VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282985 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53387 | microsoft_vex | iio: light: veml6075: add bounds check to veml6075_it_ms index | known affected: 1 | 2026-07-20T14:43:40+00:00 | Vulnerability · Source |
| CVE-2026-63832 | microsoft_vex | wifi: mt76: add wcid publish check in mt76_sta_add | known affected: 1 | 2026-07-20T14:43:34+00:00 | Vulnerability · Source |
| CVE-2026-53375 | microsoft_vex | drm/amdgpu/vce: Prevent partial address patches | known affected: 1 | 2026-07-20T14:43:29+00:00 | Vulnerability · Source |
| CVE-2026-63829 | microsoft_vex | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | known affected: 1 | 2026-07-20T14:43:23+00:00 | Vulnerability · Source |
| CVE-2026-63818 | microsoft_vex | f2fs: validate orphan inode entry count | known affected: 1 | 2026-07-20T14:43:17+00:00 | Vulnerability · Source |
| CVE-2026-63858 | microsoft_vex | netfilter: nf_tables: add hook transactions for device deletions | known affected: 1 | 2026-07-20T14:43:12+00:00 | Vulnerability · Source |
| CVE-2026-63826 | microsoft_vex | fbdev: fix use-after-free in store_modes() | known affected: 1 | 2026-07-20T14:43:06+00:00 | Vulnerability · Source |
| CVE-2026-53399 | microsoft_vex | nfsd: release layout stid on setlease failure | known affected: 1 | 2026-07-20T14:43:00+00:00 | Vulnerability · Source |
| CVE-2026-63872 | microsoft_vex | esp: fix page frag reference leak on skb_to_sgvec failure | known affected: 1 | 2026-07-20T14:42:55+00:00 | Vulnerability · Source |
| CVE-2026-63871 | microsoft_vex | Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls | known affected: 1 | 2026-07-20T14:42:49+00:00 | Vulnerability · Source |
| CVE-2026-63833 | microsoft_vex | ntfs3: reject direct userspace writes to reserved $LX* xattrs | known affected: 1 | 2026-07-20T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-53400 | microsoft_vex | i2c: core: fix adapter registration race | known affected: 1 | 2026-07-20T14:42:38+00:00 | Vulnerability · Source |
| CVE-2026-53368 | microsoft_vex | f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage | known affected: 1 | 2026-07-20T14:42:32+00:00 | Vulnerability · Source |
| CVE-2026-53377 | microsoft_vex | drm/msm: always recover the gpu | known affected: 1 | 2026-07-20T14:42:27+00:00 | Vulnerability · Source |
| CVE-2026-63806 | microsoft_vex | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | known affected: 1 | 2026-07-20T14:42:21+00:00 | Vulnerability · Source |
| CVE-2026-53376 | microsoft_vex | drm/amdkfd: Add upper bound check for num_of_nodes | known affected: 1 | 2026-07-20T14:42:15+00:00 | Vulnerability · Source |
| CVE-2026-53403 | microsoft_vex | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | known affected: 1 | 2026-07-20T14:42:10+00:00 | Vulnerability · Source |
| CVE-2026-63793 | microsoft_vex | ntfs: serialize volume label accesses | known affected: 1 | 2026-07-20T14:42:04+00:00 | Vulnerability · Source |
| CVE-2026-53374 | microsoft_vex | drm/amdgpu: zero-initialize GART table on allocation | known affected: 1 | 2026-07-20T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-53392 | microsoft_vex | NFSv4/flexfiles: reject zero filehandle version count | known affected: 1 | 2026-07-20T14:41:52+00:00 | Vulnerability · Source |
| CVE-2026-63811 | microsoft_vex | f2fs: read COW data with the original inode during atomic write | known affected: 1 | 2026-07-20T14:41:46+00:00 | Vulnerability · Source |
| CVE-2026-53401 | microsoft_vex | fbdev: omap2: fix use-after-free in omapfb_mmap | known affected: 1 | 2026-07-20T14:41:41+00:00 | Vulnerability · Source |
| CVE-2026-63810 | microsoft_vex | block: Avoid mounting the bdev pseudo-filesystem in userspace | known affected: 1 | 2026-07-20T14:41:35+00:00 | Vulnerability · Source |
| CVE-2026-63819 | microsoft_vex | f2fs: fix to do sanity check on f2fs_get_node_folio_ra() | known affected: 1 | 2026-07-20T14:41:29+00:00 | Vulnerability · Source |
| CVE-2026-53402 | microsoft_vex | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | known affected: 1 | 2026-07-20T14:41:24+00:00 | Vulnerability · Source |
| CVE-2026-63853 | microsoft_vex | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | known affected: 1 | 2026-07-20T14:41:18+00:00 | Vulnerability · Source |
