VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294035 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-63951 | redhat_vex | kernel: zram: fix use-after-free in zram_writeback_endio | known not affected: 274 | 2026-07-21T22:26:38+00:00 | Vulnerability · Source |
| CVE-2026-63953 | redhat_vex | kernel: mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page | known not affected: 274 | 2026-07-21T22:26:37+00:00 | Vulnerability · Source |
| CVE-2026-63950 | redhat_vex | kernel: mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one | known affected: 76 known not affected: 184 under investigation: 14 | 2026-07-21T22:21:45+00:00 | Vulnerability · Source |
| CVE-2026-40110 | redhat_vex | jupyter-server: Jupyter Server: Cross-Origin Resource Sharing (CORS) bypass via improper Origin header validation | fixed: 2 known affected: 10 known not affected: 25 | 2026-07-21T22:17:07+00:00 | Vulnerability · Source |
| CVE-2026-63943 | redhat_vex | kernel: Input: xpad - fix out-of-bounds access for Share button | known not affected: 274 | 2026-07-21T22:10:48+00:00 | Vulnerability · Source |
| CVE-2026-63939 | redhat_vex | kernel: KVM: SEV: Compute the correct max length of the in-GHCB scratch area | known affected: 184 known not affected: 91 | 2026-07-21T22:01:01+00:00 | Vulnerability · Source |
| CVE-2026-63920 | redhat_vex | kernel: ipv6: validate extension header length before copying to cmsg | known affected: 274 known not affected: 1 | 2026-07-21T21:37:50+00:00 | Vulnerability · Source |
| CVE-2026-54232 | redhat_vex | vllm: flashinfer-jit-cache: vLLM: Arbitrary code execution via dependency confusion during Docker build | known affected: 6 known not affected: 20 | 2026-07-21T21:37:46+00:00 | Vulnerability · Source |
| CVE-2026-63922 | redhat_vex | kernel: ipv6: exthdrs: refresh nh after handling HAO option | known affected: 260 known not affected: 1 under investigation: 14 | 2026-07-21T21:30:49+00:00 | Vulnerability · Source |
| CVE-2026-63918 | redhat_vex | kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname | known affected: 76 known not affected: 198 | 2026-07-21T21:23:08+00:00 | Vulnerability · Source |
| CVE-2026-63911 | redhat_vex | kernel: xfrm: iptfs: reset runtime state when cloning SAs | known not affected: 274 | 2026-07-21T21:13:46+00:00 | Vulnerability · Source |
| CVE-2026-63895 | redhat_vex | kernel: usb: gadget: f_fs: copy only received bytes on short ep0 read | known not affected: 274 | 2026-07-21T21:13:40+00:00 | Vulnerability · Source |
| CVE-2021-46937 | redhat_vex | kernel: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' | fixed: 166 known affected: 112 | 2026-07-21T21:13:33+00:00 | Vulnerability · Source |
| CVE-2026-58659 | redhat_vex | pytorch-lightning: PyTorch Lightning: Remote code execution via malicious checkpoint files | known affected: 13 | 2026-07-21T21:11:28+00:00 | Vulnerability · Source |
| CVE-2026-63906 | redhat_vex | kernel: usb: musb: omap2430: Fix use-after-free in omap2430_probe() | known not affected: 275 | 2026-07-21T21:09:35+00:00 | Vulnerability · Source |
| CVE-2026-63903 | redhat_vex | kernel: USB: serial: belkin_sa: validate interrupt status length | known affected: 274 | 2026-07-21T21:09:09+00:00 | Vulnerability · Source |
| CVE-2026-63900 | redhat_vex | kernel: USB: serial: keyspan: fix missing indat transfer sanity check | known affected: 274 | 2026-07-21T21:09:08+00:00 | Vulnerability · Source |
| CVE-2026-63902 | redhat_vex | kernel: USB: serial: cypress_m8: validate interrupt packet headers | known affected: 274 | 2026-07-21T21:09:07+00:00 | Vulnerability · Source |
| CVE-2026-56340 | redhat_vex | vllm: vLLM: Denial of service and potential arbitrary code execution via malformed multimodal embedding requests | known affected: 3 known not affected: 23 | 2026-07-21T21:07:32+00:00 | Vulnerability · Source |
| CVE-2026-43868 | redhat_vex | Apache Thrift: Apache Thrift: Denial of Service via excessive memory allocation | fixed: 3 known affected: 6 known not affected: 254 | 2026-07-21T21:07:00+00:00 | Vulnerability · Source |
| CVE-2026-5497 | redhat_vex | vllm: vLLM: Denial of Service via unbounded video frame processing | known affected: 23 known not affected: 5 | 2026-07-21T21:06:02+00:00 | Vulnerability · Source |
| CVE-2026-63898 | redhat_vex | kernel: USB: serial: mct_u232: fix memory corruption with small endpoint | known affected: 274 | 2026-07-21T21:02:47+00:00 | Vulnerability · Source |
| CVE-2026-63897 | redhat_vex | kernel: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check | known affected: 274 | 2026-07-21T21:02:42+00:00 | Vulnerability · Source |
| CVE-2026-63894 | redhat_vex | kernel: usb: gadget: f_fs: serialize DMABUF cancel against request completion | known not affected: 275 | 2026-07-21T21:02:41+00:00 | Vulnerability · Source |
