VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288116 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-17808 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in WebGL | known not affected: 1 | 2026-07-30T05:55:32+00:00 | Vulnerability · Source |
| CVE-2026-17778 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via crafted Chrome Extension | known not affected: 1 | 2026-07-30T05:50:36+00:00 | Vulnerability · Source |
| CVE-2026-64407 | redhat_vex | kernel: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() | known not affected: 274 | 2026-07-30T05:50:27+00:00 | Vulnerability · Source |
| CVE-2026-17823 | redhat_vex | chromium-browser: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR | known not affected: 1 | 2026-07-30T05:50:25+00:00 | Vulnerability · Source |
| CVE-2026-17858 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in WebNN | known not affected: 1 | 2026-07-30T05:46:09+00:00 | Vulnerability · Source |
| CVE-2026-64510 | redhat_vex | kernel: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup | known affected: 260 known not affected: 14 | 2026-07-30T05:46:07+00:00 | Vulnerability · Source |
| CVE-2025-2251 | redhat_vex | org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution | fixed: 332 known not affected: 1 | 2026-07-30T05:46:04+00:00 | Vulnerability · Source |
| CVE-2026-17865 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in Crypto | known not affected: 1 | 2026-07-30T05:45:46+00:00 | Vulnerability · Source |
| CVE-2026-64258 | redhat_vex | kernel: fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref | known not affected: 274 | 2026-07-30T05:41:23+00:00 | Vulnerability · Source |
| CVE-2026-64504 | redhat_vex | kernel: iio: accel: bmc150: clamp the device-reported FIFO frame count | known not affected: 274 | 2026-07-30T05:41:18+00:00 | Vulnerability · Source |
| CVE-2026-17735 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in BFCache | known not affected: 1 | 2026-07-30T05:41:07+00:00 | Vulnerability · Source |
| CVE-2025-66566 | redhat_vex | lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing | fixed: 32 known affected: 12 known not affected: 187 | 2026-07-30T05:40:38+00:00 | Vulnerability · Source |
| CVE-2026-64381 | redhat_vex | kernel: smb: client: Fix next buffer leak in receive_encrypted_standard() | known affected: 232 known not affected: 42 | 2026-07-30T05:30:48+00:00 | Vulnerability · Source |
| CVE-2025-66168 | redhat_vex | org.apache.activemq/apache-activemq: org.apache.activemq/activemq-all: org.apache.activemq/activemq-mqtt: Apache ActiveMQ: Unexpected behavior due to integer overflow in MQTT packet decoding | known affected: 5 | 2026-07-30T05:25:48+00:00 | Vulnerability · Source |
| CVE-2026-64527 | redhat_vex | kernel: drm/hyperv: validate VMBus packet size in receive callback | known affected: 184 known not affected: 90 | 2026-07-30T05:25:45+00:00 | Vulnerability · Source |
| CVE-2026-64455 | redhat_vex | kernel: USB: chaoskey: Fix slab-use-after-free in chaoskey_release() | known affected: 232 known not affected: 42 | 2026-07-30T05:25:44+00:00 | Vulnerability · Source |
| CVE-2026-64390 | redhat_vex | kernel: ksmbd: track the connection owning a byte-range lock | known not affected: 274 | 2026-07-30T05:05:05+00:00 | Vulnerability · Source |
| CVE-2026-64528 | redhat_vex | kernel: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers | known not affected: 274 | 2026-07-30T04:59:49+00:00 | Vulnerability · Source |
| CVE-2026-64399 | redhat_vex | kernel: ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE | known not affected: 274 | 2026-07-30T04:46:34+00:00 | Vulnerability · Source |
| CVE-2026-64513 | redhat_vex | kernel: KVM: x86: Unconditionally recompute CR8 intercept on PPR update | known affected: 274 | 2026-07-30T04:36:05+00:00 | Vulnerability · Source |
| CVE-2026-64304 | redhat_vex | kernel: crypto: qat - validate RSA CRT component lengths | known affected: 184 known not affected: 90 | 2026-07-30T04:32:25+00:00 | Vulnerability · Source |
| CVE-2026-64329 | redhat_vex | kernel: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove | known affected: 184 known not affected: 90 | 2026-07-30T04:27:42+00:00 | Vulnerability · Source |
| CVE-2026-64444 | redhat_vex | kernel: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop | known not affected: 274 | 2026-07-30T04:23:02+00:00 | Vulnerability · Source |
| CVE-2026-64453 | redhat_vex | kernel: usb: misc: usbio: fix disconnect UAF in client teardown | known affected: 76 known not affected: 198 | 2026-07-30T04:23:01+00:00 | Vulnerability · Source |
| CVE-2026-64417 | redhat_vex | kernel: mm: shrinker: fix NULL pointer dereference in debugfs | known not affected: 274 | 2026-07-30T04:05:10+00:00 | Vulnerability · Source |
| CVE-2025-49574 | redhat_vex | io.quarkus/quarkus-vertx: Quarkus potential data leak | fixed: 4 known affected: 35 | 2026-07-30T04:05:04+00:00 | Vulnerability · Source |
