VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303496 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97496 | redhat_vex | kernel: drm/amdkfd: Fix OOB memory exposure in get_wave_state() | known affected: 233 known not affected: 43 | 2026-09-30T17:04:18+00:00 | Vulnerability · Source |
| CVE-2026-94029 | redhat_vex | org.apache.sshd/sshd-sftp: Apache MINA SSHD: Denial of Service via memory exhaustion in SFTP check-file extension | known affected: 4 | 2026-09-30T17:04:16+00:00 | Vulnerability · Source |
| CVE-2026-73627 | redhat_vex | jupyterlab: JupyterLab: Plugin manager lock-rule bypass allows unauthorized plugin control | fixed: 41 known affected: 5 known not affected: 405 | 2026-09-30T16:56:06+00:00 | Vulnerability · Source |
| CVE-2026-66038 | redhat_vex | FFmpeg: Information disclosure via malformed zlib video stream | fixed: 1 known affected: 7 known not affected: 234 | 2026-09-30T16:56:03+00:00 | Vulnerability · Source |
| CVE-2026-66037 | redhat_vex | FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer | fixed: 1 known affected: 7 known not affected: 234 | 2026-09-30T16:55:58+00:00 | Vulnerability · Source |
| CVE-2026-59884 | redhat_vex | python-pyasn1: pyasn1: Denial of Service via crafted BER input | fixed: 56 known affected: 105 known not affected: 520 | 2026-09-30T16:55:57+00:00 | Vulnerability · Source |
| CVE-2026-53550 | redhat_vex | js-yaml: js-yaml: Denial of Service via crafted YAML merge keys | fixed: 128 known affected: 122 known not affected: 784 | 2026-09-30T16:55:52+00:00 | Vulnerability · Source |
| CVE-2026-35536 | redhat_vex | tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments | fixed: 198 known affected: 8 known not affected: 609 under investigation: 1 | 2026-09-30T16:55:48+00:00 | Vulnerability · Source |
| CVE-2026-34445 | redhat_vex | ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata | fixed: 55 known affected: 1 known not affected: 389 | 2026-09-30T16:55:43+00:00 | Vulnerability · Source |
| CVE-2026-33245 | redhat_vex | react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects | fixed: 69 known affected: 155 known not affected: 1118 | 2026-09-30T16:55:41+00:00 | Vulnerability · Source |
| CVE-2026-31958 | redhat_vex | tornado-python: Tornado: Denial of Service via large multipart bodies | fixed: 266 known affected: 9 known not affected: 800 | 2026-09-30T16:55:37+00:00 | Vulnerability · Source |
| CVE-2026-28684 | redhat_vex | python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following | fixed: 60 known affected: 30 known not affected: 1208 | 2026-09-30T16:55:31+00:00 | Vulnerability · Source |
| CVE-2026-15154 | redhat_vex | guardrails-detectors: guardrails-detectors: Unauthenticated Regular-Expression Denial of Service (ReDoS) via detector_params.regex | fixed: 24 known not affected: 1057 | 2026-09-30T16:55:25+00:00 | Vulnerability · Source |
| CVE-2026-5422 | redhat_vex | jupyter-server: jupyter-server: Sensitive data exposure via path traversal vulnerability | fixed: 48 known not affected: 537 | 2026-09-30T16:55:23+00:00 | Vulnerability · Source |
| CVE-2026-1525 | redhat_vex | undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers | fixed: 398 known affected: 9 known not affected: 340 | 2026-09-30T16:55:22+00:00 | Vulnerability · Source |
| CVE-2026-102620 | redhat_vex | poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts | known affected: 60 | 2026-09-30T16:54:25+00:00 | Vulnerability · Source |
| CVE-2026-102010 | redhat_vex | gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if | fixed: 9 known affected: 271 known not affected: 22 | 2026-09-30T16:54:20+00:00 | Vulnerability · Source |
| CVE-2026-84375 | redhat_vex | js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing | fixed: 131 known affected: 292 known not affected: 1144 | 2026-09-30T16:54:13+00:00 | Vulnerability · Source |
| CVE-2026-80864 | redhat_vex | kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | known affected: 186 known not affected: 90 | 2026-09-30T16:54:10+00:00 | Vulnerability · Source |
| CVE-2026-80775 | redhat_vex | kernel: futex: Fix race on the initial mm->futex.phash.ref allocation | known affected: 185 known not affected: 91 | 2026-09-30T16:54:06+00:00 | Vulnerability · Source |
| CVE-2026-74446 | redhat_vex | kernel: drm/amdkfd: hold event_mutex while checkpointing CRIU events | known affected: 232 known not affected: 42 | 2026-09-30T16:54:04+00:00 | Vulnerability · Source |
| CVE-2026-46125 | redhat_vex | kernel: wifi: mac80211: remove station if connection prep fails | fixed: 1880 known affected: 22 known not affected: 42 | 2026-09-30T16:53:57+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 788 known affected: 242 known not affected: 5658 | 2026-09-30T16:53:51+00:00 | Vulnerability · Source |
