VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286924 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4360 | redhat_vex | python: Python Tarfile: Unexpected file ownership when extracting hardlinks | fixed: 16 known affected: 232 | 2026-07-29T16:55:36+00:00 | Vulnerability · Source |
| CVE-2026-64341 | redhat_vex | kernel: USB: iowarrior: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T16:47:54+00:00 | Vulnerability · Source |
| CVE-2026-64312 | redhat_vex | kernel: crypto: pcrypt - restore callback for non-parallel fallback | known affected: 184 known not affected: 90 | 2026-07-29T16:47:46+00:00 | Vulnerability · Source |
| CVE-2026-64284 | redhat_vex | kernel: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits | known affected: 198 known not affected: 76 | 2026-07-29T16:47:44+00:00 | Vulnerability · Source |
| CVE-2026-64380 | redhat_vex | kernel: smb: client: harden POSIX SID length parsing | known affected: 232 known not affected: 42 | 2026-07-29T16:46:11+00:00 | Vulnerability · Source |
| CVE-2026-59251 | redhat_vex | Erlang/OTP: public_key: Erlang/OTP public_key: Denial of Service via crafted TLS certificate chains | fixed: 3 | 2026-07-29T16:35:26+00:00 | Vulnerability · Source |
| CVE-2026-42792 | redhat_vex | erlang-otp: epmd: Erlang OTP epmd: Remote Denial of Service via connection exhaustion | fixed: 3 | 2026-07-29T16:35:16+00:00 | Vulnerability · Source |
| CVE-2026-64287 | redhat_vex | kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | known affected: 232 known not affected: 42 | 2026-07-29T16:33:50+00:00 | Vulnerability · Source |
| CVE-2026-11605 | redhat_vex | bind: bind9: Unnecessary validation of DNSSEC signed records | fixed: 4 known affected: 1 known not affected: 80 under investigation: 5 | 2026-07-29T16:33:46+00:00 | Vulnerability · Source |
| CVE-2026-64475 | redhat_vex | kernel: vfio/pci: Release the VGA arbiter client on register_device() failure | known affected: 184 known not affected: 90 | 2026-07-29T16:25:03+00:00 | Vulnerability · Source |
| CVE-2025-12799 | redhat_vex | jastow: Jastow Cross-Site Scripting attack due to unsanitized URI | fixed: 721 known affected: 10 known not affected: 2526 | 2026-07-29T16:24:34+00:00 | Vulnerability · Source |
| CVE-2026-46316 | redhat_vex | kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry | fixed: 1240 known affected: 23 known not affected: 90 | 2026-07-29T16:24:01+00:00 | Vulnerability · Source |
| CVE-2026-46242 | redhat_vex | kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF | fixed: 1603 known not affected: 112 | 2026-07-29T16:23:49+00:00 | Vulnerability · Source |
| CVE-2026-44944 | redhat_vex | open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket | known affected: 6 | 2026-07-29T16:07:52+00:00 | Vulnerability · Source |
| CVE-2026-44943 | redhat_vex | open-iscsi: open-iscsi: Privilege Escalation via Path Traversal | known affected: 6 | 2026-07-29T16:07:46+00:00 | Vulnerability · Source |
| CVE-2026-64429 | redhat_vex | kernel: gpio: eic-sprd: use raw_spinlock_t in the irq startup path | known not affected: 274 | 2026-07-29T16:02:59+00:00 | Vulnerability · Source |
| CVE-2026-64361 | redhat_vex | kernel: hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length | known not affected: 274 | 2026-07-29T16:02:57+00:00 | Vulnerability · Source |
| CVE-2026-55995 | redhat_vex | open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder | known affected: 7 | 2026-07-29T16:02:53+00:00 | Vulnerability · Source |
| CVE-2026-64340 | redhat_vex | kernel: USB: legousbtower: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T15:54:51+00:00 | Vulnerability · Source |
| CVE-2026-26197 | redhat_vex | hdf5: HDF5: Out-of-bounds read due to corrupted file can lead to denial of service | known affected: 53 | 2026-07-29T15:54:43+00:00 | Vulnerability · Source |
| CVE-2026-64264 | redhat_vex | kernel: fuse-uring: fix EFAULT clobber in fuse_uring_commit | known not affected: 274 | 2026-07-29T15:43:37+00:00 | Vulnerability · Source |
| CVE-2026-53606 | redhat_vex | apostrophecms sanitize-html: sanitize-html: Cross-Site Scripting (XSS) via insufficient URI scheme validation | known affected: 18 under investigation: 2 | 2026-07-29T15:43:11+00:00 | Vulnerability · Source |
| CVE-2026-26199 | redhat_vex | HDF5: HDF5: Denial of Service via buffer underflow in H5Iget_name | known affected: 53 | 2026-07-29T15:43:07+00:00 | Vulnerability · Source |
| CVE-2026-64291 | redhat_vex | kernel: iommufd: Set veventq_depth upper bound | known affected: 184 known not affected: 90 | 2026-07-29T15:37:53+00:00 | Vulnerability · Source |
