VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288836 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-72016 | redhat_vex | kernel: cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() | known not affected: 274 | 2026-08-17T16:06:11+00:00 | Vulnerability · Source |
| CVE-2026-72015 | redhat_vex | kernel: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list | known affected: 184 known not affected: 90 | 2026-08-17T16:06:01+00:00 | Vulnerability · Source |
| CVE-2026-72014 | redhat_vex | kernel: drbd: reject data replies with an out-of-range payload size | known not affected: 274 | 2026-08-17T16:05:57+00:00 | Vulnerability · Source |
| CVE-2026-72013 | redhat_vex | kernel: riscv: Prevent NULL pointer dereference in machine_kexec_prepare() | known not affected: 274 | 2026-08-17T16:05:51+00:00 | Vulnerability · Source |
| CVE-2026-72012 | redhat_vex | kernel: tracing/osnoise: Call synchronize_rcu() when unregistering | known affected: 184 known not affected: 90 | 2026-08-17T16:05:47+00:00 | Vulnerability · Source |
| CVE-2026-45819 | redhat_vex | baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling | fixed: 6 known affected: 78 known not affected: 68 | 2026-08-17T16:05:45+00:00 | Vulnerability · Source |
| CVE-2026-45699 | redhat_vex | netatalk: Netatalk: Stack-based buffer overflow in copydir() allows arbitrary code execution | known not affected: 1 | 2026-08-17T16:05:42+00:00 | Vulnerability · Source |
| CVE-2026-41607 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-17T16:05:37+00:00 | Vulnerability · Source |
| CVE-2026-64530 | redhat_vex | kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle | fixed: 1355 known affected: 22 known not affected: 43 under investigation: 1 | 2026-08-17T16:05:35+00:00 | Vulnerability · Source |
| CVE-2026-43329 | redhat_vex | kernel: netfilter: flowtable: strictly check for maximum number of actions | fixed: 2044 known affected: 22 known not affected: 43 | 2026-08-17T16:05:31+00:00 | Vulnerability · Source |
| CVE-2026-43125 | redhat_vex | kernel: dlm: validate length in dlm_search_rsb_tree | fixed: 1454 known affected: 22 known not affected: 76 under investigation: 14 | 2026-08-17T16:05:29+00:00 | Vulnerability · Source |
| CVE-2026-43038 | redhat_vex | kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() | fixed: 2015 known affected: 22 known not affected: 42 | 2026-08-17T16:05:23+00:00 | Vulnerability · Source |
| CVE-2026-72008 | redhat_vex | kernel: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check | known not affected: 274 | 2026-08-17T16:05:16+00:00 | Vulnerability · Source |
| CVE-2026-72006 | redhat_vex | kernel: net/mlx5: free mlx5_st_idx_data on final dealloc | known affected: 122 known not affected: 152 | 2026-08-17T16:05:09+00:00 | Vulnerability · Source |
| CVE-2026-68479 | redhat_vex | kernel: Bluetooth: btrtl: validate firmware patch bounds | known affected: 232 known not affected: 42 | 2026-08-17T16:05:03+00:00 | Vulnerability · Source |
| CVE-2026-68478 | redhat_vex | kernel: memstick: ms_block: reject a card that reports too many blocks | known not affected: 274 | 2026-08-17T16:04:56+00:00 | Vulnerability · Source |
| CVE-2026-68477 | redhat_vex | kernel: ipvs: fix more places with wrong ipv6 transport offsets | known affected: 274 | 2026-08-17T16:04:51+00:00 | Vulnerability · Source |
| CVE-2026-68475 | redhat_vex | kernel: reset: sunxi: fix memory region leak on ioremap failure | known not affected: 274 | 2026-08-17T16:04:46+00:00 | Vulnerability · Source |
| CVE-2026-68474 | redhat_vex | kernel: powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() | known not affected: 274 | 2026-08-17T16:04:35+00:00 | Vulnerability · Source |
| CVE-2026-68465 | redhat_vex | kernel: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore | known affected: 76 known not affected: 198 | 2026-08-17T16:04:30+00:00 | Vulnerability · Source |
| CVE-2026-56858 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via pathological input | fixed: 8 known affected: 345 known not affected: 8 | 2026-08-17T16:04:02+00:00 | Vulnerability · Source |
| CVE-2026-50254 | redhat_vex | DCMTK: DCMTK: Denial of Service via crafted connection requests | known not affected: 1 | 2026-08-17T16:04:00+00:00 | Vulnerability · Source |
| CVE-2026-52868 | redhat_vex | DCMTK: DCMTK: Information disclosure via unauthorized worklist record access | known not affected: 1 | 2026-08-17T16:03:58+00:00 | Vulnerability · Source |
| CVE-2026-56852 | redhat_vex | golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input | fixed: 102 known affected: 132 known not affected: 21 under investigation: 57 | 2026-08-17T16:03:58+00:00 | Vulnerability · Source |
| CVE-2026-74503 | redhat_vex | kernel: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes | known affected: 184 known not affected: 90 | 2026-08-17T16:03:20+00:00 | Vulnerability · Source |
