VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303427 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-73078 | redhat_vex | vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries | fixed: 237 known affected: 6 known not affected: 204 | 2026-09-30T10:07:20+00:00 | Vulnerability · Source |
| CVE-2026-73077 | redhat_vex | vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling | fixed: 215 known not affected: 153 | 2026-09-30T10:07:18+00:00 | Vulnerability · Source |
| CVE-2026-73076 | redhat_vex | vim: Vim: Arbitrary command execution via crafted vimball | fixed: 237 known affected: 6 known not affected: 204 | 2026-09-30T10:07:15+00:00 | Vulnerability · Source |
| CVE-2026-73072 | redhat_vex | vim: Vim: Heap buffer overflow allows arbitrary code execution | fixed: 249 known affected: 6 known not affected: 192 | 2026-09-30T10:07:06+00:00 | Vulnerability · Source |
| CVE-2026-73066 | redhat_vex | tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata | fixed: 263 | 2026-09-30T10:07:00+00:00 | Vulnerability · Source |
| CVE-2026-69244 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses | fixed: 263 known affected: 60 known not affected: 1756 | 2026-09-30T10:06:54+00:00 | Vulnerability · Source |
| CVE-2026-60002 | redhat_vex | openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side | fixed: 353 known not affected: 56 | 2026-09-30T10:06:49+00:00 | Vulnerability · Source |
| CVE-2026-57456 | redhat_vex | vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion | fixed: 265 known not affected: 273 | 2026-09-30T10:06:45+00:00 | Vulnerability · Source |
| CVE-2026-54369 | redhat_vex | acl: Symlink traversal privilege escalation via libacl functions | fixed: 327 known affected: 7 known not affected: 152 | 2026-09-30T10:06:40+00:00 | Vulnerability · Source |
| CVE-2026-52858 | redhat_vex | vim: Vim: Arbitrary code execution via Python omni-completion | fixed: 273 known not affected: 273 | 2026-09-30T10:06:34+00:00 | Vulnerability · Source |
| CVE-2026-47167 | redhat_vex | vim: Vim: Arbitrary code execution via crafted step-definition patterns | fixed: 273 known not affected: 273 | 2026-09-30T10:06:29+00:00 | Vulnerability · Source |
| CVE-2026-47162 | redhat_vex | vim: Vim: Arbitrary Code Execution via crafted directory names | fixed: 273 known not affected: 273 | 2026-09-30T10:06:24+00:00 | Vulnerability · Source |
| CVE-2026-44432 | redhat_vex | urllib3: urllib3: Denial of Service due to excessive HTTP response decompression | fixed: 209 known affected: 47 known not affected: 1540 | 2026-09-30T10:06:19+00:00 | Vulnerability · Source |
| CVE-2026-11940 | redhat_vex | python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory | fixed: 727 known affected: 147 known not affected: 73 | 2026-09-30T10:06:16+00:00 | Vulnerability · Source |
| CVE-2026-11824 | redhat_vex | sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 | fixed: 1034 known affected: 109 known not affected: 63 | 2026-09-30T10:06:09+00:00 | Vulnerability · Source |
| CVE-2026-11822 | redhat_vex | sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data | fixed: 1037 known affected: 110 known not affected: 57 | 2026-09-30T10:06:09+00:00 | Vulnerability · Source |
| CVE-2026-84292 | redhat_vex | fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization | fixed: 86 known affected: 82 known not affected: 1050 | 2026-09-30T10:04:12+00:00 | Vulnerability · Source |
| CVE-2024-24786 | redhat_vex | golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON | fixed: 2152 known affected: 112 known not affected: 11937 under investigation: 57 | 2026-09-30T10:02:03+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-09-30T10:02:00+00:00 | Vulnerability · Source |
| CVE-2022-30631 | redhat_vex | golang: compress/gzip: stack exhaustion in Reader.Read | fixed: 4253 known affected: 91 known not affected: 2159 | 2026-09-30T10:01:40+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 782 known affected: 244 known not affected: 5429 | 2026-09-30T10:00:33+00:00 | Vulnerability · Source |
| CVE-2026-97992 | redhat_vex | kernel: vhost-vdpa: protect config_ctx from being freed under the config callback | known affected: 234 known not affected: 42 | 2026-09-30T09:49:43+00:00 | Vulnerability · Source |
| CVE-2026-97500 | redhat_vex | kernel: wifi: rtw89: phy: check length before parsing PHY status IE | known affected: 234 known not affected: 42 | 2026-09-30T09:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97499 | redhat_vex | kernel: coresight: perf: Retrieve path and source from event data | known not affected: 276 | 2026-09-30T09:49:22+00:00 | Vulnerability · Source |
