VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303453 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-92524 | redhat_vex | kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() | known affected: 234 known not affected: 42 | 2026-09-30T09:18:06+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known not affected: 1 | 2026-09-30T09:14:48+00:00 | Vulnerability · Source |
| CVE-2026-97990 | redhat_vex | kernel: vdpa_sim_net: check TX pull result before RX copy | known affected: 185 known not affected: 91 | 2026-09-30T09:14:45+00:00 | Vulnerability · Source |
| CVE-2026-97498 | redhat_vex | kernel: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction | known affected: 14 known not affected: 262 | 2026-09-30T09:14:39+00:00 | Vulnerability · Source |
| CVE-2026-97497 | redhat_vex | kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id | known affected: 247 known not affected: 29 | 2026-09-30T09:14:35+00:00 | Vulnerability · Source |
| CVE-2026-90407 | redhat_vex | kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() | known affected: 234 known not affected: 42 | 2026-09-30T09:14:33+00:00 | Vulnerability · Source |
| CVE-2026-100666 | redhat_vex | io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec | known affected: 46 known not affected: 7 | 2026-09-30T09:14:29+00:00 | Vulnerability · Source |
| CVE-2026-97991 | redhat_vex | kernel: vdpa_sim_blk: reject out-of-range sector starts | known affected: 234 known not affected: 42 | 2026-09-30T09:14:27+00:00 | Vulnerability · Source |
| CVE-2026-97496 | redhat_vex | kernel: drm/amdkfd: Fix OOB memory exposure in get_wave_state() | known affected: 233 known not affected: 43 | 2026-09-30T09:14:22+00:00 | Vulnerability · Source |
| CVE-2026-79921 | redhat_vex | github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads | fixed: 44 known affected: 4 known not affected: 51 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 4571 known affected: 134 known not affected: 7220 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-97989 | redhat_vex | kernel: vduse: validate virtqueue alignment | known affected: 183 known not affected: 93 | 2026-09-30T08:53:33+00:00 | Vulnerability · Source |
| CVE-2026-92494 | redhat_vex | kernel: ext4: fix buffer_head leak in ext4_init_orphan_info | known affected: 185 known not affected: 91 | 2026-09-30T08:53:32+00:00 | Vulnerability · Source |
| CVE-2026-54875 | redhat_vex | openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V | known affected: 87 known not affected: 1 | 2026-09-30T08:51:44+00:00 | Vulnerability · Source |
| CVE-2026-84375 | redhat_vex | js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing | fixed: 129 known affected: 293 known not affected: 911 | 2026-09-30T08:51:44+00:00 | Vulnerability · Source |
| CVE-2026-95320 | redhat_vex | chromium-browser: chromium: Address bar spoofing via missing authorization in Navigation | known not affected: 1 | 2026-09-30T08:51:08+00:00 | Vulnerability · Source |
| CVE-2026-102633 | redhat_vex | expat: expat: Denial of Service via integer overflow in expat_realloc | known affected: 44 known not affected: 1 | 2026-09-30T08:40:22+00:00 | Vulnerability · Source |
| CVE-2026-97988 | redhat_vex | kernel: vhost: invalidate vring access on IOTLB transitions | known affected: 276 | 2026-09-30T08:40:21+00:00 | Vulnerability · Source |
| CVE-2026-97987 | redhat_vex | kernel: virtio_input: reset device if input_register_device() fails | known affected: 262 known not affected: 14 | 2026-09-30T08:40:14+00:00 | Vulnerability · Source |
| CVE-2026-97986 | redhat_vex | kernel: virtio_input: stop callbacks before unregistering input device | known affected: 262 known not affected: 14 | 2026-09-30T08:40:11+00:00 | Vulnerability · Source |
| CVE-2026-97495 | redhat_vex | kernel: drm/amdkfd: Check bounds on allocate_doorbell | known affected: 247 known not affected: 29 | 2026-09-30T08:40:08+00:00 | Vulnerability · Source |
| CVE-2026-97494 | redhat_vex | kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw | known affected: 248 known not affected: 28 | 2026-09-30T08:40:00+00:00 | Vulnerability · Source |
| CVE-2026-95380 | redhat_vex | chromium-browser: chromium: type confusion in V8 | known not affected: 1 | 2026-09-30T08:38:45+00:00 | Vulnerability · Source |
| CVE-2026-89846 | redhat_vex | kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read | fixed: 762 known affected: 66 | 2026-09-30T08:38:17+00:00 | Vulnerability · Source |
| CVE-2026-68162 | redhat_vex | kernel: sctp: avoid auth_enable sysctl UAF during netns teardown | known affected: 185 known not affected: 90 | 2026-09-30T08:38:01+00:00 | Vulnerability · Source |
