VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288836 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41401 | redhat_vex | libyang: libyang: Potential code execution via crafted YANG XML documents | known affected: 10 | 2026-08-17T16:13:14+00:00 | Vulnerability · Source |
| CVE-2026-39984 | redhat_vex | timestamp-authority/v2/pkg/verification: improper certificate validation in verifier | known affected: 9 | 2026-08-17T16:13:09+00:00 | Vulnerability · Source |
| CVE-2026-15218 | redhat_vex | models-as-a-service: Red Hat OpenShift AI: maas-api and maas-controller ServiceAccounts with excessive permissions lead to privilege escalation | known affected: 2 | 2026-08-17T16:13:05+00:00 | Vulnerability · Source |
| CVE-2026-12216 | redhat_vex | Duktape: svaarala duktape duk_api_bytecode.c memory corruption | known affected: 1 | 2026-08-17T16:13:01+00:00 | Vulnerability · Source |
| CVE-2026-11820 | redhat_vex | community.general: community.general nexmo — API credentials exposed in GET URL query string[SECURITY] community.general nexmo — API credentials exposed in GET URL query string | under investigation: 4 | 2026-08-17T16:12:58+00:00 | Vulnerability · Source |
| CVE-2026-11788 | redhat_vex | 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser | fixed: 403 known affected: 6 | 2026-08-17T16:12:55+00:00 | Vulnerability · Source |
| CVE-2026-11770 | redhat_vex | 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check | fixed: 403 known affected: 6 | 2026-08-17T16:12:53+00:00 | Vulnerability · Source |
| CVE-2025-22866 | redhat_vex | crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | fixed: 478 known affected: 398 known not affected: 641 | 2026-08-17T16:12:38+00:00 | Vulnerability · Source |
| CVE-2024-45336 | redhat_vex | golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect | fixed: 572 known affected: 520 known not affected: 563 | 2026-08-17T16:12:37+00:00 | Vulnerability · Source |
| CVE-2026-48994 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via heap buffer over-write in MAT decoder | known affected: 14 | 2026-08-17T16:12:13+00:00 | Vulnerability · Source |
| CVE-2026-48734 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MVG file leading to stack overflow | known affected: 14 | 2026-08-17T16:12:09+00:00 | Vulnerability · Source |
| CVE-2026-48733 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image in subimage-search | known affected: 14 | 2026-08-17T16:12:06+00:00 | Vulnerability · Source |
| CVE-2026-48724 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via heap buffer overwrite in Floyd-Steinberg dithering | known affected: 14 | 2026-08-17T16:12:03+00:00 | Vulnerability · Source |
| CVE-2026-47166 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Information Disclosure and Denial of Service via heap buffer over-read | known affected: 14 | 2026-08-17T16:11:57+00:00 | Vulnerability · Source |
| CVE-2026-46692 | redhat_vex | ImageMagick: ImageMagick: Heap buffer over-write via `magick -distribute-cache` service connection | fixed: 51 known affected: 7 | 2026-08-17T16:11:55+00:00 | Vulnerability · Source |
| CVE-2026-46559 | redhat_vex | ImageMagick: ImageMagick: Denial of service via heap buffer overwrite in JP2 processing | known affected: 14 | 2026-08-17T16:11:47+00:00 | Vulnerability · Source |
| CVE-2026-46521 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in LZMA MIFF encoder | known affected: 14 | 2026-08-17T16:11:45+00:00 | Vulnerability · Source |
| CVE-2026-46433 | redhat_vex | lldpd: lldpd: Denial of Service due to heap buffer over-read when processing VLAN-tagged Ethernet frames | known affected: 7 | 2026-08-17T16:11:41+00:00 | Vulnerability · Source |
| CVE-2026-42050 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to an overflow vulnerability in MIFF file processing | known affected: 14 | 2026-08-17T16:11:31+00:00 | Vulnerability · Source |
| CVE-2026-41605 | redhat_vex | Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-17T16:10:19+00:00 | Vulnerability · Source |
| CVE-2026-41604 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-17T16:10:12+00:00 | Vulnerability · Source |
| CVE-2026-41603 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-17T16:10:09+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 8 known affected: 667 known not affected: 79 | 2026-08-17T16:10:06+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1045 known affected: 104 known not affected: 2276 under investigation: 2 | 2026-08-17T16:10:01+00:00 | Vulnerability · Source |
| CVE-2026-35505 | redhat_vex | DCMTK: DCMTK: Denial of Service due to memory leak via crafted connection requests | known not affected: 1 | 2026-08-17T16:10:00+00:00 | Vulnerability · Source |
| CVE-2026-27136 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass | fixed: 569 known affected: 262 known not affected: 3418 | 2026-08-17T16:09:56+00:00 | Vulnerability · Source |
