VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64041 | redhat_vex | kernel: ASoC: codecs: fs210x: fix possible buffer overflow | known affected: 76 known not affected: 198 | 2026-07-20T16:46:56+00:00 | Vulnerability · Source |
| CVE-2026-64077 | redhat_vex | kernel: netfilter: ebtables: move to two-stage removal scheme | known affected: 90 known not affected: 184 | 2026-07-20T16:46:47+00:00 | Vulnerability · Source |
| CVE-2026-64126 | redhat_vex | kernel: Bluetooth: MGMT: validate Add Extended Advertising Data length | known affected: 232 known not affected: 43 | 2026-07-20T16:46:44+00:00 | Vulnerability · Source |
| CVE-2026-64047 | redhat_vex | kernel: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring | known affected: 232 known not affected: 42 | 2026-07-20T16:44:42+00:00 | Vulnerability · Source |
| CVE-2026-34077 | redhat_vex | react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling | fixed: 1 known affected: 64 known not affected: 8 under investigation: 101 | 2026-07-20T16:43:12+00:00 | Vulnerability · Source |
| CVE-2026-7261 | redhat_vex | PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling | fixed: 1718 known affected: 54 known not affected: 47 | 2026-07-20T16:37:18+00:00 | Vulnerability · Source |
| CVE-2026-64168 | redhat_vex | kernel: spi: sprd: fix error pointer deref after DMA setup failure | known not affected: 274 | 2026-07-20T15:45:49+00:00 | Vulnerability · Source |
| CVE-2026-53402 | redhat_vex | kernel: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | known affected: 184 known not affected: 90 | 2026-07-20T15:44:48+00:00 | Vulnerability · Source |
| CVE-2026-53400 | redhat_vex | kernel: i2c: core: fix adapter registration race | known affected: 232 known not affected: 42 | 2026-07-20T15:43:52+00:00 | Vulnerability · Source |
| CVE-2026-16277 | redhat_vex | rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | known affected: 4 | 2026-07-20T15:42:05+00:00 | Vulnerability · Source |
| CVE-2026-64112 | redhat_vex | kernel: rbd: eliminate a race in lock_dwork draining on unmap | known affected: 260 known not affected: 14 | 2026-07-20T15:42:02+00:00 | Vulnerability · Source |
| CVE-2026-46338 | redhat_vex | pymdown-extensions: PyMdown Extensions: Information disclosure via crafted Markdown snippets | known affected: 3 known not affected: 1 | 2026-07-20T15:34:30+00:00 | Vulnerability · Source |
| CVE-2026-53394 | redhat_vex | kernel: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race | known affected: 198 known not affected: 77 | 2026-07-20T15:34:20+00:00 | Vulnerability · Source |
| CVE-2026-53395 | redhat_vex | kernel: nfsd: fix dead ACL conflict guard in nfsd4_create | known affected: 90 known not affected: 184 | 2026-07-20T15:34:19+00:00 | Vulnerability · Source |
| CVE-2026-53398 | redhat_vex | kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup | known affected: 184 known not affected: 76 under investigation: 14 | 2026-07-20T15:27:46+00:00 | Vulnerability · Source |
| CVE-2026-64042 | redhat_vex | kernel: vfio/pci: Check BAR resources before exporting a DMABUF | known affected: 76 known not affected: 198 | 2026-07-20T15:27:35+00:00 | Vulnerability · Source |
| CVE-2026-64037 | redhat_vex | kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled | known affected: 184 known not affected: 91 | 2026-07-20T15:27:33+00:00 | Vulnerability · Source |
| CVE-2026-64132 | redhat_vex | kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() | known affected: 76 known not affected: 185 under investigation: 14 | 2026-07-20T15:27:32+00:00 | Vulnerability · Source |
| CVE-2026-64051 | redhat_vex | kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap | known affected: 76 known not affected: 199 | 2026-07-20T15:27:30+00:00 | Vulnerability · Source |
| CVE-2026-64061 | redhat_vex | kernel: netfs: Fix early put of sink folio in netfs_read_gaps() | known affected: 76 known not affected: 199 | 2026-07-20T15:27:28+00:00 | Vulnerability · Source |
| CVE-2026-64137 | redhat_vex | kernel: smb: client: require net admin for CIFS SWN netlink | known not affected: 274 | 2026-07-20T15:25:59+00:00 | Vulnerability · Source |
| CVE-2026-64113 | redhat_vex | kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | known affected: 260 known not affected: 15 | 2026-07-20T15:22:22+00:00 | Vulnerability · Source |
| CVE-2026-63832 | microsoft_vex | wifi: mt76: add wcid publish check in mt76_sta_add | known affected: 1 | 2026-07-20T14:43:34+00:00 | Vulnerability · Source |
| CVE-2026-53375 | microsoft_vex | drm/amdgpu/vce: Prevent partial address patches | known affected: 1 | 2026-07-20T14:43:29+00:00 | Vulnerability · Source |