| CVE-2023-39325 | redhat_vex | golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) | fixed: 6046 known affected: 223 known not affected: 30360 | 2026-09-30T09:49:08+00:00 | Vulnerability · Source |
| CVE-2026-46595 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation | fixed: 301 known affected: 60 known not affected: 2040 | 2026-09-30T09:48:47+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1213 known affected: 101 known not affected: 10235 | 2026-09-30T09:43:27+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2952 known affected: 151 known not affected: 16580 | 2026-09-30T09:43:02+00:00 | Vulnerability · Source |
| CVE-2021-20329 | redhat_vex | mongo-go-driver: specific cstrings input may not be properly validated | fixed: 252 known affected: 69 known not affected: 3782 | 2026-09-30T09:28:38+00:00 | Vulnerability · Source |
| CVE-2026-93130 | redhat_vex | kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure | known affected: 185 known not affected: 91 | 2026-09-30T09:18:08+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known not affected: 1 | 2026-09-30T09:18:07+00:00 | Vulnerability · Source |
| CVE-2026-92524 | redhat_vex | kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() | known affected: 234 known not affected: 42 | 2026-09-30T09:18:06+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known not affected: 1 | 2026-09-30T09:14:48+00:00 | Vulnerability · Source |
| CVE-2026-97990 | redhat_vex | kernel: vdpa_sim_net: check TX pull result before RX copy | known affected: 185 known not affected: 91 | 2026-09-30T09:14:45+00:00 | Vulnerability · Source |
| CVE-2026-97498 | redhat_vex | kernel: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction | known affected: 14 known not affected: 262 | 2026-09-30T09:14:39+00:00 | Vulnerability · Source |
| CVE-2026-97497 | redhat_vex | kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id | known affected: 247 known not affected: 29 | 2026-09-30T09:14:35+00:00 | Vulnerability · Source |
| CVE-2026-90407 | redhat_vex | kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() | known affected: 234 known not affected: 42 | 2026-09-30T09:14:33+00:00 | Vulnerability · Source |
| CVE-2026-100666 | redhat_vex | io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec | known affected: 46 known not affected: 7 | 2026-09-30T09:14:29+00:00 | Vulnerability · Source |
| CVE-2026-97991 | redhat_vex | kernel: vdpa_sim_blk: reject out-of-range sector starts | known affected: 234 known not affected: 42 | 2026-09-30T09:14:27+00:00 | Vulnerability · Source |
| CVE-2026-97496 | redhat_vex | kernel: drm/amdkfd: Fix OOB memory exposure in get_wave_state() | known affected: 233 known not affected: 43 | 2026-09-30T09:14:22+00:00 | Vulnerability · Source |
| CVE-2026-93599 | redhat_vex | rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List | fixed: 59 known affected: 115 known not affected: 180 | 2026-09-30T09:14:13+00:00 | Vulnerability · Source |
| CVE-2026-79921 | redhat_vex | github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads | fixed: 44 known affected: 4 known not affected: 51 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 4571 known affected: 134 known not affected: 7220 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-97989 | redhat_vex | kernel: vduse: validate virtqueue alignment | known affected: 183 known not affected: 93 | 2026-09-30T08:53:33+00:00 | Vulnerability · Source |
| CVE-2026-92494 | redhat_vex | kernel: ext4: fix buffer_head leak in ext4_init_orphan_info | known affected: 185 known not affected: 91 | 2026-09-30T08:53:32+00:00 | Vulnerability · Source |
| CVE-2026-54875 | redhat_vex | openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V | known affected: 87 known not affected: 1 | 2026-09-30T08:51:44+00:00 | Vulnerability · Source |
| CVE-2026-84375 | redhat_vex | js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing | fixed: 129 known affected: 293 known not affected: 911 | 2026-09-30T08:51:44+00:00 | Vulnerability · Source |
| CVE-2026-95320 | redhat_vex | chromium-browser: chromium: Address bar spoofing via missing authorization in Navigation | known not affected: 1 | 2026-09-30T08:51:08+00:00 | Vulnerability · Source |
| CVE-2026-102276 | redhat_vex | brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns | known affected: 8 known not affected: 9 under investigation: 454 | 2026-09-30T08:44:14+00:00 | Vulnerability · Source |
| CVE-2026-102633 | redhat_vex | expat: expat: Denial of Service via integer overflow in expat_realloc | known affected: 44 known not affected: 1 | 2026-09-30T08:40:22+00:00 | Vulnerability · Source |