VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282956 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44312 | redhat_vex | css_parser: css_parser: Man-in-the-Middle attack due to improper HTTPS certificate validation | known affected: 5 | 2026-07-21T02:01:54+00:00 | Vulnerability · Source |
| CVE-2026-29111 | redhat_vex | systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data | fixed: 697 known affected: 90 known not affected: 15 under investigation: 1 | 2026-07-21T01:49:24+00:00 | Vulnerability · Source |
| CVE-2026-63831 | microsoft_vex | mac802154: llsec: add skb_cow_data() before in-place crypto | known affected: 1 | 2026-07-21T01:44:33+00:00 | Vulnerability · Source |
| CVE-2026-63796 | microsoft_vex | ocfs2: reject oversized group bitmap descriptors | known affected: 1 | 2026-07-21T01:44:23+00:00 | Vulnerability · Source |
| CVE-2026-63800 | microsoft_vex | pNFS: Fix use-after-free in pnfs_update_layout() | known affected: 1 | 2026-07-21T01:44:14+00:00 | Vulnerability · Source |
| CVE-2026-63824 | microsoft_vex | KEYS: fix overflow in keyctl_pkey_params_get_2() | known affected: 1 | 2026-07-21T01:44:03+00:00 | Vulnerability · Source |
| CVE-2026-3842 | microsoft_vex | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | fixed: 1 known affected: 1 | 2026-07-21T01:42:10+00:00 | Vulnerability · Source |
| CVE-2026-38755 | microsoft_vex | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:42:02+00:00 | Vulnerability · Source |
| CVE-2026-38754 | microsoft_vex | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-62299 | microsoft_vex | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record | fixed: 1 known affected: 1 | 2026-07-21T01:41:42+00:00 | Vulnerability · Source |
| CVE-2026-60081 | microsoft_vex | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | fixed: 1 known affected: 1 | 2026-07-21T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-15392 | microsoft_vex | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | fixed: 1 known affected: 1 | 2026-07-21T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-60082 | microsoft_vex | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | fixed: 1 known affected: 1 | 2026-07-21T01:41:17+00:00 | Vulnerability · Source |
| CVE-2026-15043 | microsoft_vex | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text | fixed: 1 known affected: 1 | 2026-07-21T01:41:10+00:00 | Vulnerability · Source |
| CVE-2026-57433 | microsoft_vex | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record | fixed: 1 known affected: 1 | 2026-07-21T01:41:02+00:00 | Vulnerability · Source |
| CVE-2026-48863 | microsoft_vex | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | fixed: 1 known affected: 1 | 2026-07-21T01:40:55+00:00 | Vulnerability · Source |
| CVE-2026-63827 | microsoft_vex | apparmor: fix use-after-free in rawdata dedup loop | known affected: 1 | 2026-07-21T01:39:47+00:00 | Vulnerability · Source |
| CVE-2026-63828 | microsoft_vex | apparmor: mediate the implicit connect of TCP fast open sendmsg | known affected: 1 | 2026-07-21T01:39:26+00:00 | Vulnerability · Source |
| CVE-2026-63801 | microsoft_vex | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | known affected: 1 | 2026-07-21T01:39:19+00:00 | Vulnerability · Source |
| CVE-2025-32415 | redhat_vex | libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables | fixed: 568 known affected: 5 known not affected: 18 | 2026-07-21T01:27:03+00:00 | Vulnerability · Source |
| CVE-2025-8058 | redhat_vex | glibc: Double free in glibc | fixed: 3064 known affected: 23 known not affected: 18 | 2026-07-21T01:26:51+00:00 | Vulnerability · Source |
| CVE-2025-24528 | redhat_vex | krb5: overflow when calculating ulog block size | fixed: 256 known affected: 9 known not affected: 14 | 2026-07-21T01:25:56+00:00 | Vulnerability · Source |
| CVE-2026-64082 | microsoft_vex | riscv: Fix register corruption from uninitialized cregs on error | known affected: 1 | 2026-07-21T01:05:16+00:00 | Vulnerability · Source |
| CVE-2026-64146 | microsoft_vex | erofs: fix metabuf leak in inode xattr initialization | known affected: 1 | 2026-07-21T01:05:10+00:00 | Vulnerability · Source |
| CVE-2026-63974 | microsoft_vex | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | known affected: 1 | 2026-07-21T01:05:04+00:00 | Vulnerability · Source |