| CVE-2026-63826 | microsoft_vex | fbdev: fix use-after-free in store_modes() | known affected: 1 | 2026-07-20T14:43:06+00:00 | Vulnerability · Source |
| CVE-2026-63833 | microsoft_vex | ntfs3: reject direct userspace writes to reserved $LX* xattrs | known affected: 1 | 2026-07-20T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-53376 | microsoft_vex | drm/amdkfd: Add upper bound check for num_of_nodes | known affected: 1 | 2026-07-20T14:42:15+00:00 | Vulnerability · Source |
| CVE-2026-53403 | microsoft_vex | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | known affected: 1 | 2026-07-20T14:42:10+00:00 | Vulnerability · Source |
| CVE-2026-63793 | microsoft_vex | ntfs: serialize volume label accesses | known affected: 1 | 2026-07-20T14:42:04+00:00 | Vulnerability · Source |
| CVE-2026-53374 | microsoft_vex | drm/amdgpu: zero-initialize GART table on allocation | known affected: 1 | 2026-07-20T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-53387 | redhat_vex | kernel: iio: light: veml6075: add bounds check to veml6075_it_ms index | known not affected: 274 | 2026-07-20T13:56:40+00:00 | Vulnerability · Source |
| CVE-2026-64052 | redhat_vex | kernel: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() | known affected: 184 known not affected: 90 | 2026-07-20T13:47:13+00:00 | Vulnerability · Source |
| CVE-2023-36464 | redhat_vex | pypdf: Possible Infinite Loop when a comment isn't followed by a character | fixed: 10 | 2026-07-20T13:44:32+00:00 | Vulnerability · Source |
| CVE-2026-48934 | redhat_vex | nodejs: Node.js: Certification validation bypass in TLS host verification | fixed: 255 known affected: 14 | 2026-07-20T13:43:52+00:00 | Vulnerability · Source |
| CVE-2026-48928 | redhat_vex | Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency | fixed: 255 known affected: 14 | 2026-07-20T13:43:42+00:00 | Vulnerability · Source |
| CVE-2026-48619 | redhat_vex | nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames | fixed: 255 known affected: 14 | 2026-07-20T13:43:35+00:00 | Vulnerability · Source |
| CVE-2026-9678 | redhat_vex | undici: Undici: Information disclosure due to improper cache-control header parsing | fixed: 247 known affected: 37 known not affected: 8 | 2026-07-20T13:43:26+00:00 | Vulnerability · Source |
| CVE-2026-64084 | redhat_vex | kernel: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR | known not affected: 274 | 2026-07-20T13:42:57+00:00 | Vulnerability · Source |
| CVE-2025-62518 | redhat_vex | astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization | known affected: 5 known not affected: 4 | 2026-07-20T13:30:57+00:00 | Vulnerability · Source |
| CVE-2026-64148 | redhat_vex | kernel: pds_core: fix error handling in pdsc_devcmd_wait | known not affected: 275 | 2026-07-20T13:23:20+00:00 | Vulnerability · Source |
| CVE-2026-16254 | redhat_vex | claircore: claircore: Denial of service via out-of-bounds slice in claircore's apk installed-database parser | known affected: 11 | 2026-07-20T12:12:37+00:00 | Vulnerability · Source |
| CVE-2026-14461 | redhat_vex | mtr: mtr: Denial of Service via crafted DNS responses | known affected: 10 | 2026-07-20T11:37:31+00:00 | Vulnerability · Source |
| CVE-2026-48125 | redhat_vex | ua-parser-js: UAParser.js: Denial of Service via crafted Client Hints header | known affected: 18 known not affected: 2 | 2026-07-20T11:34:10+00:00 | Vulnerability · Source |
| CVE-2026-41849 | redhat_vex | spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL | known not affected: 2 | 2026-07-20T11:25:31+00:00 | Vulnerability · Source |
| CVE-2026-64049 | redhat_vex | kernel: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx | known not affected: 274 | 2026-07-20T10:35:55+00:00 | Vulnerability · Source |
| CVE-2025-55753 | redhat_vex | mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals | fixed: 463 known not affected: 113 | 2026-07-20T10:22:06+00:00 | Vulnerability · Source |
| CVE-2026-4137 | redhat_vex | mlflow/mlflow: mlflow/mlflow: Arbitrary code execution via insecure temporary directory permissions | known not affected: 17 | 2026-07-20T10:03:08+00:00 | Vulnerability · Source |
| CVE-2026-53994 | redhat_vex | proftpd: ProFTPD mod_sftp: Remote Denial of Service via heap-based buffer overflow | known not affected: 1 | 2026-07-20T09:25:48+00:00 | Vulnerability · Source |
| CVE-2026-47423 | redhat_vex | dompurify: DOMPurify: Cross-site scripting vulnerability allows information disclosure | fixed: 4 known affected: 2 known not affected: 48 | 2026-07-20T05:31:04+00:00 | Vulnerability · Source |
| CVE-2024-45775 | redhat_vex | grub2: commands/extcmd: Missing check for failed allocation | fixed: 40 known affected: 42 known not affected: 16 | 2026-07-20T05:25:49+00:00 | Vulnerability · Source |