VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286942 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-24835 | redhat_vex | podman-desktop: extension system vulnerable to authentication bypass | known affected: 4 known not affected: 6 | 2026-07-29T14:23:05+00:00 | Vulnerability · Source |
| CVE-2026-64295 | redhat_vex | kernel: mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access | known affected: 76 known not affected: 198 | 2026-07-29T14:17:53+00:00 | Vulnerability · Source |
| CVE-2026-64330 | redhat_vex | kernel: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() | known affected: 232 known not affected: 42 | 2026-07-29T14:13:12+00:00 | Vulnerability · Source |
| CVE-2026-56407 | redhat_vex | libexpat: libexpat: Arbitrary code execution due to integer overflow | fixed: 3 known affected: 43 | 2026-07-29T14:13:09+00:00 | Vulnerability · Source |
| CVE-2026-64288 | redhat_vex | kernel: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB | known affected: 76 known not affected: 198 | 2026-07-29T14:07:46+00:00 | Vulnerability · Source |
| CVE-2026-64422 | redhat_vex | kernel: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | known affected: 274 | 2026-07-29T14:07:36+00:00 | Vulnerability · Source |
| CVE-2026-64343 | redhat_vex | kernel: USB: ldusb: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T13:58:29+00:00 | Vulnerability · Source |
| CVE-2026-64374 | redhat_vex | kernel: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | known affected: 48 known not affected: 226 | 2026-07-29T13:53:17+00:00 | Vulnerability · Source |
| CVE-2026-64529 | redhat_vex | kernel: crypto: qat - remove unused character device and IOCTLs | known affected: 184 known not affected: 90 | 2026-07-29T13:53:16+00:00 | Vulnerability · Source |
| CVE-2026-54761 | redhat_vex | traefik: Traefik: Internal service exposure due to crossProviderNamespaces allowlist misconfiguration | known affected: 1 | 2026-07-29T13:53:09+00:00 | Vulnerability · Source |
| CVE-2026-55737 | redhat_vex | erlang-otp: Erlang OTP: Denial of Service via crafted external term format binary | known not affected: 1 | 2026-07-29T13:52:54+00:00 | Vulnerability · Source |
| CVE-2026-64306 | redhat_vex | kernel: crypto: drbg - Fix returning success on failure in CTR_DRBG | known affected: 274 | 2026-07-29T13:49:00+00:00 | Vulnerability · Source |
| CVE-2026-64492 | redhat_vex | kernel: iio: temperature: tmp006: use devm_iio_trigger_register | known not affected: 274 | 2026-07-29T13:43:18+00:00 | Vulnerability · Source |
| CVE-2026-64505 | redhat_vex | kernel: usb: gadget: function: rndis: add length check for header | known not affected: 274 | 2026-07-29T13:38:57+00:00 | Vulnerability · Source |
| CVE-2026-64834 | redhat_vex | FFmpeg: Denial of Service via crafted RTP/ASF stream | known affected: 8 | 2026-07-29T13:38:10+00:00 | Vulnerability · Source |
| CVE-2026-64263 | redhat_vex | kernel: fuse-uring: fix moving cancelled entry to ent_in_userspace list | known not affected: 274 | 2026-07-29T13:33:19+00:00 | Vulnerability · Source |
| CVE-2026-59948 | redhat_vex | composer/composer: Composer: Arbitrary file write via crafted package name | known not affected: 1 | 2026-07-29T13:33:13+00:00 | Vulnerability · Source |
| CVE-2026-59947 | redhat_vex | composer/composer: Composer: Information disclosure of credentials via debug output | known not affected: 1 | 2026-07-29T13:33:05+00:00 | Vulnerability · Source |
| CVE-2026-64522 | redhat_vex | kernel: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA | known affected: 198 known not affected: 76 | 2026-07-29T13:28:19+00:00 | Vulnerability · Source |
| CVE-2026-64410 | redhat_vex | kernel: netfilter: flowtable: IPIP tunnel hardware offload is not yet support | known affected: 76 known not affected: 198 | 2026-07-29T13:28:10+00:00 | Vulnerability · Source |
| CVE-2026-55969 | redhat_vex | thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound | fixed: 9 known affected: 66 known not affected: 11 | 2026-07-29T13:28:03+00:00 | Vulnerability · Source |
| CVE-2026-64428 | redhat_vex | kernel: gpio: sch: use raw_spinlock_t in the irq startup path | known affected: 14 known not affected: 260 | 2026-07-29T13:24:51+00:00 | Vulnerability · Source |
| CVE-2026-64257 | redhat_vex | kernel: smb: client: reject overlapping data areas in SMB2 responses | known not affected: 274 | 2026-07-29T13:24:48+00:00 | Vulnerability · Source |
| CVE-2026-64506 | redhat_vex | kernel: wifi: rtw89: correct drop logic for malformed AMPDU frames | known not affected: 274 | 2026-07-29T13:24:47+00:00 | Vulnerability · Source |
| CVE-2026-64518 | redhat_vex | kernel: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key() | known not affected: 274 | 2026-07-29T13:24:44+00:00 | Vulnerability · Source |
