VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304377 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-47592 | redhat_vex | kernel: net: stmmac: fix tc flower deletion for VLAN priority Rx steering | fixed: 385 known not affected: 42 | 2026-06-28T07:45:22+00:00 | Vulnerability · Source |
| CVE-2026-5733 | redhat_vex | firefox: Incorrect boundary conditions in the Graphics: WebGPU component | known not affected: 12 | 2026-06-28T07:45:22+00:00 | Vulnerability · Source |
| CVE-2026-5732 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component | fixed: 316 known affected: 8 | 2026-06-28T07:45:21+00:00 | Vulnerability · Source |
| CVE-2021-28971 | redhat_vex | kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c | fixed: 150 known not affected: 149 | 2026-06-28T07:45:18+00:00 | Vulnerability · Source |
| CVE-2021-28957 | redhat_vex | python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS | fixed: 871 known affected: 7 known not affected: 2 | 2026-06-28T07:45:17+00:00 | Vulnerability · Source |
| CVE-2021-28965 | redhat_vex | ruby: XML round-trip vulnerability in REXML | fixed: 1033 known affected: 49 known not affected: 43 | 2026-06-28T07:45:17+00:00 | Vulnerability · Source |
| CVE-2021-28675 | redhat_vex | python-pillow: Excessive memory allocation in PSD image reader | fixed: 21 known affected: 8 | 2026-06-28T07:45:17+00:00 | Vulnerability · Source |
| CVE-2026-5720 | redhat_vex | miniupnpd: miniupnpd: Denial of service or information disclosure due to integer underflow in SOAPAction header parsing. | known not affected: 1 | 2026-06-28T07:45:16+00:00 | Vulnerability · Source |
| CVE-2021-28952 | redhat_vex | kernel: buffer overflow in sound/soc/qcom/sdm845.c when an unexpected port ID number is encountered | known not affected: 197 | 2026-06-28T07:45:16+00:00 | Vulnerability · Source |
| CVE-2023-52740 | redhat_vex | kernel: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch | fixed: 280 known affected: 64 known not affected: 56 | 2026-06-28T07:45:15+00:00 | Vulnerability · Source |
| CVE-2021-28678 | redhat_vex | python-pillow: Excessive looping in BLP image reader | fixed: 21 known affected: 8 | 2026-06-28T07:45:13+00:00 | Vulnerability · Source |
| CVE-2021-28676 | redhat_vex | python-pillow: Infinite loop in FLI image reader | fixed: 21 known affected: 8 | 2026-06-28T07:45:13+00:00 | Vulnerability · Source |
| CVE-2021-47590 | redhat_vex | kernel: mptcp: fix deadlock in __mptcp_push_pending() | fixed: 150 known not affected: 150 | 2026-06-28T07:45:12+00:00 | Vulnerability · Source |
| CVE-2026-55738 | redhat_vex | microtar: microtar: Arbitrary code execution and denial of service via crafted TAR archive | known not affected: 1 | 2026-06-28T07:45:11+00:00 | Vulnerability · Source |
| CVE-2026-55392 | redhat_vex | nilfs-utils: NILFS utilities: Denial of Service via crafted NILFS2 images | known not affected: 1 | 2026-06-28T07:45:11+00:00 | Vulnerability · Source |
| CVE-2021-28375 | redhat_vex | kernel: fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages | known not affected: 92 | 2026-06-28T07:45:10+00:00 | Vulnerability · Source |
| CVE-2026-55388 | redhat_vex | piscina: piscina: Arbitrary code execution via prototype pollution of filename option | known not affected: 1 | 2026-06-28T07:45:10+00:00 | Vulnerability · Source |
| CVE-2023-52658 | redhat_vex | kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" | fixed: 429 known affected: 50 known not affected: 14 | 2026-06-28T07:45:08+00:00 | Vulnerability · Source |
| CVE-2023-52663 | redhat_vex | kernel: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:45:08+00:00 | Vulnerability · Source |
| CVE-2026-54904 | redhat_vex | concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Denial of Service due to infinite loop in AtomicReference#update | known not affected: 20 | 2026-06-28T07:45:07+00:00 | Vulnerability · Source |
| CVE-2023-52649 | redhat_vex | kernel: drm/vkms: Avoid reading beyond LUT array | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2023-52680 | redhat_vex | kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get() | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2023-52648 | redhat_vex | kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2021-27923 | redhat_vex | python-pillow: Excessive memory allocation in ICO image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T07:45:06+00:00 | Vulnerability · Source |
| CVE-2026-54530 | redhat_vex | pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF processing | known affected: 11 | 2026-06-28T07:45:05+00:00 | Vulnerability · Source |
