VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303453 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-92934 | redhat_vex | vm2: vm2 before 3.11.8 Sandbox Escape RCE via AggregateError | known affected: 5 | 2026-09-30T10:40:38+00:00 | Vulnerability · Source |
| CVE-2026-90176 | redhat_vex | kernel: ksmbd: Do not skip lock checks for single-byte ranges | known not affected: 276 | 2026-09-30T10:40:38+00:00 | Vulnerability · Source |
| CVE-2026-93136 | redhat_vex | kernel: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation | known affected: 76 known not affected: 200 | 2026-09-30T10:39:51+00:00 | Vulnerability · Source |
| CVE-2026-93072 | redhat_vex | kernel: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove | known affected: 76 known not affected: 200 | 2026-09-30T10:39:50+00:00 | Vulnerability · Source |
| CVE-2025-6170 | redhat_vex | libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling | fixed: 292 known affected: 13 known not affected: 5 | 2026-09-30T10:39:47+00:00 | Vulnerability · Source |
| CVE-2026-97993 | redhat_vex | kernel: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx | known affected: 234 known not affected: 42 | 2026-09-30T10:39:44+00:00 | Vulnerability · Source |
| CVE-2026-90119 | redhat_vex | kernel: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup | known affected: 248 known not affected: 28 | 2026-09-30T10:39:44+00:00 | Vulnerability · Source |
| CVE-2026-19028 | redhat_vex | hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter | fixed: 21 known affected: 1 | 2026-09-30T10:39:24+00:00 | Vulnerability · Source |
| CVE-2026-19027 | redhat_vex | hdf5: HDF5: Information disclosure and denial of service via crafted HDF5 file | fixed: 21 known affected: 1 | 2026-09-30T10:39:23+00:00 | Vulnerability · Source |
| CVE-2026-19026 | redhat_vex | hdf5: HDF5: Denial of service via crafted HDF5 file | fixed: 21 known affected: 1 | 2026-09-30T10:39:22+00:00 | Vulnerability · Source |
| CVE-2026-27904 | redhat_vex | minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions | fixed: 653 known affected: 74 known not affected: 3879 | 2026-09-30T10:30:38+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 113 known not affected: 4133 | 2026-09-30T10:29:53+00:00 | Vulnerability · Source |
| CVE-2025-58183 | redhat_vex | golang: archive/tar: Unbounded allocation when parsing GNU sparse map | fixed: 8922 known affected: 130 known not affected: 8349 | 2026-09-30T10:29:52+00:00 | Vulnerability · Source |
| CVE-2026-97995 | redhat_vex | kernel: virtio_console: do not free control-out buffers on remove | known affected: 248 known not affected: 28 | 2026-09-30T10:28:48+00:00 | Vulnerability · Source |
| CVE-2026-97994 | redhat_vex | kernel: vhost/vdpa: reject VRING_NUM larger than device max | known affected: 234 known not affected: 42 | 2026-09-30T10:28:46+00:00 | Vulnerability · Source |
| CVE-2026-93981 | redhat_vex | hono: hono/jsx: Cross-Site Scripting via Unescaped Strings | fixed: 9 known affected: 8 | 2026-09-30T10:26:15+00:00 | Vulnerability · Source |
| CVE-2026-69243 | redhat_vex | aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade | fixed: 217 known affected: 83 known not affected: 1569 | 2026-09-30T10:24:24+00:00 | Vulnerability · Source |
| CVE-2026-59881 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression | fixed: 9 known affected: 129 known not affected: 33 | 2026-09-30T10:24:19+00:00 | Vulnerability · Source |
| CVE-2026-59858 | redhat_vex | vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion | fixed: 265 known not affected: 273 | 2026-09-30T10:24:15+00:00 | Vulnerability · Source |
| CVE-2026-59856 | redhat_vex | vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion | fixed: 233 known affected: 6 known not affected: 207 | 2026-09-30T10:24:12+00:00 | Vulnerability · Source |
| CVE-2026-58015 | redhat_vex | glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | fixed: 716 known affected: 15 known not affected: 6 | 2026-09-30T10:24:09+00:00 | Vulnerability · Source |
| CVE-2026-58014 | redhat_vex | glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | fixed: 716 known affected: 15 known not affected: 6 | 2026-09-30T10:24:04+00:00 | Vulnerability · Source |
| CVE-2026-58013 | redhat_vex | glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | fixed: 712 known affected: 15 known not affected: 6 | 2026-09-30T10:24:00+00:00 | Vulnerability · Source |
| CVE-2026-58012 | redhat_vex | glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | fixed: 712 known affected: 15 known not affected: 6 | 2026-09-30T10:23:56+00:00 | Vulnerability · Source |
