VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288186 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64311 | redhat_vex | kernel: crypto: loongson - Remove broken and unused loongson-rng | known not affected: 274 | 2026-07-29T09:27:30+00:00 | Vulnerability · Source |
| CVE-2026-5704 | redhat_vex | tar: tar: Hidden file injection via crafted archives | known affected: 9 | 2026-07-29T09:27:27+00:00 | Vulnerability · Source |
| CVE-2026-64345 | redhat_vex | kernel: usb: gadget: f_printer: take kref only for successful open | known not affected: 274 | 2026-07-29T09:17:43+00:00 | Vulnerability · Source |
| CVE-2026-6474 | redhat_vex | postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function | fixed: 2057 known affected: 84 known not affected: 7 | 2026-07-29T09:14:32+00:00 | Vulnerability · Source |
| CVE-2026-6472 | redhat_vex | postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | fixed: 2064 known affected: 1 known not affected: 66 | 2026-07-29T09:13:58+00:00 | Vulnerability · Source |
| CVE-2026-9547 | redhat_vex | curl: curl: Man-in-the-middle attack via SSH host key bypass | fixed: 7 known affected: 13 known not affected: 14 | 2026-07-29T09:02:56+00:00 | Vulnerability · Source |
| CVE-2026-64365 | redhat_vex | kernel: HID: letsketch: fix UAF on inrange_timer at driver unbind | known affected: 184 known not affected: 90 | 2026-07-29T08:52:38+00:00 | Vulnerability · Source |
| CVE-2026-64299 | redhat_vex | kernel: tracing: Prevent out-of-bounds read in glob matching | known affected: 246 known not affected: 28 | 2026-07-29T08:43:22+00:00 | Vulnerability · Source |
| CVE-2026-46152 | redhat_vex | kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result | fixed: 1607 known affected: 22 known not affected: 42 | 2026-07-29T08:43:15+00:00 | Vulnerability · Source |
| CVE-2026-64359 | redhat_vex | kernel: nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers | known not affected: 274 | 2026-07-29T08:38:35+00:00 | Vulnerability · Source |
| CVE-2026-64337 | redhat_vex | kernel: usb: mtu3: unmap request DMA on queue failure | known not affected: 274 | 2026-07-29T08:38:34+00:00 | Vulnerability · Source |
| CVE-2026-64403 | redhat_vex | kernel: Bluetooth: L2CAP: validate option length before reading conf opt value | known affected: 260 known not affected: 14 | 2026-07-29T08:38:33+00:00 | Vulnerability · Source |
| CVE-2026-64318 | redhat_vex | kernel: partitions: aix: bound the pp_count scan to the ppe array | known not affected: 274 | 2026-07-29T08:35:35+00:00 | Vulnerability · Source |
| CVE-2026-64409 | redhat_vex | kernel: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() | known not affected: 274 | 2026-07-29T08:28:29+00:00 | Vulnerability · Source |
| CVE-2026-64367 | redhat_vex | kernel: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow | known not affected: 274 | 2026-07-29T08:23:31+00:00 | Vulnerability · Source |
| CVE-2026-64352 | redhat_vex | kernel: bpf: Allow LPM map access from sleepable BPF programs | known affected: 232 known not affected: 42 | 2026-07-29T08:19:39+00:00 | Vulnerability · Source |
| CVE-2026-64482 | redhat_vex | kernel: ALSA: gus: check snd_ctl_new1() return value | known not affected: 274 | 2026-07-29T08:19:37+00:00 | Vulnerability · Source |
| CVE-2026-15588 | redhat_vex | GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering | fixed: 3 known affected: 47 | 2026-07-29T08:18:46+00:00 | Vulnerability · Source |
| CVE-2026-64502 | redhat_vex | kernel: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices | known not affected: 274 | 2026-07-29T08:15:01+00:00 | Vulnerability · Source |
| CVE-2026-64432 | redhat_vex | kernel: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns | known not affected: 274 | 2026-07-29T08:14:56+00:00 | Vulnerability · Source |
| CVE-2026-64493 | redhat_vex | kernel: iio: pressure: mpl115: fix runtime PM leak on read error | known not affected: 274 | 2026-07-29T08:14:56+00:00 | Vulnerability · Source |
| CVE-2026-64435 | redhat_vex | kernel: audit: Fix data races of skb_queue_len() readers on audit_queue | known affected: 246 known not affected: 28 | 2026-07-29T08:08:34+00:00 | Vulnerability · Source |
| CVE-2025-8263 | redhat_vex | prettier: prettier parseNestedCSS ReDoS | known affected: 168 | 2026-07-29T08:08:26+00:00 | Vulnerability · Source |
| CVE-2025-54798 | redhat_vex | tmp: tmp Symbolic Link Write Vulnerability | known affected: 132 known not affected: 5 | 2026-07-29T08:03:53+00:00 | Vulnerability · Source |
| CVE-2026-64449 | redhat_vex | kernel: staging: vme_user: bound slave read/write to the kern_buf size | known not affected: 274 | 2026-07-29T08:03:49+00:00 | Vulnerability · Source |