| CVE-2026-73643 | redhat_vex | js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections | known affected: 80 known not affected: 322 | 2026-08-17T16:03:15+00:00 | Vulnerability · Source |
| CVE-2026-73569 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via repeated DOCTYPE declarations | known affected: 11 known not affected: 13 | 2026-08-17T16:03:14+00:00 | Vulnerability · Source |
| CVE-2026-73088 | redhat_vex | browserslist: Browserslist: Prototype pollution leading to denial of service | fixed: 8 known affected: 129 known not affected: 103 | 2026-08-17T16:03:08+00:00 | Vulnerability · Source |
| CVE-2026-72183 | redhat_vex | kernel: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path | known affected: 108 known not affected: 166 | 2026-08-17T16:03:05+00:00 | Vulnerability · Source |
| CVE-2026-72003 | redhat_vex | kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame | known affected: 184 known not affected: 90 | 2026-08-17T16:03:01+00:00 | Vulnerability · Source |
| CVE-2026-71556 | redhat_vex | github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution | known affected: 5 known not affected: 1 | 2026-08-17T16:03:00+00:00 | Vulnerability · Source |
| CVE-2026-71235 | redhat_vex | github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution | known affected: 163 known not affected: 230 | 2026-08-17T16:02:52+00:00 | Vulnerability · Source |
| CVE-2026-69153 | redhat_vex | postcss: PostCSS: Information disclosure via crafted sourceMappingURL | fixed: 15 known affected: 78 known not affected: 69 | 2026-08-17T16:02:48+00:00 | Vulnerability · Source |
| CVE-2026-53016 | redhat_vex | kernel: crypto: ccp - copy IV using skcipher ivsize | fixed: 642 known affected: 54 known not affected: 42 | 2026-08-17T15:40:26+00:00 | Vulnerability · Source |
| CVE-2025-39902 | redhat_vex | kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err() | fixed: 30 known affected: 244 known not affected: 14 | 2026-08-17T15:40:22+00:00 | Vulnerability · Source |
| CVE-2026-64219 | redhat_vex | kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | fixed: 30 known affected: 244 under investigation: 14 | 2026-08-17T15:40:15+00:00 | Vulnerability · Source |
| CVE-2026-63884 | redhat_vex | kernel: drm/i915: Fix potential UAF in TTM object purge | fixed: 30 known affected: 216 known not affected: 28 under investigation: 14 | 2026-08-17T15:40:12+00:00 | Vulnerability · Source |
| CVE-2026-63879 | redhat_vex | kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages | fixed: 30 known affected: 244 under investigation: 14 | 2026-08-17T15:40:12+00:00 | Vulnerability · Source |
| CVE-2026-53374 | redhat_vex | kernel: drm/amdgpu: zero-initialize GART table on allocation | fixed: 30 known affected: 244 under investigation: 14 | 2026-08-17T15:40:10+00:00 | Vulnerability · Source |
| CVE-2026-53329 | redhat_vex | kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() | fixed: 30 known affected: 216 known not affected: 28 under investigation: 14 | 2026-08-17T15:40:08+00:00 | Vulnerability · Source |
| CVE-2026-53136 | redhat_vex | kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | fixed: 30 known affected: 244 under investigation: 14 | 2026-08-17T15:40:05+00:00 | Vulnerability · Source |
| CVE-2026-17523 | redhat_vex | kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges | fixed: 30 known affected: 32 known not affected: 226 | 2026-08-17T15:40:02+00:00 | Vulnerability · Source |
| CVE-2026-43206 | redhat_vex | kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() | fixed: 30 known affected: 258 | 2026-08-17T15:40:01+00:00 | Vulnerability · Source |
| CVE-2026-74442 | redhat_vex | kernel: drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure | known affected: 184 known not affected: 90 | 2026-08-17T15:28:56+00:00 | Vulnerability · Source |
| CVE-2026-72277 | redhat_vex | kernel: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory | known affected: 76 known not affected: 198 | 2026-08-17T15:28:51+00:00 | Vulnerability · Source |
| CVE-2026-72259 | redhat_vex | kernel: ASoC: mediatek: mt8192: Release reserved memory on cleanup | known affected: 76 known not affected: 198 | 2026-08-17T15:28:46+00:00 | Vulnerability · Source |
| CVE-2026-68473 | redhat_vex | kernel: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() | known not affected: 274 | 2026-08-17T15:28:37+00:00 | Vulnerability · Source |
| CVE-2026-68472 | redhat_vex | kernel: wifi: cfg80211: validate EHT MLE before MLD ID read | known affected: 198 known not affected: 76 | 2026-08-17T15:28:32+00:00 | Vulnerability · Source |
| CVE-2026-68471 | redhat_vex | kernel: wifi: ieee80211: validate MLE common info length | known not affected: 274 | 2026-08-17T15:28:26+00:00 | Vulnerability · Source |
| CVE-2026-68468 | redhat_vex | kernel: mtd: virt-concat: free duplicate generated name | known not affected: 274 | 2026-08-17T15:28:21+00:00 | Vulnerability · Source |