VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305869 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-93125 | redhat_vex | kernel: bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max | known affected: 186 known not affected: 91 | 2026-10-08T15:01:38+00:00 | Vulnerability · Source |
| CVE-2026-93144 | redhat_vex | kernel: bpf: Reject writes through untrusted BTF pointers | known affected: 186 known not affected: 91 | 2026-10-08T15:01:38+00:00 | Vulnerability · Source |
| CVE-2026-18839 | redhat_vex | popt-devel: popt-static: size_t underflow in singleOptionHelp | fixed: 10 known affected: 14 | 2026-10-08T15:01:36+00:00 | Vulnerability · Source |
| CVE-2026-98371 | redhat_vex | kernel: xfrm: iptfs: fix runt reassembly panic from short inner tot_len | known not affected: 277 | 2026-10-08T14:57:21+00:00 | Vulnerability · Source |
| CVE-2024-9355 | redhat_vex | golang-fips: Golang FIPS zeroed buffer | fixed: 305 known affected: 148 known not affected: 240 | 2026-10-08T14:56:52+00:00 | Vulnerability · Source |
| CVE-2026-77037 | redhat_vex | multer: Multer: Denial of Service via file descriptor leak on aborted uploads | fixed: 2 known affected: 25 known not affected: 14 | 2026-10-08T14:48:27+00:00 | Vulnerability · Source |
| CVE-2026-67422 | redhat_vex | pymdown-extensions: Pymdown-extensions: Denial of Service via Regular Expression Vulnerability | fixed: 3 known not affected: 10 | 2026-10-08T14:47:50+00:00 | Vulnerability · Source |
| CVE-2026-107315 | redhat_vex | org.postgresql/postgresql: PostgreSQL JDBC Driver: Information disclosure via residual send buffer padding | known affected: 11 known not affected: 58 | 2026-10-08T14:39:20+00:00 | Vulnerability · Source |
| CVE-2026-63328 | redhat_vex | github.com/aquasecurity/trivy: Trivy: Path Traversal allows arbitrary file write via malicious plugin | known not affected: 1 | 2026-10-08T14:38:54+00:00 | Vulnerability · Source |
| CVE-2026-37236 | redhat_vex | github.com/grpc-ecosystem/grpc-gateway: grpc-gateway: Access control bypass via X-HTTP-Method-Override header | known affected: 96 known not affected: 90 | 2026-10-08T14:38:44+00:00 | Vulnerability · Source |
| CVE-2026-93812 | redhat_vex | kernel: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr | known affected: 77 known not affected: 200 | 2026-10-08T14:38:35+00:00 | Vulnerability · Source |
| CVE-2026-93827 | redhat_vex | kernel: virtio-fs: avoid double-free on failed queue setup | known affected: 183 known not affected: 92 | 2026-10-08T14:36:33+00:00 | Vulnerability · Source |
| CVE-2026-106412 | redhat_vex | chromium-browser: Race condition in Core | known not affected: 1 | 2026-10-08T14:36:03+00:00 | Vulnerability · Source |
| CVE-2026-106377 | redhat_vex | chromium-browser: Race condition in Fonts | known not affected: 1 | 2026-10-08T14:35:59+00:00 | Vulnerability · Source |
| CVE-2026-106369 | redhat_vex | chromium-browser: Missing authorization in Translate | known not affected: 1 | 2026-10-08T14:35:57+00:00 | Vulnerability · Source |
| CVE-2026-106293 | redhat_vex | chromium-browser: Type confusion in ANGLE | known not affected: 1 | 2026-10-08T14:35:53+00:00 | Vulnerability · Source |
| CVE-2026-106243 | redhat_vex | chromium-browser: Incomplete cleanup in Proxy Auth | known not affected: 1 | 2026-10-08T14:35:50+00:00 | Vulnerability · Source |
| CVE-2026-106239 | redhat_vex | chromium-browser: Integer overflow in WebGL | known not affected: 1 | 2026-10-08T14:35:46+00:00 | Vulnerability · Source |
| CVE-2026-106214 | redhat_vex | chromium-browser: Information leak in Proxy | known not affected: 1 | 2026-10-08T14:35:42+00:00 | Vulnerability · Source |
| CVE-2026-19024 | redhat_vex | hdf5: HDF5: Denial of service via malformed dataset | fixed: 21 known affected: 1 | 2026-10-08T14:25:13+00:00 | Vulnerability · Source |
