VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282995 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53377 | microsoft_vex | drm/msm: always recover the gpu | known affected: 1 | 2026-07-20T14:42:27+00:00 | Vulnerability · Source |
| CVE-2026-63806 | microsoft_vex | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | known affected: 1 | 2026-07-20T14:42:21+00:00 | Vulnerability · Source |
| CVE-2026-53376 | microsoft_vex | drm/amdkfd: Add upper bound check for num_of_nodes | known affected: 1 | 2026-07-20T14:42:15+00:00 | Vulnerability · Source |
| CVE-2026-53403 | microsoft_vex | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | known affected: 1 | 2026-07-20T14:42:10+00:00 | Vulnerability · Source |
| CVE-2026-63793 | microsoft_vex | ntfs: serialize volume label accesses | known affected: 1 | 2026-07-20T14:42:04+00:00 | Vulnerability · Source |
| CVE-2026-53374 | microsoft_vex | drm/amdgpu: zero-initialize GART table on allocation | known affected: 1 | 2026-07-20T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-53392 | microsoft_vex | NFSv4/flexfiles: reject zero filehandle version count | known affected: 1 | 2026-07-20T14:41:52+00:00 | Vulnerability · Source |
| CVE-2026-63811 | microsoft_vex | f2fs: read COW data with the original inode during atomic write | known affected: 1 | 2026-07-20T14:41:46+00:00 | Vulnerability · Source |
| CVE-2026-53401 | microsoft_vex | fbdev: omap2: fix use-after-free in omapfb_mmap | known affected: 1 | 2026-07-20T14:41:41+00:00 | Vulnerability · Source |
| CVE-2026-63810 | microsoft_vex | block: Avoid mounting the bdev pseudo-filesystem in userspace | known affected: 1 | 2026-07-20T14:41:35+00:00 | Vulnerability · Source |
| CVE-2026-63819 | microsoft_vex | f2fs: fix to do sanity check on f2fs_get_node_folio_ra() | known affected: 1 | 2026-07-20T14:41:29+00:00 | Vulnerability · Source |
| CVE-2026-53402 | microsoft_vex | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | known affected: 1 | 2026-07-20T14:41:24+00:00 | Vulnerability · Source |
| CVE-2026-63853 | microsoft_vex | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | known affected: 1 | 2026-07-20T14:41:18+00:00 | Vulnerability · Source |
| CVE-2026-53386 | microsoft_vex | iio: adc: ti-ads1298: add bounds check to pga_settings index | known affected: 1 | 2026-07-20T14:41:12+00:00 | Vulnerability · Source |
| CVE-2026-63825 | microsoft_vex | gcov: use atomic counter updates to fix concurrent access crashes | known affected: 1 | 2026-07-20T14:41:06+00:00 | Vulnerability · Source |
| CVE-2026-63816 | microsoft_vex | f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode | known affected: 1 | 2026-07-20T14:41:01+00:00 | Vulnerability · Source |
| CVE-2026-63805 | microsoft_vex | crypto: nx - fix nx_crypto_ctx_exit argument | known affected: 1 | 2026-07-20T14:40:55+00:00 | Vulnerability · Source |
| CVE-2026-63815 | microsoft_vex | f2fs: bound i_inline_xattr_size for non-inline-xattr inodes | known affected: 1 | 2026-07-20T14:40:50+00:00 | Vulnerability · Source |
| CVE-2026-60005 | microsoft_vex | NGINX ngx_http_slice_module vulnerability | known affected: 1 | 2026-07-20T14:40:26+00:00 | Vulnerability · Source |
| CVE-2026-54171 | microsoft_vex | Excon: redact additional sensitive/risky headers when following redirects | known affected: 1 | 2026-07-20T14:39:56+00:00 | Vulnerability · Source |
| CVE-2026-53393 | redhat_vex | kernel: nfsd: reset write verifier on deferred writeback errors | known affected: 198 known not affected: 77 | 2026-07-20T14:19:11+00:00 | Vulnerability · Source |
| CVE-2026-12080 | redhat_vex | qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys | known affected: 63 known not affected: 20 | 2026-07-20T14:15:49+00:00 | Vulnerability · Source |
| CVE-2026-53387 | redhat_vex | kernel: iio: light: veml6075: add bounds check to veml6075_it_ms index | known not affected: 274 | 2026-07-20T13:56:40+00:00 | Vulnerability · Source |
| CVE-2026-64052 | redhat_vex | kernel: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() | known affected: 184 known not affected: 90 | 2026-07-20T13:47:13+00:00 | Vulnerability · Source |
| CVE-2023-36464 | redhat_vex | pypdf: Possible Infinite Loop when a comment isn't followed by a character | fixed: 10 | 2026-07-20T13:44:32+00:00 | Vulnerability · Source |
| CVE-2026-48934 | redhat_vex | nodejs: Node.js: Certification validation bypass in TLS host verification | fixed: 255 known affected: 14 | 2026-07-20T13:43:52+00:00 | Vulnerability · Source |