| CVE-2026-64383 | redhat_vex | kernel: smb: client: fix double-free in SMB2_flush() replay | known affected: 184 known not affected: 90 | 2026-07-29T15:37:51+00:00 | Vulnerability · Source |
| CVE-2026-64503 | redhat_vex | kernel: iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error | known not affected: 274 | 2026-07-29T15:32:59+00:00 | Vulnerability · Source |
| CVE-2026-64379 | redhat_vex | kernel: smb: client: mask server-provided mode to 07777 in modefromsid | known affected: 232 known not affected: 42 | 2026-07-29T15:28:09+00:00 | Vulnerability · Source |
| CVE-2026-64508 | redhat_vex | kernel: bpf: Support for hardening against JIT spraying | known affected: 260 known not affected: 14 | 2026-07-29T15:23:32+00:00 | Vulnerability · Source |
| CVE-2026-14156 | redhat_vex | chromium-browser: Policy bypass in StorageAccessAPI | known not affected: 1 | 2026-07-29T15:14:58+00:00 | Vulnerability · Source |
| CVE-2026-64301 | redhat_vex | kernel: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() | known affected: 232 known not affected: 42 | 2026-07-29T15:14:55+00:00 | Vulnerability · Source |
| CVE-2026-14145 | redhat_vex | chromium-browser: Inappropriate implementation in CSS | known not affected: 1 | 2026-07-29T15:14:52+00:00 | Vulnerability · Source |
| CVE-2026-14155 | redhat_vex | chromium-browser: Insufficient policy enforcement in StorageAccessAPI | known not affected: 1 | 2026-07-29T15:14:51+00:00 | Vulnerability · Source |
| CVE-2026-14147 | redhat_vex | chromium-browser: Inappropriate implementation in CSS | known not affected: 1 | 2026-07-29T15:14:49+00:00 | Vulnerability · Source |
| CVE-2026-14146 | redhat_vex | chromium-browser: Inappropriate implementation in CSS | known not affected: 1 | 2026-07-29T15:14:48+00:00 | Vulnerability · Source |
| CVE-2026-64525 | redhat_vex | kernel: xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit | known affected: 14 known not affected: 260 | 2026-07-29T15:14:43+00:00 | Vulnerability · Source |
| CVE-2026-64405 | redhat_vex | kernel: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() | known affected: 198 known not affected: 76 | 2026-07-29T15:14:04+00:00 | Vulnerability · Source |
| CVE-2026-66138 | redhat_vex | ironic-python-agent: OpenStack Ironic Python Agent: Arbitrary code execution via malicious configuration | known affected: 7 known not affected: 2 | 2026-07-29T15:12:58+00:00 | Vulnerability · Source |
| CVE-2026-64419 | redhat_vex | kernel: mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() | known not affected: 274 | 2026-07-29T15:11:37+00:00 | Vulnerability · Source |
| CVE-2023-1829 | redhat_vex | kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter | fixed: 806 known affected: 28 known not affected: 122 | 2026-07-29T15:07:53+00:00 | Vulnerability · Source |
| CVE-2026-14154 | redhat_vex | chromium-browser: Inappropriate implementation in DevTools | known not affected: 1 | 2026-07-29T14:53:41+00:00 | Vulnerability · Source |
| CVE-2026-14150 | redhat_vex | chromium-browser: Insufficient validation of untrusted input in Speech | known not affected: 1 | 2026-07-29T14:53:39+00:00 | Vulnerability · Source |
| CVE-2026-64486 | redhat_vex | kernel: ALSA: cmipci: check snd_ctl_new1() return value | known affected: 246 known not affected: 28 | 2026-07-29T14:53:35+00:00 | Vulnerability · Source |
| CVE-2026-14149 | redhat_vex | chromium-browser: Use after free in Audio | known not affected: 1 | 2026-07-29T14:53:33+00:00 | Vulnerability · Source |
| CVE-2026-14415 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-07-29T14:53:32+00:00 | Vulnerability · Source |
| CVE-2026-14151 | redhat_vex | chromium-browser: Inappropriate implementation in AI | known not affected: 1 | 2026-07-29T14:53:30+00:00 | Vulnerability · Source |
| CVE-2026-14416 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read in Dawn | known not affected: 1 | 2026-07-29T14:53:27+00:00 | Vulnerability · Source |
| CVE-2026-14152 | redhat_vex | chromium-browser: Out of bounds write in ANGLE | known not affected: 1 | 2026-07-29T14:53:26+00:00 | Vulnerability · Source |
| CVE-2026-14153 | redhat_vex | chromium-browser: Inappropriate implementation in Glic | known not affected: 1 | 2026-07-29T14:53:26+00:00 | Vulnerability · Source |
| CVE-2026-14148 | redhat_vex | chromium-browser: Type Confusion in CSS | known not affected: 1 | 2026-07-29T14:53:00+00:00 | Vulnerability · Source |
| CVE-2026-64420 | redhat_vex | kernel: mfd: cros_ec: Delay dev_set_drvdata() until probe success | known not affected: 274 | 2026-07-29T14:52:59+00:00 | Vulnerability · Source |