| CVE-2026-40990 | redhat_vex | spring-cloud-function: Spring Cloud Function: Denial of Service via excessive function registration | under investigation: 1 | 2026-07-29T13:19:21+00:00 | Vulnerability · Source |
| CVE-2026-64436 | redhat_vex | kernel: net: af_key: initialize alg_key_len for IPComp states | known affected: 198 known not affected: 76 | 2026-07-29T13:19:20+00:00 | Vulnerability · Source |
| CVE-2026-64387 | redhat_vex | kernel: smb: client: fix query directory replay double-free | known affected: 184 known not affected: 90 | 2026-07-29T13:12:17+00:00 | Vulnerability · Source |
| CVE-2026-41714 | redhat_vex | spring-amqp: Spring AMQP: Lack of certificate validation in TLS connections | known affected: 3 | 2026-07-29T13:09:53+00:00 | Vulnerability · Source |
| CVE-2026-41701 | redhat_vex | Spring AMQP: Spring AMQP: Predictable correlation IDs may lead to information disclosure | known affected: 3 | 2026-07-29T13:09:48+00:00 | Vulnerability · Source |
| CVE-2026-64344 | redhat_vex | kernel: USB: idmouse: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T13:05:37+00:00 | Vulnerability · Source |
| CVE-2026-64445 | redhat_vex | kernel: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() | known not affected: 275 | 2026-07-29T12:58:22+00:00 | Vulnerability · Source |
| CVE-2026-54919 | redhat_vex | cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends | known not affected: 1 | 2026-07-29T12:53:41+00:00 | Vulnerability · Source |
| CVE-2026-64375 | redhat_vex | kernel: proc: protect ptrace_may_access() with exec_update_lock (FD links) | known affected: 260 under investigation: 14 | 2026-07-29T12:53:38+00:00 | Vulnerability · Source |
| CVE-2026-18220 | redhat_vex | binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing | known not affected: 76 | 2026-07-29T12:53:23+00:00 | Vulnerability · Source |
| CVE-2026-64302 | redhat_vex | kernel: x86/mm: Fix freeing of PMD-sized vmemmap pages | known not affected: 274 | 2026-07-29T12:43:15+00:00 | Vulnerability · Source |
| CVE-2026-64461 | redhat_vex | kernel: PCI: mediatek: Fix IRQ domain leak when port fails to enable | known not affected: 274 | 2026-07-29T12:37:57+00:00 | Vulnerability · Source |
| CVE-2026-33930 | redhat_vex | Apache Traffic Server: Apache Traffic Server: Denial of Service via over-long Host header | known not affected: 1 | 2026-07-29T12:33:41+00:00 | Vulnerability · Source |
| CVE-2026-64404 | redhat_vex | kernel: Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() | known affected: 184 known not affected: 90 | 2026-07-29T12:33:39+00:00 | Vulnerability · Source |
| CVE-2026-64425 | redhat_vex | kernel: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | known not affected: 274 | 2026-07-29T12:22:51+00:00 | Vulnerability · Source |
| CVE-2026-64491 | redhat_vex | kernel: ALSA: usx2y: us144mkii: fix work UAF on disconnect | known affected: 184 known not affected: 90 | 2026-07-29T12:22:42+00:00 | Vulnerability · Source |
| CVE-2026-64348 | redhat_vex | kernel: usb: free iso schedules on failed submit | known not affected: 274 | 2026-07-29T12:17:14+00:00 | Vulnerability · Source |
| CVE-2026-64519 | redhat_vex | kernel: NFSD: Fix infinite loop in layout state revocation | known affected: 198 known not affected: 76 | 2026-07-29T12:12:47+00:00 | Vulnerability · Source |
| CVE-2026-64376 | redhat_vex | kernel: firmware_loader: fix device reference leak in firmware_upload_register() | known affected: 184 known not affected: 90 | 2026-07-29T12:02:34+00:00 | Vulnerability · Source |
| CVE-2026-44891 | redhat_vex | io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder | known affected: 4 known not affected: 1 | 2026-07-29T12:02:26+00:00 | Vulnerability · Source |
| CVE-2026-64454 | redhat_vex | kernel: usb: dwc3: run gadget disconnect from sleepable suspend context | known affected: 184 known not affected: 90 | 2026-07-29T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-64472 | redhat_vex | kernel: vfio/mlx5: Fix racy bitfields and tighten struct layout | known affected: 184 known not affected: 90 | 2026-07-29T11:47:25+00:00 | Vulnerability · Source |
| CVE-2025-71319 | redhat_vex | image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. | fixed: 3 known affected: 14 known not affected: 48 | 2026-07-29T11:47:21+00:00 | Vulnerability · Source |
| CVE-2026-64338 | redhat_vex | kernel: USB: misc: uss720: unregister parport on probe failure | known affected: 198 known not affected: 76 | 2026-07-29T11:37:11+00:00 | Vulnerability · Source |
| CVE-2026-64298 | redhat_vex | kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | known affected: 274 | 2026-07-29T11:37:11+00:00 | Vulnerability · Source |