VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303552 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-92939 | redhat_vex | vm2: vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine | known affected: 5 | 2026-09-30T10:40:56+00:00 | Vulnerability · Source |
| CVE-2026-92938 | redhat_vex | vm2: vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite | known affected: 5 | 2026-09-30T10:40:50+00:00 | Vulnerability · Source |
| CVE-2026-92937 | redhat_vex | vm2: vm2 3.11.6 Remote Code Execution via Promise call/apply | known affected: 5 | 2026-09-30T10:40:45+00:00 | Vulnerability · Source |
| CVE-2026-92935 | redhat_vex | vm2: vm2 NodeVM Remote Code Execution via Array-Shaped Require | known affected: 5 | 2026-09-30T10:40:42+00:00 | Vulnerability · Source |
| CVE-2026-92934 | redhat_vex | vm2: vm2 before 3.11.8 Sandbox Escape RCE via AggregateError | known affected: 5 | 2026-09-30T10:40:38+00:00 | Vulnerability · Source |
| CVE-2026-90176 | redhat_vex | kernel: ksmbd: Do not skip lock checks for single-byte ranges | known not affected: 276 | 2026-09-30T10:40:38+00:00 | Vulnerability · Source |
| CVE-2026-93136 | redhat_vex | kernel: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation | known affected: 76 known not affected: 200 | 2026-09-30T10:39:51+00:00 | Vulnerability · Source |
| CVE-2026-93072 | redhat_vex | kernel: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove | known affected: 76 known not affected: 200 | 2026-09-30T10:39:50+00:00 | Vulnerability · Source |
| CVE-2026-97993 | redhat_vex | kernel: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx | known affected: 234 known not affected: 42 | 2026-09-30T10:39:44+00:00 | Vulnerability · Source |
| CVE-2026-90119 | redhat_vex | kernel: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup | known affected: 248 known not affected: 28 | 2026-09-30T10:39:44+00:00 | Vulnerability · Source |
| CVE-2026-19028 | redhat_vex | hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter | fixed: 21 known affected: 1 | 2026-09-30T10:39:24+00:00 | Vulnerability · Source |
| CVE-2026-19027 | redhat_vex | hdf5: HDF5: Information disclosure and denial of service via crafted HDF5 file | fixed: 21 known affected: 1 | 2026-09-30T10:39:23+00:00 | Vulnerability · Source |
| CVE-2026-19026 | redhat_vex | hdf5: HDF5: Denial of service via crafted HDF5 file | fixed: 21 known affected: 1 | 2026-09-30T10:39:22+00:00 | Vulnerability · Source |
| CVE-2026-27904 | redhat_vex | minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions | fixed: 653 known affected: 74 known not affected: 3879 | 2026-09-30T10:30:38+00:00 | Vulnerability · Source |
| CVE-2026-97995 | redhat_vex | kernel: virtio_console: do not free control-out buffers on remove | known affected: 248 known not affected: 28 | 2026-09-30T10:28:48+00:00 | Vulnerability · Source |
| CVE-2026-97994 | redhat_vex | kernel: vhost/vdpa: reject VRING_NUM larger than device max | known affected: 234 known not affected: 42 | 2026-09-30T10:28:46+00:00 | Vulnerability · Source |
| CVE-2026-93981 | redhat_vex | hono: hono/jsx: Cross-Site Scripting via Unescaped Strings | fixed: 9 known affected: 8 | 2026-09-30T10:26:15+00:00 | Vulnerability · Source |
| CVE-2026-97688 | redhat_vex | urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding | fixed: 11 known not affected: 14 | 2026-09-30T10:23:18+00:00 | Vulnerability · Source |
| CVE-2026-75886 | redhat_vex | openshift/console: openshift/console: Unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding | fixed: 16 known not affected: 2596 | 2026-09-30T10:19:41+00:00 | Vulnerability · Source |
| CVE-2026-55204 | redhat_vex | haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions | fixed: 138 known affected: 16 known not affected: 2602 | 2026-09-30T10:19:15+00:00 | Vulnerability · Source |
| CVE-2026-42151 | redhat_vex | github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API | fixed: 510 known affected: 49 known not affected: 5650 | 2026-09-30T10:19:09+00:00 | Vulnerability · Source |
| CVE-2026-30922 | redhat_vex | pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion | fixed: 1724 known affected: 26 known not affected: 2541 | 2026-09-30T10:15:53+00:00 | Vulnerability · Source |
| CVE-2025-12816 | redhat_vex | node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications | fixed: 460 known affected: 37 known not affected: 2169 | 2026-09-30T10:12:26+00:00 | Vulnerability · Source |
| CVE-2026-97689 | redhat_vex | urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | fixed: 11 known not affected: 14 | 2026-09-30T10:12:20+00:00 | Vulnerability · Source |