| CVE-2026-68108 | redhat_vex | kernel: drm/amdgpu/vce: fix integer overflow in image size | fixed: 612 known affected: 113 | 2026-09-30T08:37:52+00:00 | Vulnerability · Source |
| CVE-2026-43133 | redhat_vex | kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation | fixed: 766 known affected: 23 known not affected: 43 | 2026-09-30T08:37:04+00:00 | Vulnerability · Source |
| CVE-2026-43114 | redhat_vex | kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | fixed: 1483 known affected: 99 known not affected: 91 | 2026-09-30T08:36:55+00:00 | Vulnerability · Source |
| CVE-2026-102582 | redhat_vex | moodle: Manual enrolment page accessible when plugin disabled | known not affected: 1 | 2026-09-30T08:20:32+00:00 | Vulnerability · Source |
| CVE-2026-102587 | redhat_vex | moodle: User list filters bypass profile field visibility | known not affected: 1 | 2026-09-30T08:20:27+00:00 | Vulnerability · Source |
| CVE-2026-102583 | redhat_vex | moodle: Incorrect capability check in AI generate image web service | known not affected: 1 | 2026-09-30T08:20:27+00:00 | Vulnerability · Source |
| CVE-2026-102580 | redhat_vex | moodle: Arbitrary class instantiation via report builder audience classname | known not affected: 1 | 2026-09-30T08:20:26+00:00 | Vulnerability · Source |
| CVE-2026-97985 | redhat_vex | kernel: af_unix: Update last skb marker in manage_oob() | known affected: 90 known not affected: 186 | 2026-09-30T08:20:26+00:00 | Vulnerability · Source |
| CVE-2026-97984 | redhat_vex | kernel: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU | known affected: 90 known not affected: 186 | 2026-09-30T08:20:25+00:00 | Vulnerability · Source |
| CVE-2026-102586 | redhat_vex | moodle: XSS via password reset link due to insufficient username escaping | known not affected: 1 | 2026-09-30T08:13:09+00:00 | Vulnerability · Source |
| CVE-2026-102588 | redhat_vex | moodle: CSRF in XML grade import | known not affected: 1 | 2026-09-30T08:13:09+00:00 | Vulnerability · Source |
| CVE-2026-102585 | redhat_vex | moodle: Group validation missing when enrolling user to course | known not affected: 1 | 2026-09-30T08:13:05+00:00 | Vulnerability · Source |
| CVE-2026-102584 | redhat_vex | moodle: Missing capability check allows unauthorised grade penalty recalculation | known not affected: 1 | 2026-09-30T08:13:04+00:00 | Vulnerability · Source |
| CVE-2026-102579 | redhat_vex | moodle: User profile information disclosure via grade web service | known not affected: 1 | 2026-09-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-102581 | redhat_vex | moodle: XSS in forum post templates due to insufficient escaping | known not affected: 1 | 2026-09-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-97493 | redhat_vex | kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS | known affected: 248 known not affected: 28 | 2026-09-30T08:12:48+00:00 | Vulnerability · Source |
| CVE-2026-93159 | redhat_vex | kernel: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure | known not affected: 276 | 2026-09-30T08:12:45+00:00 | Vulnerability · Source |
| CVE-2026-93056 | redhat_vex | kernel: usb: gadget: f_uac1_legacy: remove broken string configfs attributes | known not affected: 276 | 2026-09-30T08:12:39+00:00 | Vulnerability · Source |
| CVE-2026-102578 | redhat_vex | moodle: SQL injection in question bank web service | known not affected: 1 | 2026-09-30T07:55:14+00:00 | Vulnerability · Source |
| CVE-2026-97983 | redhat_vex | kernel: vduse: return compat ioctl results directly | known not affected: 276 | 2026-09-30T07:26:45+00:00 | Vulnerability · Source |
| CVE-2026-97981 | redhat_vex | kernel: net: ethernet: cortina: Count dropped frames as NAPI work | known not affected: 276 | 2026-09-30T07:26:45+00:00 | Vulnerability · Source |
| CVE-2026-97982 | redhat_vex | kernel: net: ethernet: cortina: Fix budget accounting | known not affected: 276 | 2026-09-30T07:26:45+00:00 | Vulnerability · Source |
| CVE-2026-102577 | redhat_vex | moodle: SSRF risk in URL downloader via IPv4-mapped IPv6 address bypass | known not affected: 1 | 2026-09-30T07:23:17+00:00 | Vulnerability · Source |
| CVE-2026-69504 | microsoft_vex | Windows NTFS Information Disclosure Vulnerability | fixed: 30 known affected: 30 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-69586 | microsoft_vex | Microsoft Windows PDF Remote Code Execution Vulnerability | fixed: 26 known affected: 26 | 2026-09-30T07:00:00+00:00 | Vulnerability · Source |