VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294018 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-53119 | redhat_vex | kernel: virtio/vsock: Fix accept_queue memory leak | fixed: 303 known affected: 98 known not affected: 14 | 2026-07-23T19:36:35+00:00 | Vulnerability · Source |
| CVE-2024-58014 | redhat_vex | kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() | fixed: 612 known affected: 98 known not affected: 14 | 2026-07-23T19:36:26+00:00 | Vulnerability · Source |
| CVE-2024-58072 | redhat_vex | kernel: wifi: rtlwifi: remove unused check_buddy_priv | fixed: 612 known affected: 98 known not affected: 14 | 2026-07-23T19:31:41+00:00 | Vulnerability · Source |
| CVE-2025-21671 | redhat_vex | kernel: zram: fix potential UAF of zram table | fixed: 612 known affected: 98 known not affected: 14 | 2026-07-23T19:31:34+00:00 | Vulnerability · Source |
| CVE-2024-56672 | redhat_vex | kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() | fixed: 303 known affected: 188 | 2026-07-23T19:31:28+00:00 | Vulnerability · Source |
| CVE-2025-21714 | redhat_vex | kernel: RDMA/mlx5: Fix implicit ODP use after free | fixed: 303 known affected: 174 known not affected: 14 | 2026-07-23T19:31:14+00:00 | Vulnerability · Source |
| CVE-2024-53170 | redhat_vex | kernel: block: fix uaf for flush rq while iterating tags | fixed: 303 known affected: 126 known not affected: 62 | 2026-07-23T19:31:09+00:00 | Vulnerability · Source |
| CVE-2026-47178 | redhat_vex | libheif: libheif: Arbitrary code execution via crafted HEIF file | known not affected: 1 | 2026-07-23T19:16:12+00:00 | Vulnerability · Source |
| CVE-2026-47254 | redhat_vex | libheif: libheif: Heap-buffer-overflow due to out-of-bounds write in sample timing table | known not affected: 1 | 2026-07-23T19:16:08+00:00 | Vulnerability · Source |
| CVE-2026-48029 | redhat_vex | libheif: libheif: Denial of Service via crafted image file processing | known not affected: 1 | 2026-07-23T19:10:53+00:00 | Vulnerability · Source |
| CVE-2018-19211 | redhat_vex | ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c | known affected: 21 | 2026-07-23T19:06:15+00:00 | Vulnerability · Source |
| CVE-2026-53093 | redhat_vex | kernel: wifi: brcmfmac: Fix error pointer dereference | known affected: 232 known not affected: 42 | 2026-07-23T18:41:21+00:00 | Vulnerability · Source |
| CVE-2026-53104 | redhat_vex | kernel: wifi: mt76: Fix memory leak destroying device | known affected: 184 known not affected: 90 | 2026-07-23T18:41:21+00:00 | Vulnerability · Source |
| CVE-2026-53080 | redhat_vex | kernel: net/sched: cls_fw: fix NULL dereference of "old" filters before change() | known affected: 246 known not affected: 28 | 2026-07-23T18:41:17+00:00 | Vulnerability · Source |
| CVE-2026-53105 | redhat_vex | kernel: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi | known affected: 184 known not affected: 90 | 2026-07-23T18:41:13+00:00 | Vulnerability · Source |
| CVE-2026-53083 | redhat_vex | kernel: bpf: Fix RCU stall in bpf_fd_array_map_clear() | known affected: 232 known not affected: 42 | 2026-07-23T18:41:11+00:00 | Vulnerability · Source |
| CVE-2026-53084 | redhat_vex | kernel: bpf: return VMA snapshot from task_vma iterator | known affected: 184 known not affected: 90 | 2026-07-23T18:41:08+00:00 | Vulnerability · Source |
| CVE-2026-53089 | redhat_vex | kernel: bpf: Fix use-after-free in offloaded map/prog info fill | known affected: 232 known not affected: 42 | 2026-07-23T18:41:04+00:00 | Vulnerability · Source |
| CVE-2026-43000 | redhat_vex | keystone: OpenStack Keystone: Privilege escalation via chained application credential impersonation and trust misuse | known affected: 13 | 2026-07-23T17:06:55+00:00 | Vulnerability · Source |
| CVE-2026-42999 | redhat_vex | openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via arbitrary policy attribute injection | known affected: 13 | 2026-07-23T17:06:51+00:00 | Vulnerability · Source |
| CVE-2024-50076 | redhat_vex | kernel: vt: prevent kernel-infoleak in con_font_get() | fixed: 305 known affected: 150 known not affected: 48 | 2026-07-23T16:24:44+00:00 | Vulnerability · Source |
| CVE-2026-50243 | microsoft_vex | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL | fixed: 1 known affected: 1 | 2026-07-23T14:45:12+00:00 | Vulnerability · Source |
| CVE-2026-41637 | microsoft_vex | Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries | fixed: 1 known affected: 1 | 2026-07-23T14:45:04+00:00 | Vulnerability · Source |
| CVE-2026-50252 | microsoft_vex | Possible cache poisoning attack by mapping source port population per thread | fixed: 1 known affected: 1 | 2026-07-23T14:44:57+00:00 | Vulnerability · Source |