| CVE-2025-9308 | redhat_vex | yarn: yarnpkg regular expression denial of service | known affected: 34 | 2026-07-29T08:03:47+00:00 | Vulnerability · Source |
| CVE-2024-28863 | redhat_vex | node-tar: denial of service while parsing a tar file due to lack of folders depth validation | fixed: 220 known affected: 37 known not affected: 240 | 2026-07-29T08:03:40+00:00 | Vulnerability · Source |
| CVE-2026-64328 | redhat_vex | kernel: usb: gadget: f_fs: Fix DMA fence leak | known not affected: 274 | 2026-07-29T08:03:39+00:00 | Vulnerability · Source |
| CVE-2026-64520 | redhat_vex | kernel: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies | known not affected: 274 | 2026-07-29T07:56:18+00:00 | Vulnerability · Source |
| CVE-2026-64439 | redhat_vex | kernel: crypto: krb5 - filter out async aead implementations at alloc | known affected: 184 known not affected: 90 | 2026-07-29T07:53:56+00:00 | Vulnerability · Source |
| CVE-2026-50151 | redhat_vex | oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload | fixed: 12 known affected: 2 known not affected: 164 under investigation: 30 | 2026-07-29T07:51:31+00:00 | Vulnerability · Source |
| CVE-2026-64259 | redhat_vex | kernel: fuse-uring: make a fuse_req on SQE commit only findable after memcpy | known not affected: 274 | 2026-07-29T07:43:55+00:00 | Vulnerability · Source |
| CVE-2026-64401 | redhat_vex | kernel: smb: client: resolve SWN tcon from live registrations | known not affected: 274 | 2026-07-29T07:33:34+00:00 | Vulnerability · Source |
| CVE-2026-64474 | redhat_vex | kernel: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | known affected: 184 known not affected: 90 | 2026-07-29T07:22:10+00:00 | Vulnerability · Source |
| CVE-2026-64499 | redhat_vex | kernel: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable | known not affected: 274 | 2026-07-29T07:17:12+00:00 | Vulnerability · Source |
| CVE-2026-64421 | redhat_vex | kernel: media: nxp: imx8-isi: Fix use-after-free on remove | known not affected: 274 | 2026-07-29T07:17:12+00:00 | Vulnerability · Source |
| CVE-2026-64222 | redhat_vex | kernel: octeontx2-pf: avoid double free of pool->stack on AQ init failure | known affected: 184 known not affected: 90 | 2026-07-29T07:03:35+00:00 | Vulnerability · Source |
| CVE-2026-64281 | redhat_vex | kernel: svcrdma: wake sq waiters when the transport closes | known affected: 90 known not affected: 184 | 2026-07-29T07:03:32+00:00 | Vulnerability · Source |
| CVE-2026-64366 | redhat_vex | kernel: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert | known affected: 184 known not affected: 90 | 2026-07-29T07:03:28+00:00 | Vulnerability · Source |
| CVE-2026-64440 | redhat_vex | kernel: staging: rtl8723bs: fix OOB write in HT_caps_handler() | known not affected: 274 | 2026-07-29T06:53:08+00:00 | Vulnerability · Source |
| CVE-2026-64533 | redhat_vex | kernel: fs/ntfs3: validate lcns_follow in log_replay conversion | known not affected: 274 | 2026-07-29T06:27:37+00:00 | Vulnerability · Source |
| CVE-2026-64550 | redhat_vex | kernel: net: qualcomm: rmnet: validate MAP frame length before ingress parsing | known not affected: 275 | 2026-07-29T06:27:33+00:00 | Vulnerability · Source |
| CVE-2026-64553 | redhat_vex | kernel: net: psample: fix info leak in PSAMPLE_ATTR_DATA | known affected: 260 known not affected: 14 | 2026-07-29T05:42:07+00:00 | Vulnerability · Source |
| CVE-2026-42955 | redhat_vex | unbound: Unbound: DNS cache integrity issue | fixed: 4 known affected: 20 known not affected: 10 | 2026-07-29T03:46:15+00:00 | Vulnerability · Source |
| CVE-2026-41637 | redhat_vex | unbound: Unbound: Denial of Service via terminated DNS-over-QUIC queries | fixed: 4 known affected: 15 known not affected: 15 | 2026-07-29T03:46:14+00:00 | Vulnerability · Source |
| CVE-2026-50135 | redhat_vex | github.com/gohugoio/hugo: Hugo: Information disclosure due to symlink confinement bypass | fixed: 3 | 2026-07-29T03:46:12+00:00 | Vulnerability · Source |
| CVE-2026-50134 | redhat_vex | github.com/gohugoio/hugo: Hugo: Security policy bypass via HTTP redirect manipulation | fixed: 3 | 2026-07-29T03:46:11+00:00 | Vulnerability · Source |
| CVE-2026-58404 | redhat_vex | github.com/gohugoio/hugo: Hugo: Server-Side Request Forgery (SSRF) via alternate IPv4 encodings | fixed: 3 | 2026-07-29T03:46:07+00:00 | Vulnerability · Source |
| CVE-2026-58403 | redhat_vex | github.com/gohugoio/hugo: Hugo: Information disclosure via symlink confinement bypass in virtual filesystem | fixed: 3 | 2026-07-29T03:46:04+00:00 | Vulnerability · Source |
| CVE-2026-58402 | redhat_vex | github.com/gohugoio/hugo: Hugo: Cross-site Scripting via unescaped code-fence language in default code block renderer | fixed: 3 | 2026-07-29T03:46:04+00:00 | Vulnerability · Source |