| CVE-2026-25681 | redhat_vex | golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting | fixed: 602 known affected: 324 known not affected: 2186 | 2026-08-17T16:09:50+00:00 | Vulnerability · Source |
| CVE-2026-18378 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy) | known affected: 1 | 2026-08-17T16:09:47+00:00 | Vulnerability · Source |
| CVE-2026-15722 | redhat_vex | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing | fixed: 403 known affected: 5 known not affected: 1 | 2026-08-17T16:09:38+00:00 | Vulnerability · Source |
| CVE-2026-64159 | redhat_vex | kernel: netfs: Fix zeropoint update where i_size > remote_i_size | known affected: 76 known not affected: 199 | 2026-08-17T16:08:26+00:00 | Vulnerability · Source |
| CVE-2026-64157 | redhat_vex | kernel: netfs: Fix partial invalidation of streaming-write folio | known affected: 76 known not affected: 198 | 2026-08-17T16:08:17+00:00 | Vulnerability · Source |
| CVE-2026-57966 | redhat_vex | spice-vdagent: Path traversal in file transfer via unsanitized filename | known affected: 9 | 2026-08-17T16:08:12+00:00 | Vulnerability · Source |
| CVE-2026-57965 | redhat_vex | spice-vdagent: Integer overflow in udscs_write() leading to heap buffer overflow | known affected: 9 | 2026-08-17T16:08:07+00:00 | Vulnerability · Source |
| CVE-2026-56406 | redhat_vex | libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer | known affected: 12 | 2026-08-17T16:07:58+00:00 | Vulnerability · Source |
| CVE-2026-56378 | redhat_vex | Magick.NET: ImageMagick: Denial of Service and Information Disclosure via crafted PCD file | known affected: 14 | 2026-08-17T16:07:56+00:00 | Vulnerability · Source |
| CVE-2026-56367 | redhat_vex | Magick.NET-Q16-AnyCPU: Magick.NET-Q16-HDRI-AnyCPU: Magick.NET-Q16-HDRI-OpenMP-arm64: Magick.NET-Q16-HDRI-OpenMP-x64: Magick.NET-Q16-HDRI-arm64: Magick.NET-Q16-HDRI-x64: Magick.NET-Q16-HDRI-x86: Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-OpenMP-x86: Magick.NET-Q16-arm64: Magick.NET-Q16-x64: Magick.NET-Q16-x86: Magick.NET-Q8-AnyCPU: Magick.NET-Q8-OpenMP-arm64: Magick.NET-Q8-OpenMP-x64: Magick.NET-Q8-arm64: Magick.NET-Q8-x64: Magick.NET-Q8-x86: ImageMagick: Information Disclosure via Crafted PSB File | known affected: 14 | 2026-08-17T16:07:50+00:00 | Vulnerability · Source |
| CVE-2026-53465 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted multi-frame image leading to heap buffer overwrite | known affected: 14 | 2026-08-17T16:07:40+00:00 | Vulnerability · Source |
| CVE-2026-53463 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via incorrect arguments in distort operation | known affected: 14 | 2026-08-17T16:07:36+00:00 | Vulnerability · Source |
| CVE-2026-74440 | redhat_vex | kernel: drm/xe: Wait on external BO kernel fences in exec IOCTL | known affected: 184 known not affected: 90 | 2026-08-17T16:07:17+00:00 | Vulnerability · Source |
| CVE-2026-73283 | redhat_vex | openssh: OpenSSH: Tunnel forwarding restriction bypass | under investigation: 41 | 2026-08-17T16:07:15+00:00 | Vulnerability · Source |
| CVE-2026-72486 | redhat_vex | kernel: mailbox: mtk-adsp: fix UAF during device teardown | known not affected: 274 | 2026-08-17T16:07:06+00:00 | Vulnerability · Source |
| CVE-2026-72483 | redhat_vex | kernel: usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() | known not affected: 274 | 2026-08-17T16:07:01+00:00 | Vulnerability · Source |
| CVE-2026-72472 | redhat_vex | kernel: nfs: use nfsi->rwsem to protect traversal of the file lock list | known affected: 274 | 2026-08-17T16:06:56+00:00 | Vulnerability · Source |
| CVE-2026-72411 | redhat_vex | kernel: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work | known not affected: 274 | 2026-08-17T16:06:50+00:00 | Vulnerability · Source |
| CVE-2026-72361 | redhat_vex | kernel: drm/xe/hw_engine: Fix double-free of managed BO in error path | known affected: 184 known not affected: 90 | 2026-08-17T16:06:45+00:00 | Vulnerability · Source |
| CVE-2026-72303 | redhat_vex | kernel: ASoC: SOF: ipc4-control: Validate notification payload size | known affected: 184 known not affected: 90 | 2026-08-17T16:06:41+00:00 | Vulnerability · Source |
| CVE-2026-72247 | redhat_vex | kernel: netfilter: nf_conncount: fix zone comparison in tuple dedup | known affected: 232 known not affected: 42 | 2026-08-17T16:06:35+00:00 | Vulnerability · Source |
| CVE-2026-72163 | redhat_vex | kernel: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits | known not affected: 274 | 2026-08-17T16:06:30+00:00 | Vulnerability · Source |
| CVE-2026-72018 | redhat_vex | kernel: dibs: loopback: validate offset and size in move_data() | known affected: 274 | 2026-08-17T16:06:25+00:00 | Vulnerability · Source |
| CVE-2026-72017 | redhat_vex | kernel: net: macb: drop in-flight Tx SKBs on close | known not affected: 274 | 2026-08-17T16:06:20+00:00 | Vulnerability · Source |