| CVE-2026-50251 | microsoft_vex | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush | fixed: 1 known affected: 1 | 2026-07-23T14:44:49+00:00 | Vulnerability · Source |
| CVE-2026-55991 | microsoft_vex | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 | fixed: 1 known affected: 1 | 2026-07-23T14:44:41+00:00 | Vulnerability · Source |
| CVE-2026-55990 | microsoft_vex | Packet of death for a DNSCrypt misconfigured Unbound | fixed: 1 known affected: 1 | 2026-07-23T14:44:34+00:00 | Vulnerability · Source |
| CVE-2026-50046 | microsoft_vex | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out | fixed: 1 known affected: 1 | 2026-07-23T14:44:26+00:00 | Vulnerability · Source |
| CVE-2026-14586 | microsoft_vex | Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments | fixed: 1 known affected: 1 | 2026-07-23T14:44:19+00:00 | Vulnerability · Source |
| CVE-2026-42955 | microsoft_vex | Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records | fixed: 1 known affected: 1 | 2026-07-23T14:44:11+00:00 | Vulnerability · Source |
| CVE-2026-46582 | microsoft_vex | A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path | fixed: 1 known affected: 1 | 2026-07-23T14:44:03+00:00 | Vulnerability · Source |
| CVE-2026-54478 | microsoft_vex | DNS Cookie bypass when combined with proxy-protocol use | fixed: 1 known affected: 1 | 2026-07-23T14:43:56+00:00 | Vulnerability · Source |
| CVE-2026-56444 | microsoft_vex | Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration | fixed: 1 known affected: 1 | 2026-07-23T14:43:48+00:00 | Vulnerability · Source |
| CVE-2026-32665 | microsoft_vex | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass | fixed: 1 known affected: 1 | 2026-07-23T14:43:41+00:00 | Vulnerability · Source |
| CVE-2026-40691 | microsoft_vex | Packet of death for DNSCrypt over TCP | fixed: 1 known affected: 1 | 2026-07-23T14:43:33+00:00 | Vulnerability · Source |
| CVE-2026-55717 | microsoft_vex | 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash | fixed: 1 known affected: 1 | 2026-07-23T14:43:26+00:00 | Vulnerability · Source |
| CVE-2026-44621 | microsoft_vex | Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated | fixed: 1 known affected: 1 | 2026-07-23T14:43:18+00:00 | Vulnerability · Source |
| CVE-2026-56416 | microsoft_vex | Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name | fixed: 1 known affected: 1 | 2026-07-23T14:43:11+00:00 | Vulnerability · Source |
| CVE-2026-52863 | microsoft_vex | Memory corruption could lead to crash and denial of service | fixed: 1 known affected: 1 | 2026-07-23T14:43:03+00:00 | Vulnerability · Source |
| CVE-2026-55708 | microsoft_vex | Privacy/configuration issue when adding local data in views through 'unbound-control' | fixed: 1 known affected: 1 | 2026-07-23T14:42:55+00:00 | Vulnerability · Source |
| CVE-2026-44690 | microsoft_vex | Cross-zone wildcard cache poisoning via RRSIG.labels manipulation | fixed: 1 known affected: 1 | 2026-07-23T14:42:48+00:00 | Vulnerability · Source |
| CVE-2026-50248 | microsoft_vex | BOGUS configured primary hostname accepted for XFR in auth/rpz zones | fixed: 1 known affected: 1 | 2026-07-23T14:42:40+00:00 | Vulnerability · Source |
| CVE-2026-50045 | microsoft_vex | 'max-global-quota' reset by DNSSEC validation restarts | fixed: 1 known affected: 1 | 2026-07-23T14:42:33+00:00 | Vulnerability · Source |
| CVE-2026-44687 | microsoft_vex | Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN | fixed: 1 known affected: 1 | 2026-07-23T14:42:25+00:00 | Vulnerability · Source |
| CVE-2026-55973 | microsoft_vex | 'dns-error-reporting: yes' leads to stack buffer overflow | fixed: 1 known affected: 1 | 2026-07-23T14:42:18+00:00 | Vulnerability · Source |
| CVE-2026-6040 | redhat_vex | libreoffice: LibreOffice: Heap use-after-free allows arbitrary code execution via malformed ODF number format | known affected: 133 known not affected: 537 | 2026-07-23T08:51:43+00:00 | Vulnerability · Source |
| CVE-2026-52584 | redhat_vex | libjxl: libjxl: Information disclosure via Buffer Overflow in DecodeImageAPNG function | known affected: 8 | 2026-07-23T07:08:29+00:00 | Vulnerability · Source |
| CVE-2026-12770 | redhat_vex | litellm: BerriAI litellm: Improper authorization vulnerability in Admin Key Handler | known not affected: 6 | 2026-07-23T05:41:00+00:00 | Vulnerability · Source |
| CVE-2026-50269 | redhat_vex | aiohttp: AIOHTTP: CRLF injection in multipart headers | known affected: 109 known not affected: 1 | 2026-07-23T05:35:59+00:00 | Vulnerability · Source |
| CVE-2026-53540 | redhat_vex | python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory | known affected: 50 known not affected: 2 | 2026-07-23T05:35:56+00:00 | Vulnerability · Source |