| CVE-2026-4944 | redhat_vex | vllm: vllm-project/vllm: Remote Code Execution via malicious HuggingFace model repositories | known affected: 11 known not affected: 15 | 2026-07-21T21:00:53+00:00 | Vulnerability · Source |
| CVE-2026-23168 | redhat_vex | kernel: flex_proportions: make fprop_new_period() hardirq safe | fixed: 309 known not affected: 198 | 2026-07-21T20:59:25+00:00 | Vulnerability · Source |
| CVE-2025-71147 | redhat_vex | kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd | fixed: 309 known affected: 108 known not affected: 90 | 2026-07-21T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-55639 | redhat_vex | xrdp: improper input validation in MCS data processing leads to potential information leak | known not affected: 1 | 2026-07-21T20:54:29+00:00 | Vulnerability · Source |
| CVE-2026-55645 | redhat_vex | xrdp: out-of-bounds read in client control PDU processing | known not affected: 1 | 2026-07-21T20:54:29+00:00 | Vulnerability · Source |
| CVE-2026-63893 | redhat_vex | kernel: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() | known not affected: 274 | 2026-07-21T20:54:29+00:00 | Vulnerability · Source |
| CVE-2026-55238 | redhat_vex | xrdp: improper input validation in capability negotiation leads to denial of service | known not affected: 1 | 2026-07-21T20:54:27+00:00 | Vulnerability · Source |
| CVE-2026-44978 | redhat_vex | xrdp: heap out-of-bounds read in non-TLS FIPS receive paths | known not affected: 1 | 2026-07-21T20:54:27+00:00 | Vulnerability · Source |
| CVE-2026-63892 | redhat_vex | kernel: thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow | known not affected: 274 | 2026-07-21T20:54:23+00:00 | Vulnerability · Source |
| CVE-2026-42218 | redhat_vex | xrdp: timing side-channel allows username enumeration | known not affected: 1 | 2026-07-21T20:54:23+00:00 | Vulnerability · Source |
| CVE-2026-63899 | redhat_vex | kernel: USB: serial: mxuport: fix memory corruption with small endpoint | known affected: 232 known not affected: 43 | 2026-07-21T20:51:09+00:00 | Vulnerability · Source |
| CVE-2026-44178 | redhat_vex | xrdp: heap-based buffer overflow in virtual channel forwarding | known not affected: 1 | 2026-07-21T20:33:45+00:00 | Vulnerability · Source |
| CVE-2026-55626 | redhat_vex | xrdp: missing authentication when xrdp launches Xvnc in UNIX domain socket mode | known not affected: 1 | 2026-07-21T20:33:42+00:00 | Vulnerability · Source |
| CVE-2026-54538 | redhat_vex | xrdp: infinite loop denial-of-service vulnerability during RDP packet processing | known not affected: 1 | 2026-07-21T20:33:42+00:00 | Vulnerability · Source |
| CVE-2026-41521 | redhat_vex | xrdp: integer overflow leads to out-of-bounds read in vnc-any mode | known not affected: 1 | 2026-07-21T20:33:39+00:00 | Vulnerability · Source |
| CVE-2023-3640 | redhat_vex | Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space | known affected: 156 known not affected: 42 | 2026-07-21T20:05:53+00:00 | Vulnerability · Source |
| CVE-2026-12548 | redhat_vex | libsoup: Heap out-of-bounds read in libsoup due to integer truncation | known affected: 4 | 2026-07-21T20:05:52+00:00 | Vulnerability · Source |
| CVE-2026-63872 | redhat_vex | kernel: esp: fix page frag reference leak on skb_to_sgvec failure | known affected: 246 known not affected: 28 | 2026-07-21T19:36:32+00:00 | Vulnerability · Source |
| CVE-2024-0639 | redhat_vex | kernel: potential deadlock on &net->sctp.addr_wq_lock leading to DOS | fixed: 267 known affected: 22 known not affected: 90 | 2026-07-21T19:26:21+00:00 | Vulnerability · Source |
| CVE-2024-0443 | redhat_vex | kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. | fixed: 321 known affected: 124 known not affected: 42 | 2026-07-21T19:26:11+00:00 | Vulnerability · Source |
| CVE-2026-63865 | redhat_vex | kernel: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks | known not affected: 274 | 2026-07-21T19:20:46+00:00 | Vulnerability · Source |
| CVE-2026-12547 | redhat_vex | libsoup: Information disclosure in libsoup via SoupAuthManager proxy credential leak on proxy switch | known affected: 4 | 2026-07-21T19:14:45+00:00 | Vulnerability · Source |
| CVE-2023-54321 | redhat_vex | kernel: driver core: fix potential null-ptr-deref in device_add() | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-21T19:14:34+00:00 | Vulnerability · Source |
| CVE-2023-54320 | redhat_vex | kernel: platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() | fixed: 120 known affected: 124 known not affected: 118 | 2026-07-21T19:14:31+00:00 | Vulnerability · Source |
| CVE-2023-54309 | redhat_vex | kernel: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation | known affected: 108 known not affected: 166 | 2026-07-21T19:14:29+00:00 | Vulnerability · Source |
| CVE-2023-54294 | redhat_vex | kernel: md/raid10: fix memleak of md thread | fixed: 240 known affected: 138 known not affected: 104 | 2026-07-21T19:14:21+00:00 | Vulnerability · Source |