| CVE-2026-53386 | microsoft_vex | iio: adc: ti-ads1298: add bounds check to pga_settings index | known affected: 1 | 2026-07-20T14:41:12+00:00 | Vulnerability · Source |
| CVE-2026-63825 | microsoft_vex | gcov: use atomic counter updates to fix concurrent access crashes | known affected: 1 | 2026-07-20T14:41:06+00:00 | Vulnerability · Source |
| CVE-2026-63816 | microsoft_vex | f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode | known affected: 1 | 2026-07-20T14:41:01+00:00 | Vulnerability · Source |
| CVE-2026-63805 | microsoft_vex | crypto: nx - fix nx_crypto_ctx_exit argument | known affected: 1 | 2026-07-20T14:40:55+00:00 | Vulnerability · Source |
| CVE-2026-63815 | microsoft_vex | f2fs: bound i_inline_xattr_size for non-inline-xattr inodes | known affected: 1 | 2026-07-20T14:40:50+00:00 | Vulnerability · Source |
| CVE-2026-60005 | microsoft_vex | NGINX ngx_http_slice_module vulnerability | known affected: 1 | 2026-07-20T14:40:26+00:00 | Vulnerability · Source |
| CVE-2026-54171 | microsoft_vex | Excon: redact additional sensitive/risky headers when following redirects | known affected: 1 | 2026-07-20T14:39:56+00:00 | Vulnerability · Source |
| CVE-2026-53393 | redhat_vex | kernel: nfsd: reset write verifier on deferred writeback errors | known affected: 198 known not affected: 77 | 2026-07-20T14:19:11+00:00 | Vulnerability · Source |
| CVE-2026-12080 | redhat_vex | qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys | known affected: 63 known not affected: 20 | 2026-07-20T14:15:49+00:00 | Vulnerability · Source |
| CVE-2026-53387 | redhat_vex | kernel: iio: light: veml6075: add bounds check to veml6075_it_ms index | known not affected: 274 | 2026-07-20T13:56:40+00:00 | Vulnerability · Source |
| CVE-2026-64052 | redhat_vex | kernel: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() | known affected: 184 known not affected: 90 | 2026-07-20T13:47:13+00:00 | Vulnerability · Source |
| CVE-2023-36464 | redhat_vex | pypdf: Possible Infinite Loop when a comment isn't followed by a character | fixed: 10 | 2026-07-20T13:44:32+00:00 | Vulnerability · Source |
| CVE-2026-48934 | redhat_vex | nodejs: Node.js: Certification validation bypass in TLS host verification | fixed: 255 known affected: 14 | 2026-07-20T13:43:52+00:00 | Vulnerability · Source |
| CVE-2026-48930 | redhat_vex | nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling | fixed: 255 known affected: 14 | 2026-07-20T13:43:45+00:00 | Vulnerability · Source |
| CVE-2026-48928 | redhat_vex | Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency | fixed: 255 known affected: 14 | 2026-07-20T13:43:42+00:00 | Vulnerability · Source |
| CVE-2026-48619 | redhat_vex | nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames | fixed: 255 known affected: 14 | 2026-07-20T13:43:35+00:00 | Vulnerability · Source |
| CVE-2026-48615 | redhat_vex | nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling | fixed: 293 | 2026-07-20T13:43:30+00:00 | Vulnerability · Source |
| CVE-2026-9678 | redhat_vex | undici: Undici: Information disclosure due to improper cache-control header parsing | fixed: 247 known affected: 37 known not affected: 8 | 2026-07-20T13:43:26+00:00 | Vulnerability · Source |
| CVE-2026-64084 | redhat_vex | kernel: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR | known not affected: 274 | 2026-07-20T13:42:57+00:00 | Vulnerability · Source |
| CVE-2026-53378 | redhat_vex | kernel: drm/colorop: Fix blob property reference tracking in state lifecycle | known affected: 184 known not affected: 90 | 2026-07-20T13:32:10+00:00 | Vulnerability · Source |
| CVE-2025-62518 | redhat_vex | astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization | known affected: 5 known not affected: 4 | 2026-07-20T13:30:57+00:00 | Vulnerability · Source |
| CVE-2026-48933 | redhat_vex | nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() | fixed: 293 | 2026-07-20T13:24:49+00:00 | Vulnerability · Source |
| CVE-2026-48618 | redhat_vex | nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch | fixed: 293 | 2026-07-20T13:24:46+00:00 | Vulnerability · Source |
| CVE-2026-64148 | redhat_vex | kernel: pds_core: fix error handling in pdsc_devcmd_wait | known not affected: 275 | 2026-07-20T13:23:20+00:00 | Vulnerability · Source |