| CVE-2026-97687 | redhat_vex | urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override | fixed: 11 known not affected: 14 | 2026-09-30T10:12:15+00:00 | Vulnerability · Source |
| CVE-2026-92948 | redhat_vex | vm2: vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test | known affected: 5 | 2026-09-30T10:12:09+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1897 known affected: 95 known not affected: 8869 | 2026-09-30T10:09:10+00:00 | Vulnerability · Source |
| CVE-2026-39820 | redhat_vex | net/mail: golang: Go net/mail: Denial of Service via crafted email inputs | fixed: 1439 known affected: 85 known not affected: 7831 | 2026-09-30T10:08:55+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-09-30T10:02:00+00:00 | Vulnerability · Source |
| CVE-2026-97992 | redhat_vex | kernel: vhost-vdpa: protect config_ctx from being freed under the config callback | known affected: 234 known not affected: 42 | 2026-09-30T09:49:43+00:00 | Vulnerability · Source |
| CVE-2026-97500 | redhat_vex | kernel: wifi: rtw89: phy: check length before parsing PHY status IE | known affected: 234 known not affected: 42 | 2026-09-30T09:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97499 | redhat_vex | kernel: coresight: perf: Retrieve path and source from event data | known not affected: 276 | 2026-09-30T09:49:22+00:00 | Vulnerability · Source |
| CVE-2026-93130 | redhat_vex | kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure | known affected: 185 known not affected: 91 | 2026-09-30T09:18:08+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known not affected: 1 | 2026-09-30T09:18:07+00:00 | Vulnerability · Source |
| CVE-2026-92524 | redhat_vex | kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() | known affected: 234 known not affected: 42 | 2026-09-30T09:18:06+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known not affected: 1 | 2026-09-30T09:14:48+00:00 | Vulnerability · Source |
| CVE-2026-97990 | redhat_vex | kernel: vdpa_sim_net: check TX pull result before RX copy | known affected: 185 known not affected: 91 | 2026-09-30T09:14:45+00:00 | Vulnerability · Source |
| CVE-2026-97498 | redhat_vex | kernel: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction | known affected: 14 known not affected: 262 | 2026-09-30T09:14:39+00:00 | Vulnerability · Source |
| CVE-2026-97497 | redhat_vex | kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id | known affected: 247 known not affected: 29 | 2026-09-30T09:14:35+00:00 | Vulnerability · Source |
| CVE-2026-90407 | redhat_vex | kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() | known affected: 234 known not affected: 42 | 2026-09-30T09:14:33+00:00 | Vulnerability · Source |
| CVE-2026-100666 | redhat_vex | io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec | known affected: 46 known not affected: 7 | 2026-09-30T09:14:29+00:00 | Vulnerability · Source |
| CVE-2026-97991 | redhat_vex | kernel: vdpa_sim_blk: reject out-of-range sector starts | known affected: 234 known not affected: 42 | 2026-09-30T09:14:27+00:00 | Vulnerability · Source |
| CVE-2026-79921 | redhat_vex | github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads | fixed: 44 known affected: 4 known not affected: 51 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 4571 known affected: 134 known not affected: 7220 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-97989 | redhat_vex | kernel: vduse: validate virtqueue alignment | known affected: 183 known not affected: 93 | 2026-09-30T08:53:33+00:00 | Vulnerability · Source |
| CVE-2026-92494 | redhat_vex | kernel: ext4: fix buffer_head leak in ext4_init_orphan_info | known affected: 185 known not affected: 91 | 2026-09-30T08:53:32+00:00 | Vulnerability · Source |
| CVE-2026-54875 | redhat_vex | openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V | known affected: 87 known not affected: 1 | 2026-09-30T08:51:44+00:00 | Vulnerability · Source |
| CVE-2026-95320 | redhat_vex | chromium-browser: chromium: Address bar spoofing via missing authorization in Navigation | known not affected: 1 | 2026-09-30T08:51:08+00:00 | Vulnerability · Source |
| CVE-2026-102633 | redhat_vex | expat: expat: Denial of Service via integer overflow in expat_realloc | known affected: 44 known not affected: 1 | 2026-09-30T08:40:22+00:00 | Vulnerability · Source |
| CVE-2026-97988 | redhat_vex | kernel: vhost: invalidate vring access on IOTLB transitions | known affected: 276 | 2026-09-30T08:40:21+00:00 | Vulnerability · Source |