| CVE-2026-41680 | redhat_vex | marked: Marked: Denial of Service via specific input sequence | fixed: 2 known affected: 12 known not affected: 49 | 2026-09-30T16:53:51+00:00 | Vulnerability · Source |
| CVE-2026-47597 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in Resource Server | known affected: 19 | 2026-09-30T16:47:45+00:00 | Vulnerability · Source |
| CVE-2026-47592 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer | known affected: 19 | 2026-09-30T16:47:42+00:00 | Vulnerability · Source |
| CVE-2026-47588 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free | known affected: 19 | 2026-09-30T16:47:37+00:00 | Vulnerability · Source |
| CVE-2026-47587 | redhat_vex | nvidia-driver: nvidia-driver: Privilege escalation via use-after-free | known affected: 19 | 2026-09-30T16:47:32+00:00 | Vulnerability · Source |
| CVE-2026-47560 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer | known affected: 19 | 2026-09-30T16:47:27+00:00 | Vulnerability · Source |
| CVE-2026-47556 | redhat_vex | nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow | known affected: 19 | 2026-09-30T16:47:23+00:00 | Vulnerability · Source |
| CVE-2026-47551 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-free | known affected: 19 | 2026-09-30T16:47:21+00:00 | Vulnerability · Source |
| CVE-2026-31766 | redhat_vex | kernel: drm/amdgpu: validate doorbell_offset in user queue creation | known not affected: 274 | 2026-09-30T16:47:04+00:00 | Vulnerability · Source |
| CVE-2026-23077 | redhat_vex | kernel: Linux kernel: Privilege escalation via Use-After-Free in mm/vma mremap() | known not affected: 274 | 2026-09-30T16:47:00+00:00 | Vulnerability · Source |
| CVE-2025-68810 | redhat_vex | kernel: Kernel: KVM use-after-free due to improper handling of guest memory file descriptor flags | known not affected: 274 | 2026-09-30T16:46:54+00:00 | Vulnerability · Source |
| CVE-2024-47659 | redhat_vex | kernel: smack: tcp: ipv4, fix incorrect labeling | known not affected: 198 | 2026-09-30T16:46:51+00:00 | Vulnerability · Source |
| CVE-2023-54157 | redhat_vex | kernel: Linux kernel binder: Privilege escalation due to Use-After-Free vulnerability | known not affected: 274 | 2026-09-30T16:46:49+00:00 | Vulnerability · Source |
| CVE-2026-100811 | redhat_vex | firefox: firefox: Sandbox escape via use-after-free in DOM component | known affected: 9 | 2026-09-30T16:46:44+00:00 | Vulnerability · Source |
| CVE-2026-100786 | redhat_vex | firefox: firefox: Sandbox escape via use-after-free in Graphics component | known affected: 9 | 2026-09-30T16:46:39+00:00 | Vulnerability · Source |
| CVE-2026-68409 | redhat_vex | kernel: wifi: mac80211: defer link RX stats percpu free to RCU | fixed: 309 known affected: 157 known not affected: 44 | 2026-09-30T16:46:34+00:00 | Vulnerability · Source |
| CVE-2026-57178 | redhat_vex | social-auth-core: social-auth-core: Authentication bypass via missing signature verification in VK App backend | known affected: 11 known not affected: 9 | 2026-09-30T16:46:29+00:00 | Vulnerability · Source |
| CVE-2026-53492 | redhat_vex | github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration. | fixed: 297 known affected: 86 known not affected: 690 | 2026-09-30T16:46:19+00:00 | Vulnerability · Source |
| CVE-2026-47589 | redhat_vex | nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free | known affected: 19 | 2026-09-30T16:46:12+00:00 | Vulnerability · Source |
| CVE-2026-47561 | redhat_vex | nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via unvalidated ioctl buffer size | known affected: 19 | 2026-09-30T16:46:02+00:00 | Vulnerability · Source |
| CVE-2026-47559 | redhat_vex | nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unauthorized cross-process memory access | known affected: 19 | 2026-09-30T16:45:53+00:00 | Vulnerability · Source |
| CVE-2026-47514 | redhat_vex | nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel stack disclosure | known affected: 19 | 2026-09-30T16:45:45+00:00 | Vulnerability · Source |
| CVE-2026-45878 | redhat_vex | kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | fixed: 612 known affected: 22 known not affected: 90 | 2026-09-30T16:45:38+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 1079 known affected: 215 known not affected: 6387 | 2026-09-30T16:45:28+00:00 | Vulnerability · Source |
| CVE-2025-66418 | redhat_vex | urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion | fixed: 1984 known affected: 381 known not affected: 2958 | 2026-09-30T16:45:26+00:00 | Vulnerability · Source |
| CVE-2024-46815 | redhat_vex | kernel: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] | known not affected: 198 | 2026-09-30T16:45:19+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 113 known not affected: 4133 | 2026-09-30T16:44:10+00:00 | Vulnerability · Source |