| CVE-2023-52643 | redhat_vex | kernel: iio: core: fix memleak in iio_device_register_sysfs | fixed: 280 known affected: 50 known not affected: 70 | 2026-06-28T07:45:04+00:00 | Vulnerability · Source |
| CVE-2023-31147 | redhat_vex | c-ares: Insufficient randomness in generation of DNS query IDs | fixed: 245 known affected: 8 | 2026-06-28T07:45:03+00:00 | Vulnerability · Source |
| CVE-2026-54421 | redhat_vex | openstack ironic: OpenStack Ironic: Information disclosure via PATCH request on volume properties | known affected: 14 | 2026-06-28T07:45:01+00:00 | Vulnerability · Source |
| CVE-2024-26892 | redhat_vex | kernel: wifi: mt76: mt7921e: fix use-after-free in free_irq() | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T07:45:01+00:00 | Vulnerability · Source |
| CVE-2021-27922 | redhat_vex | python-pillow: Excessive memory allocation in ICNS image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T07:45:00+00:00 | Vulnerability · Source |
| CVE-2021-27928 | redhat_vex | mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user | fixed: 722 known not affected: 97 | 2026-06-28T07:45:00+00:00 | Vulnerability · Source |
| CVE-2023-52625 | redhat_vex | kernel: drm/amd/display: Refactor DMCUB enter/exit idle interface | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:44:58+00:00 | Vulnerability · Source |
| CVE-2021-27921 | redhat_vex | python-pillow: Excessive memory allocation in BLP image reader | fixed: 22 known affected: 8 known not affected: 9 | 2026-06-28T07:44:58+00:00 | Vulnerability · Source |
| CVE-2023-52632 | redhat_vex | kernel: drm/amdkfd: lock dependency warning with srcu | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:44:58+00:00 | Vulnerability · Source |
| CVE-2023-52624 | redhat_vex | kernel: drm/amd/display: Wake DMCUB before executing GPINT commands | fixed: 280 known affected: 112 known not affected: 8 | 2026-06-28T07:44:57+00:00 | Vulnerability · Source |
| CVE-2026-54278 | redhat_vex | aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body | known affected: 110 known not affected: 6 | 2026-06-28T07:44:57+00:00 | Vulnerability · Source |
| CVE-2026-54274 | redhat_vex | aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads | known affected: 110 known not affected: 6 | 2026-06-28T07:44:56+00:00 | Vulnerability · Source |
| CVE-2026-54275 | redhat_vex | aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse | known affected: 110 known not affected: 6 | 2026-06-28T07:44:56+00:00 | Vulnerability · Source |
| CVE-2021-27516 | redhat_vex | nodejs-urijs: mishandling certain uses of backslash may lead to confidentiality compromise | fixed: 1 known not affected: 11 | 2026-06-28T07:44:55+00:00 | Vulnerability · Source |
| CVE-2023-52585 | redhat_vex | kernel: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() | fixed: 280 known affected: 16 known not affected: 104 | 2026-06-28T07:44:52+00:00 | Vulnerability · Source |
| CVE-2023-52560 | redhat_vex | kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() | fixed: 430 known affected: 22 known not affected: 58 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2026-54056 | redhat_vex | kitty: Kitty: Arbitrary file overwrite via malicious drag-and-drop | known not affected: 1 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2023-52580 | redhat_vex | kernel: net/core: kernel crash in ETH_P_1588 flow dissector | fixed: 429 known affected: 64 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2021-27291 | redhat_vex | python-pygments: ReDoS in multiple lexers | fixed: 488 known affected: 11 | 2026-06-28T07:44:50+00:00 | Vulnerability · Source |
| CVE-2026-53473 | redhat_vex | migration-planner-ui-app: Stored XSS via javascript: URL in Agent Credential Link | known not affected: 1 | 2026-06-28T07:44:48+00:00 | Vulnerability · Source |
| CVE-2026-53702 | redhat_vex | gstreamer1-plugins-bad-free: GStreamer: Stack buffer overflow in H.265 buffering period SEI parser | known affected: 15 | 2026-06-28T07:44:48+00:00 | Vulnerability · Source |
| CVE-2021-26401 | redhat_vex | hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 | fixed: 391 known not affected: 111 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53471 | redhat_vex | migration-planner: Agent API Ignores JWT source_id Claim | known not affected: 1 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2021-47582 | redhat_vex | kernel: USB: core: Make do_proc_control() and do_proc_bulk() killable | fixed: 150 known affected: 150 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53476 | redhat_vex | assisted-migration-agent: VDDK Tarball Chained-Symlink Arbitrary File Write | known not affected: 1 | 2026-06-28T07:44:44+00:00 | Vulnerability · Source |