| CVE-2026-63978 | microsoft_vex | net/handshake: Drain pending requests at net namespace exit | known affected: 1 | 2026-07-21T01:04:58+00:00 | Vulnerability · Source |
| CVE-2026-63999 | microsoft_vex | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | known affected: 1 | 2026-07-21T01:04:52+00:00 | Vulnerability · Source |
| CVE-2026-64017 | microsoft_vex | blk-mq: pop cached request if it is usable | known affected: 1 | 2026-07-21T01:04:46+00:00 | Vulnerability · Source |
| CVE-2026-63979 | microsoft_vex | net/handshake: hand off the pinned file reference to accept_doit | known affected: 1 | 2026-07-21T01:04:40+00:00 | Vulnerability · Source |
| CVE-2026-64060 | microsoft_vex | netfs: Fix leak of request in netfs_write_begin() error handling | known affected: 1 | 2026-07-21T01:04:33+00:00 | Vulnerability · Source |
| CVE-2026-64076 | microsoft_vex | netfilter: bridge: eb_tables: close module init race | known affected: 1 | 2026-07-21T01:04:27+00:00 | Vulnerability · Source |
| CVE-2026-64112 | microsoft_vex | rbd: eliminate a race in lock_dwork draining on unmap | known affected: 1 | 2026-07-21T01:04:19+00:00 | Vulnerability · Source |
| CVE-2026-63882 | microsoft_vex | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | known affected: 1 | 2026-07-21T01:04:12+00:00 | Vulnerability · Source |
| CVE-2026-64154 | microsoft_vex | drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() | known affected: 1 | 2026-07-21T01:04:06+00:00 | Vulnerability · Source |
| CVE-2026-64111 | microsoft_vex | lsm: hold cred_guard_mutex for lsm_set_self_attr() | known affected: 1 | 2026-07-21T01:04:00+00:00 | Vulnerability · Source |
| CVE-2026-63879 | microsoft_vex | drm/amdgpu: fix amdgpu_hmm_range_get_pages | known affected: 1 | 2026-07-21T01:03:54+00:00 | Vulnerability · Source |
| CVE-2026-63963 | microsoft_vex | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | known affected: 1 | 2026-07-21T01:03:48+00:00 | Vulnerability · Source |
| CVE-2025-58190 | redhat_vex | golang.org/x/net/html: Infinite parsing loop in golang.org/x/net | fixed: 36 known affected: 326 known not affected: 189 under investigation: 1 | 2026-07-21T01:03:42+00:00 | Vulnerability · Source |
| CVE-2026-63961 | microsoft_vex | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | known affected: 1 | 2026-07-21T01:03:41+00:00 | Vulnerability · Source |
| CVE-2026-63881 | microsoft_vex | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | known affected: 1 | 2026-07-21T01:03:35+00:00 | Vulnerability · Source |
| CVE-2026-63960 | microsoft_vex | usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | known affected: 1 | 2026-07-21T01:03:29+00:00 | Vulnerability · Source |
| CVE-2026-63964 | microsoft_vex | usb: typec: ucsi: ccg: reject firmware images without a ':' record header | known affected: 1 | 2026-07-21T01:03:23+00:00 | Vulnerability · Source |
| CVE-2026-63983 | microsoft_vex | net/sched: fix packet loop on netem when duplicate is on | known affected: 1 | 2026-07-21T01:03:15+00:00 | Vulnerability · Source |
| CVE-2026-64077 | microsoft_vex | netfilter: ebtables: move to two-stage removal scheme | known affected: 1 | 2026-07-21T01:03:09+00:00 | Vulnerability · Source |
| CVE-2026-63940 | microsoft_vex | KVM: SEV: Ignore Port I/O requests of length '0' | known affected: 1 | 2026-07-21T01:03:02+00:00 | Vulnerability · Source |
| CVE-2026-64078 | microsoft_vex | netfilter: x_tables: add and use xtables_unregister_table_exit | known affected: 1 | 2026-07-21T01:02:56+00:00 | Vulnerability · Source |
| CVE-2026-64097 | microsoft_vex | drm/amd/display: Validate GPIO pin LUT table size before iterating | known affected: 1 | 2026-07-21T01:02:50+00:00 | Vulnerability · Source |
| CVE-2024-56171 | redhat_vex | libxml2: Use-After-Free in libxml2 | fixed: 617 known affected: 5 known not affected: 3737 | 2026-07-21T01:02:47+00:00 | Vulnerability · Source |
| CVE-2026-63954 | microsoft_vex | hpfs: fix a crash if hpfs_map_dnode_bitmap fails | known affected: 1 | 2026-07-21T01:02:44+00:00 | Vulnerability · Source |
| CVE-2026-64117 | microsoft_vex | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 1 | 2026-07-21T01:02:37+00:00 | Vulnerability · Source |