VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282976 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-57982 | redhat_vex | kernel: xfrm: state: fix out-of-bounds read during lookup | fixed: 612 known affected: 84 known not affected: 28 | 2026-07-20T15:46:07+00:00 | Vulnerability · Source |
| CVE-2026-64168 | redhat_vex | kernel: spi: sprd: fix error pointer deref after DMA setup failure | known not affected: 274 | 2026-07-20T15:45:49+00:00 | Vulnerability · Source |
| CVE-2026-53402 | redhat_vex | kernel: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | known affected: 184 known not affected: 90 | 2026-07-20T15:44:48+00:00 | Vulnerability · Source |
| CVE-2026-53400 | redhat_vex | kernel: i2c: core: fix adapter registration race | known affected: 232 known not affected: 42 | 2026-07-20T15:43:52+00:00 | Vulnerability · Source |
| CVE-2026-16277 | redhat_vex | rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | known affected: 4 | 2026-07-20T15:42:05+00:00 | Vulnerability · Source |
| CVE-2026-64112 | redhat_vex | kernel: rbd: eliminate a race in lock_dwork draining on unmap | known affected: 260 known not affected: 14 | 2026-07-20T15:42:02+00:00 | Vulnerability · Source |
| CVE-2026-53397 | redhat_vex | kernel: nfsd: fix posix_acl leak on SETACL decode failure | known affected: 274 | 2026-07-20T15:39:51+00:00 | Vulnerability · Source |
| CVE-2026-46338 | redhat_vex | pymdown-extensions: PyMdown Extensions: Information disclosure via crafted Markdown snippets | known affected: 3 known not affected: 1 | 2026-07-20T15:34:30+00:00 | Vulnerability · Source |
| CVE-2026-53394 | redhat_vex | kernel: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race | known affected: 198 known not affected: 77 | 2026-07-20T15:34:20+00:00 | Vulnerability · Source |
| CVE-2026-53395 | redhat_vex | kernel: nfsd: fix dead ACL conflict guard in nfsd4_create | known affected: 90 known not affected: 184 | 2026-07-20T15:34:19+00:00 | Vulnerability · Source |
| CVE-2026-58010 | redhat_vex | glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | known affected: 46 known not affected: 1 | 2026-07-20T15:34:13+00:00 | Vulnerability · Source |
| CVE-2026-53396 | redhat_vex | kernel: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file | known not affected: 261 under investigation: 14 | 2026-07-20T15:30:29+00:00 | Vulnerability · Source |
| CVE-2026-53399 | redhat_vex | kernel: nfsd: release layout stid on setlease failure | known affected: 260 known not affected: 15 | 2026-07-20T15:29:44+00:00 | Vulnerability · Source |
| CVE-2026-50559 | redhat_vex | io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters | fixed: 9 known affected: 16 known not affected: 67 | 2026-07-20T15:28:52+00:00 | Vulnerability · Source |
| CVE-2026-53398 | redhat_vex | kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup | known affected: 184 known not affected: 76 under investigation: 14 | 2026-07-20T15:27:46+00:00 | Vulnerability · Source |
| CVE-2026-64042 | redhat_vex | kernel: vfio/pci: Check BAR resources before exporting a DMABUF | known affected: 76 known not affected: 198 | 2026-07-20T15:27:35+00:00 | Vulnerability · Source |
| CVE-2026-64037 | redhat_vex | kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled | known affected: 184 known not affected: 91 | 2026-07-20T15:27:33+00:00 | Vulnerability · Source |
| CVE-2026-64132 | redhat_vex | kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() | known affected: 76 known not affected: 185 under investigation: 14 | 2026-07-20T15:27:32+00:00 | Vulnerability · Source |
| CVE-2026-64051 | redhat_vex | kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap | known affected: 76 known not affected: 199 | 2026-07-20T15:27:30+00:00 | Vulnerability · Source |
| CVE-2026-64061 | redhat_vex | kernel: netfs: Fix early put of sink folio in netfs_read_gaps() | known affected: 76 known not affected: 199 | 2026-07-20T15:27:28+00:00 | Vulnerability · Source |
| CVE-2026-64137 | redhat_vex | kernel: smb: client: require net admin for CIFS SWN netlink | known not affected: 274 | 2026-07-20T15:25:59+00:00 | Vulnerability · Source |
| CVE-2026-63797 | redhat_vex | kernel: rpmsg: char: Fix use-after-free on probe error path | known affected: 76 known not affected: 198 | 2026-07-20T15:23:12+00:00 | Vulnerability · Source |
| CVE-2026-64621 | redhat_vex | FreeRDP: FreeRDP: Double-free vulnerability via crafted .rdp file leading to potential remote code execution | known affected: 31 | 2026-07-20T15:22:52+00:00 | Vulnerability · Source |
| CVE-2026-64113 | redhat_vex | kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | known affected: 260 known not affected: 15 | 2026-07-20T15:22:22+00:00 | Vulnerability · Source |