| CVE-2026-58011 | redhat_vex | glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime | fixed: 712 known affected: 15 known not affected: 6 | 2026-09-30T10:23:52+00:00 | Vulnerability · Source |
| CVE-2026-58010 | redhat_vex | glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | fixed: 712 known affected: 15 known not affected: 6 | 2026-09-30T10:23:48+00:00 | Vulnerability · Source |
| CVE-2026-57455 | redhat_vex | vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() | fixed: 278 known not affected: 260 | 2026-09-30T10:23:43+00:00 | Vulnerability · Source |
| CVE-2026-55693 | redhat_vex | vim: Vim: Out-of-bounds Write in Spell File Word Count | fixed: 278 known not affected: 260 | 2026-09-30T10:23:39+00:00 | Vulnerability · Source |
| CVE-2026-54411 | redhat_vex | linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module | fixed: 360 known affected: 5 | 2026-09-30T10:23:34+00:00 | Vulnerability · Source |
| CVE-2026-44431 | redhat_vex | urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers | fixed: 687 known affected: 64 known not affected: 1155 | 2026-09-30T10:23:29+00:00 | Vulnerability · Source |
| CVE-2026-16118 | redhat_vex | xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c | fixed: 526 known affected: 25 known not affected: 4 | 2026-09-30T10:23:24+00:00 | Vulnerability · Source |
| CVE-2026-15588 | redhat_vex | GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering | fixed: 714 known affected: 22 known not affected: 5 | 2026-09-30T10:23:22+00:00 | Vulnerability · Source |
| CVE-2026-97688 | redhat_vex | urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding | fixed: 11 known not affected: 14 | 2026-09-30T10:23:18+00:00 | Vulnerability · Source |
| CVE-2026-75886 | redhat_vex | openshift/console: openshift/console: Unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding | fixed: 16 known not affected: 2596 | 2026-09-30T10:19:41+00:00 | Vulnerability · Source |
| CVE-2026-55204 | redhat_vex | haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions | fixed: 138 known affected: 16 known not affected: 2602 | 2026-09-30T10:19:15+00:00 | Vulnerability · Source |
| CVE-2026-42151 | redhat_vex | github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API | fixed: 510 known affected: 49 known not affected: 5650 | 2026-09-30T10:19:09+00:00 | Vulnerability · Source |
| CVE-2026-30922 | redhat_vex | pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion | fixed: 1724 known affected: 26 known not affected: 2541 | 2026-09-30T10:15:53+00:00 | Vulnerability · Source |
| CVE-2025-12816 | redhat_vex | node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications | fixed: 460 known affected: 37 known not affected: 2169 | 2026-09-30T10:12:26+00:00 | Vulnerability · Source |
| CVE-2026-97689 | redhat_vex | urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | fixed: 11 known not affected: 14 | 2026-09-30T10:12:20+00:00 | Vulnerability · Source |
| CVE-2026-97687 | redhat_vex | urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override | fixed: 11 known not affected: 14 | 2026-09-30T10:12:15+00:00 | Vulnerability · Source |
| CVE-2026-92948 | redhat_vex | vm2: vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test | known affected: 5 | 2026-09-30T10:12:09+00:00 | Vulnerability · Source |
| CVE-2026-42504 | redhat_vex | mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header | fixed: 4007 known affected: 108 known not affected: 5745 | 2026-09-30T10:09:19+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1897 known affected: 95 known not affected: 8869 | 2026-09-30T10:09:10+00:00 | Vulnerability · Source |
| CVE-2026-39820 | redhat_vex | net/mail: golang: Go net/mail: Denial of Service via crafted email inputs | fixed: 1439 known affected: 85 known not affected: 7831 | 2026-09-30T10:08:55+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-09-30T10:02:00+00:00 | Vulnerability · Source |
| CVE-2026-97992 | redhat_vex | kernel: vhost-vdpa: protect config_ctx from being freed under the config callback | known affected: 234 known not affected: 42 | 2026-09-30T09:49:43+00:00 | Vulnerability · Source |
| CVE-2026-97500 | redhat_vex | kernel: wifi: rtw89: phy: check length before parsing PHY status IE | known affected: 234 known not affected: 42 | 2026-09-30T09:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97499 | redhat_vex | kernel: coresight: perf: Retrieve path and source from event data | known not affected: 276 | 2026-09-30T09:49:22+00:00 | Vulnerability · Source |
| CVE-2026-93130 | redhat_vex | kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure | known affected: 185 known not affected: 91 | 2026-09-30T09:18:08+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known not affected: 1 | 2026-09-30T09:18:07+00:00 | Vulnerability · Source |