | Vulnerability · Source |
| CVE-2026-54369 | redhat_vex | acl: Symlink traversal privilege escalation via libacl functions | fixed: 327 known affected: 7 known not affected: 152 | 2026-09-30T10:06:40+00:00 | Vulnerability · Source |
| CVE-2026-52858 | redhat_vex | vim: Vim: Arbitrary code execution via Python omni-completion | fixed: 273 known not affected: 273 | 2026-09-30T10:06:34+00:00 | Vulnerability · Source |
| CVE-2026-47167 | redhat_vex | vim: Vim: Arbitrary code execution via crafted step-definition patterns | fixed: 273 known not affected: 273 | 2026-09-30T10:06:29+00:00 | Vulnerability · Source |
| CVE-2026-47162 | redhat_vex | vim: Vim: Arbitrary Code Execution via crafted directory names | fixed: 273 known not affected: 273 | 2026-09-30T10:06:24+00:00 | Vulnerability · Source |
| CVE-2026-44432 | redhat_vex | urllib3: urllib3: Denial of Service due to excessive HTTP response decompression | fixed: 209 known affected: 47 known not affected: 1540 | 2026-09-30T10:06:19+00:00 | Vulnerability · Source |
| CVE-2026-11940 | redhat_vex | python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory | fixed: 727 known affected: 147 known not affected: 73 | 2026-09-30T10:06:16+00:00 | Vulnerability · Source |
| CVE-2026-11824 | redhat_vex | sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 | fixed: 1034 known affected: 109 known not affected: 63 | 2026-09-30T10:06:09+00:00 | Vulnerability · Source |
| CVE-2026-11822 | redhat_vex | sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data | fixed: 1037 known affected: 110 known not affected: 57 | 2026-09-30T10:06:09+00:00 | Vulnerability · Source |
| CVE-2026-97689 | redhat_vex | urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | fixed: 11 known not affected: 14 | 2026-09-30T10:05:52+00:00 | Vulnerability · Source |
| CVE-2026-97687 | redhat_vex | urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override | fixed: 11 known not affected: 14 | 2026-09-30T10:05:47+00:00 | Vulnerability · Source |
| CVE-2026-84292 | redhat_vex | fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization | fixed: 86 known affected: 82 known not affected: 1050 | 2026-09-30T10:04:12+00:00 | Vulnerability · Source |
| CVE-2024-24786 | redhat_vex | golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON | fixed: 2152 known affected: 112 known not affected: 11937 under investigation: 57 | 2026-09-30T10:02:03+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-09-30T10:02:00+00:00 | Vulnerability · Source |
| CVE-2022-30631 | redhat_vex | golang: compress/gzip: stack exhaustion in Reader.Read | fixed: 4253 known affected: 91 known not affected: 2159 | 2026-09-30T10:01:40+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 782 known affected: 244 known not affected: 5429 | 2026-09-30T10:00:33+00:00 | Vulnerability · Source |
| CVE-2026-97992 | redhat_vex | kernel: vhost-vdpa: protect config_ctx from being freed under the config callback | known affected: 234 known not affected: 42 | 2026-09-30T09:49:43+00:00 | Vulnerability · Source |
| CVE-2026-97500 | redhat_vex | kernel: wifi: rtw89: phy: check length before parsing PHY status IE | known affected: 234 known not affected: 42 | 2026-09-30T09:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97499 | redhat_vex | kernel: coresight: perf: Retrieve path and source from event data | known not affected: 276 | 2026-09-30T09:49:22+00:00 | Vulnerability · Source |
| CVE-2023-39325 | redhat_vex | golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) | fixed: 6046 known affected: 223 known not affected: 30360 | 2026-09-30T09:49:08+00:00 | Vulnerability · Source |
| CVE-2026-56852 | redhat_vex | golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input | fixed: 758 known affected: 97 known not affected: 7986 under investigation: 237 | 2026-09-30T09:48:54+00:00 | Vulnerability · Source |
| CVE-2026-46595 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation | fixed: 301 known affected: 60 known not affected: 2040 | 2026-09-30T09:48:47+00:00 | Vulnerability · Source |
| CVE-2026-84782 | redhat_vex | openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission | fixed: 35 known affected: 555 known not affected: 167 | 2026-09-30T09:48:25+00:00 | Vulnerability · Source |
| CVE-2026-56860 | redhat_vex | net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution | fixed: 5545 known affected: 288 known not affected: 2948 | 2026-09-30T09:48:14+00:00 | Vulnerability · Source |
| CVE-2026-56859 | redhat_vex | encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue | fixed: 5036 known affected: 268 known not affected: 3162 | 2026-09-30T09:47:24+00:00 | Vulnerability · Source |
| CVE-2026-56858 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via pathological input | fixed: 5214 known affected: 235 known not affected: 2706 | 2026-09-30T09:46:47+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 1079 known affected: 215 known not affected: 6387 | 2026-09-30T09:44:46+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1213 known affected: 101 known not affected: 10235 | 2026-09-30T09:43:27+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2952 known affected: 151 known not affected: 16580 | 2026-09-30T09:43:02+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 5486 known affected: 207 known not affected: 2555 | 2026-09-30T09:42:49+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 2046 known affected: 388 known not affected: 25141 under investigation: 496 | 2026-09-30T09:42:14+00:00 | Vulnerability · Source |
| CVE-2026-33186 | redhat_vex | google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation | fixed: 3331 known affected: 372 known not affected: 39048 | 2026-09-30T09:42:08+00:00 | Vulnerability · Source |
| CVE-2021-20329 | redhat_vex | mongo-go-driver: specific cstrings input may not be properly validated | fixed: 252 known affected: 69 known not affected: 3782 | 2026-09-30T09:28:38+00:00 | Vulnerability · Source |
| CVE-2026-93130 | redhat_vex | kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure | known affected: 185 known not affected: 91 | 2026-09-30T09:18:08+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known not affected: 1 | 2026-09-30T09:18:07+00:00 | Vulnerability · Source |
| CVE-2026-92524 | redhat_vex | kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() | known affected: 234 known not affected: 42 | 2026-09-30T09:18:06+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known not affected: 1 | 2026-09-30T09:14:48+00:00 | Vulnerability · Source |
| CVE-2026-97990 | redhat_vex | kernel: vdpa_sim_net: check TX pull result before RX copy | known affected: 185 known not affected: 91 | 2026-09-30T09:14:45+00:00 | Vulnerability · Source |
| CVE-2026-97498 | redhat_vex | kernel: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction | known affected: 14 known not affected: 262 | 2026-09-30T09:14:39+00:00 | Vulnerability · Source |
| CVE-2026-97497 | redhat_vex | kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id | known affected: 247 known not affected: 29 | 2026-09-30T09:14:35+00:00 | Vulnerability · Source |
| CVE-2026-90407 | redhat_vex | kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() | known affected: 234 known not affected: 42 | 2026-09-30T09:14:33+00:00 | Vulnerability · Source |
| CVE-2026-100666 | redhat_vex | io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec | known affected: 46 known not affected: 7 | 2026-09-30T09:14:29+00:00 | Vulnerability · Source |
| CVE-2026-97991 | redhat_vex | kernel: vdpa_sim_blk: reject out-of-range sector starts | known affected: 234 known not affected: 42 | 2026-09-30T09:14:27+00:00 | Vulnerability · Source |