| CVE-2026-64487 | redhat_vex | kernel: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser | known affected: 274 | 2026-07-30T03:59:49+00:00 | Vulnerability · Source |
| CVE-2026-64488 | redhat_vex | kernel: ALSA: aoa: check snd_ctl_new1() return value | known affected: 14 known not affected: 260 | 2026-07-30T03:54:50+00:00 | Vulnerability · Source |
| CVE-2026-64523 | redhat_vex | kernel: net/handshake: Take a long-lived file reference at submit | known affected: 184 known not affected: 90 | 2026-07-30T03:54:50+00:00 | Vulnerability · Source |
| CVE-2026-59946 | redhat_vex | composer: Composer: Insecure file permissions leading to information disclosure and potential execution | fixed: 2 | 2026-07-30T03:47:13+00:00 | Vulnerability · Source |
| CVE-2026-56434 | redhat_vex | nginx: NGINX: Heap buffer over-read allows memory modification or denial of service | fixed: 4 known affected: 55 known not affected: 1 | 2026-07-30T03:47:09+00:00 | Vulnerability · Source |
| CVE-2026-64468 | redhat_vex | kernel: binder: fix UAF in binder_free_transaction() | known not affected: 274 | 2026-07-30T03:45:10+00:00 | Vulnerability · Source |
| CVE-2026-64310 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for SEV ioctls | known affected: 184 known not affected: 90 | 2026-07-30T03:31:19+00:00 | Vulnerability · Source |
| CVE-2026-64471 | redhat_vex | kernel: Bluetooth: btusb: fix use-after-free on registration failure | known affected: 274 | 2026-07-30T03:26:18+00:00 | Vulnerability · Source |
| CVE-2026-64483 | redhat_vex | kernel: ALSA: firewire: isight: bound the sample count to the packet payload | known affected: 76 known not affected: 198 | 2026-07-30T03:26:15+00:00 | Vulnerability · Source |
| CVE-2026-64526 | redhat_vex | kernel: ethtool: tsconfig: fix missing ethnl_ops_complete() | known affected: 184 known not affected: 90 | 2026-07-30T03:11:44+00:00 | Vulnerability · Source |
| CVE-2026-64473 | redhat_vex | kernel: vfio: Remove device debugfs before releasing devres | known affected: 184 known not affected: 90 | 2026-07-30T03:06:25+00:00 | Vulnerability · Source |
| CVE-2026-64460 | redhat_vex | kernel: PCI/IOV: Skip VF Resizable BAR restore on read error | known affected: 198 known not affected: 76 | 2026-07-30T03:01:20+00:00 | Vulnerability · Source |
| CVE-2026-64319 | redhat_vex | kernel: nvmet-auth: validate reply message payload bounds against transfer length | known affected: 184 known not affected: 90 | 2026-07-30T02:50:58+00:00 | Vulnerability · Source |
| CVE-2025-22228 | redhat_vex | spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length | fixed: 29 known affected: 7 known not affected: 5 | 2026-07-30T02:20:17+00:00 | Vulnerability · Source |
| CVE-2025-49146 | redhat_vex | pgjdbc: pgjdbc insecure authentication in channel binding | fixed: 27 known affected: 2 known not affected: 61 | 2026-07-30T02:20:12+00:00 | Vulnerability · Source |
| CVE-2025-64518 | redhat_vex | cyclonedx-core-java: CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection | fixed: 2 known affected: 4 known not affected: 9 | 2026-07-30T02:15:21+00:00 | Vulnerability · Source |
| CVE-2025-41248 | redhat_vex | org.springframework.security/spring-security-core: Spring Security authorization bypass | fixed: 6 known affected: 3 known not affected: 61 | 2026-07-30T02:10:31+00:00 | Vulnerability · Source |
| CVE-2026-41409 | redhat_vex | Apache MINA: Apache MINA: Arbitrary code execution via incomplete deserialization fix | known affected: 12 known not affected: 19 | 2026-07-30T02:06:15+00:00 | Vulnerability · Source |
| CVE-2026-53550 | redhat_vex | js-yaml: js-yaml: Denial of Service via crafted YAML merge keys | fixed: 12 known affected: 134 known not affected: 52 | 2026-07-30T01:56:35+00:00 | Vulnerability · Source |
| CVE-2026-40972 | redhat_vex | Spring Boot: Spring Boot: Remote code execution via timing attack in DevTools remote secret comparison | fixed: 10 known affected: 2 known not affected: 68 | 2026-07-30T01:56:28+00:00 | Vulnerability · Source |
| CVE-2024-55887 | redhat_vex | ucum: Ucum-java has an XXE vulnerability in XML parsing | known not affected: 2 | 2026-07-30T01:52:51+00:00 | Vulnerability · Source |
| CVE-2025-22235 | redhat_vex | org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed | known affected: 8 known not affected: 13 | 2026-07-30T01:52:48+00:00 | Vulnerability · Source |
| CVE-2025-35036 | redhat_vex | hibernate-validator: Hibernate Validator Expression Language Injection | fixed: 181 known affected: 4 known not affected: 15 | 2026-07-30T01:47:11+00:00 | Vulnerability · Source |
| CVE-2026-42403 | redhat_vex | org.apache.neethi: Apache Neethi: Denial of Service via circular policy references | fixed: 1 known affected: 8 | 2026-07-30T01:43:12+00:00 | Vulnerability · Source |