| CVE-2026-63795 | redhat_vex | kernel: 9p: avoid putting oldfid in p9_client_walk() error path | known not affected: 260 under investigation: 14 | 2026-07-20T15:22:17+00:00 | Vulnerability · Source |
| CVE-2026-63794 | redhat_vex | kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | known affected: 232 known not affected: 42 | 2026-07-20T15:22:14+00:00 | Vulnerability · Source |
| CVE-2026-50011 | redhat_vex | netty-codec-redis: Netty: Denial of Service via malicious Redis array header | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:19:05+00:00 | Vulnerability · Source |
| CVE-2026-50010 | redhat_vex | netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass | fixed: 8 known affected: 34 known not affected: 17 | 2026-07-20T15:19:01+00:00 | Vulnerability · Source |
| CVE-2026-48059 | redhat_vex | netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers | fixed: 10 known affected: 26 known not affected: 66 | 2026-07-20T15:18:59+00:00 | Vulnerability · Source |
| CVE-2026-48043 | redhat_vex | netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak | fixed: 22 known affected: 32 known not affected: 56 | 2026-07-20T15:18:57+00:00 | Vulnerability · Source |
| CVE-2026-48006 | redhat_vex | netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:18:53+00:00 | Vulnerability · Source |
| CVE-2026-47691 | redhat_vex | io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records | fixed: 6 known affected: 30 known not affected: 11 | 2026-07-20T15:18:51+00:00 | Vulnerability · Source |
| CVE-2026-46340 | redhat_vex | netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments | fixed: 2 known affected: 3 known not affected: 2 | 2026-07-20T15:18:48+00:00 | Vulnerability · Source |
| CVE-2026-45674 | redhat_vex | netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation | fixed: 6 known affected: 30 known not affected: 11 | 2026-07-20T15:18:45+00:00 | Vulnerability · Source |
| CVE-2026-45416 | redhat_vex | netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake | fixed: 8 known affected: 34 known not affected: 17 | 2026-07-20T15:18:39+00:00 | Vulnerability · Source |
| CVE-2026-44893 | redhat_vex | netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message | fixed: 10 known affected: 24 known not affected: 67 | 2026-07-20T15:18:24+00:00 | Vulnerability · Source |
| CVE-2026-44890 | redhat_vex | netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:18:19+00:00 | Vulnerability · Source |
| CVE-2026-44250 | redhat_vex | netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:17:42+00:00 | Vulnerability · Source |
| CVE-2026-44249 | redhat_vex | netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation | fixed: 20 known affected: 32 known not affected: 68 | 2026-07-20T15:17:39+00:00 | Vulnerability · Source |
| CVE-2026-44248 | redhat_vex | netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header | fixed: 2 known affected: 3 known not affected: 3 | 2026-07-20T15:17:36+00:00 | Vulnerability · Source |
| CVE-2026-42583 | redhat_vex | netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder | fixed: 6 known affected: 34 known not affected: 87 | 2026-07-20T15:17:30+00:00 | Vulnerability · Source |
| CVE-2026-40984 | redhat_vex | micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests | fixed: 3 known affected: 21 known not affected: 1 | 2026-07-20T15:17:18+00:00 | Vulnerability · Source |
| CVE-2026-40983 | redhat_vex | micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests | fixed: 2 known affected: 14 known not affected: 4 under investigation: 9 | 2026-07-20T15:17:17+00:00 | Vulnerability · Source |
| CVE-2025-67030 | redhat_vex | org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method | fixed: 1246 known affected: 187 known not affected: 82 | 2026-07-20T15:16:47+00:00 | Vulnerability · Source |
| CVE-2026-63808 | microsoft_vex | exfat: fix potential use-after-free in exfat_find_dir_entry() | known affected: 1 | 2026-07-20T14:47:15+00:00 | Vulnerability · Source |
| CVE-2026-53381 | microsoft_vex | virtiofs: fix UAF on submount umount | known affected: 1 | 2026-07-20T14:47:10+00:00 | Vulnerability · Source |
| CVE-2026-53398 | microsoft_vex | NFSD: Fix SECINFO_NO_NAME decode error cleanup | known affected: 1 | 2026-07-20T14:46:58+00:00 | Vulnerability · Source |
| CVE-2026-63795 | microsoft_vex | 9p: avoid putting oldfid in p9_client_walk() error path | known affected: 1 | 2026-07-20T14:46:53+00:00 | Vulnerability · Source |
| CVE-2026-53382 | microsoft_vex | media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si | known affected: 1 | 2026-07-20T14:46:47+00:00 | Vulnerability · Source |
| CVE-2026-53383 | microsoft_vex | ksmbd: reject non-VALID session in compound request branch | known affected: 1 | 2026-07-20T14:46:41+00:00 | Vulnerability · Source |