| CVE-2026-48930 | redhat_vex | nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling | fixed: 255 known affected: 14 | 2026-07-20T13:43:45+00:00 | Vulnerability · Source |
| CVE-2026-48928 | redhat_vex | Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency | fixed: 255 known affected: 14 | 2026-07-20T13:43:42+00:00 | Vulnerability · Source |
| CVE-2026-48619 | redhat_vex | nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames | fixed: 255 known affected: 14 | 2026-07-20T13:43:35+00:00 | Vulnerability · Source |
| CVE-2026-48615 | redhat_vex | nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling | fixed: 293 | 2026-07-20T13:43:30+00:00 | Vulnerability · Source |
| CVE-2026-9678 | redhat_vex | undici: Undici: Information disclosure due to improper cache-control header parsing | fixed: 247 known affected: 37 known not affected: 8 | 2026-07-20T13:43:26+00:00 | Vulnerability · Source |
| CVE-2026-64084 | redhat_vex | kernel: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR | known not affected: 274 | 2026-07-20T13:42:57+00:00 | Vulnerability · Source |
| CVE-2026-53378 | redhat_vex | kernel: drm/colorop: Fix blob property reference tracking in state lifecycle | known affected: 184 known not affected: 90 | 2026-07-20T13:32:10+00:00 | Vulnerability · Source |
| CVE-2025-62518 | redhat_vex | astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization | known affected: 5 known not affected: 4 | 2026-07-20T13:30:57+00:00 | Vulnerability · Source |
| CVE-2026-48933 | redhat_vex | nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() | fixed: 293 | 2026-07-20T13:24:49+00:00 | Vulnerability · Source |
| CVE-2026-48618 | redhat_vex | nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch | fixed: 293 | 2026-07-20T13:24:46+00:00 | Vulnerability · Source |
| CVE-2026-64148 | redhat_vex | kernel: pds_core: fix error handling in pdsc_devcmd_wait | known not affected: 275 | 2026-07-20T13:23:20+00:00 | Vulnerability · Source |
| CVE-2026-12484 | redhat_vex | keras: torch: Keras: Arbitrary code execution via unsafe deserialization of PyTorch data | known affected: 5 known not affected: 4 | 2026-07-20T13:21:37+00:00 | Vulnerability · Source |
| CVE-2026-53372 | redhat_vex | kernel: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking | known affected: 184 known not affected: 90 | 2026-07-20T13:08:42+00:00 | Vulnerability · Source |
| CVE-2026-45205 | redhat_vex | commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input | known affected: 33 known not affected: 16 | 2026-07-20T13:08:06+00:00 | Vulnerability · Source |
| CVE-2026-64054 | redhat_vex | kernel: net: shaper: reject duplicate leaves in GROUP request | known affected: 184 known not affected: 90 | 2026-07-20T13:03:18+00:00 | Vulnerability · Source |
| CVE-2026-53371 | redhat_vex | kernel: RDMA/ionic: bound node_desc sysfs read with %.64s | known not affected: 274 | 2026-07-20T13:03:13+00:00 | Vulnerability · Source |
| CVE-2026-64063 | redhat_vex | kernel: netfs: Fix streaming write being overwritten | known affected: 76 known not affected: 199 | 2026-07-20T13:02:42+00:00 | Vulnerability · Source |
| CVE-2026-33210 | redhat_vex | ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection | fixed: 177 known not affected: 132 | 2026-07-20T12:57:45+00:00 | Vulnerability · Source |
| CVE-2026-58469 | redhat_vex | wget: GNU Wget: Memory corruption via crafted Metalink URL | known affected: 2 known not affected: 7 | 2026-07-20T12:41:28+00:00 | Vulnerability · Source |
| CVE-2026-9323 | redhat_vex | urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure | known affected: 5 | 2026-07-20T12:41:22+00:00 | Vulnerability · Source |
| CVE-2026-15813 | redhat_vex | kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation | known affected: 42 | 2026-07-20T12:12:39+00:00 | Vulnerability · Source |
| CVE-2026-16254 | redhat_vex | claircore: claircore: Denial of service via out-of-bounds slice in claircore's apk installed-database parser | known affected: 11 | 2026-07-20T12:12:37+00:00 | Vulnerability · Source |
| CVE-2026-64157 | redhat_vex | kernel: netfs: Fix partial invalidation of streaming-write folio | known affected: 76 known not affected: 198 | 2026-07-20T12:12:09+00:00 | Vulnerability · Source |
| CVE-2026-54059 | redhat_vex | python-pillow: Pillow: Denial of Service via crafted PCF font data | fixed: 52 known affected: 2 known not affected: 8 | 2026-07-20T11:51:39+00:00 | Vulnerability · Source |