| CVE-2026-98370 | redhat_vex | kernel: xfrm: fix compat ALLOCSPI request use-after-free | known affected: 200 known not affected: 77 | 2026-10-08T14:23:57+00:00 | Vulnerability · Source |
| CVE-2026-11573 | redhat_vex | qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization | fixed: 23 known affected: 46 | 2026-10-08T14:23:53+00:00 | Vulnerability · Source |
| CVE-2026-98369 | redhat_vex | kernel: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() | known affected: 200 known not affected: 77 | 2026-10-08T14:23:47+00:00 | Vulnerability · Source |
| CVE-2026-98368 | redhat_vex | kernel: esp: downgrade zerocopy managed frags before mutating skb frags | known affected: 198 known not affected: 79 | 2026-10-08T14:23:38+00:00 | Vulnerability · Source |
| CVE-2026-98367 | redhat_vex | kernel: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept | known affected: 158 known not affected: 119 | 2026-10-08T14:23:33+00:00 | Vulnerability · Source |
| CVE-2026-98181 | redhat_vex | kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check() | known affected: 186 known not affected: 91 | 2026-10-08T14:23:29+00:00 | Vulnerability · Source |
| CVE-2026-98180 | redhat_vex | kernel: drm/msm: RCU-free the scheduler-containing ring and VM objects | known not affected: 277 | 2026-10-08T14:23:24+00:00 | Vulnerability · Source |
| CVE-2026-93283 | redhat_vex | kernel: i3c: master: Fix device_register() error path | known affected: 77 known not affected: 200 | 2026-10-08T14:23:21+00:00 | Vulnerability · Source |
| CVE-2026-93262 | redhat_vex | kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() | known affected: 233 known not affected: 42 | 2026-10-08T14:23:17+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 148 known not affected: 66 | 2026-10-08T14:23:05+00:00 | Vulnerability · Source |
| CVE-2026-92925 | redhat_vex | redis: Redis: Out-of-bounds read via crafted cluster bus packets | fixed: 54 known affected: 2 known not affected: 17 | 2026-10-08T14:22:58+00:00 | Vulnerability · Source |
| CVE-2026-92543 | redhat_vex | github.com/moby/moby: Docker Engine: Certificate verification bypass via flawed registry DNS check | known affected: 14 known not affected: 1 | 2026-10-08T14:22:56+00:00 | Vulnerability · Source |
| CVE-2026-85049 | redhat_vex | chromium-browser: skia: chromium-browser: skia: Use after free in Skia | known affected: 22 known not affected: 14 | 2026-10-08T14:22:35+00:00 | Vulnerability · Source |
| CVE-2026-84782 | redhat_vex | openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission | fixed: 147 known affected: 310 known not affected: 403 | 2026-10-08T14:22:31+00:00 | Vulnerability · Source |
| CVE-2026-11788 | redhat_vex | 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser | fixed: 485 known affected: 6 | 2026-10-08T14:15:08+00:00 | Vulnerability · Source |
| CVE-2026-11770 | redhat_vex | 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check | fixed: 485 known affected: 6 | 2026-10-08T14:15:02+00:00 | Vulnerability · Source |
| CVE-2026-76560 | redhat_vex | 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN | fixed: 486 known affected: 15 known not affected: 1 | 2026-10-08T14:14:57+00:00 | Vulnerability · Source |
| CVE-2026-19843 | redhat_vex | 389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor | fixed: 69 known affected: 27 known not affected: 13 | 2026-10-08T14:14:55+00:00 | Vulnerability · Source |
| CVE-2026-18922 | redhat_vex | 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property | fixed: 496 known affected: 1 known not affected: 1 | 2026-10-08T14:14:53+00:00 | Vulnerability · Source |
| CVE-2026-18453 | redhat_vex | 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search | fixed: 486 known affected: 5 known not affected: 1 | 2026-10-08T14:14:49+00:00 | Vulnerability · Source |
| CVE-2026-18355 | redhat_vex | 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() | fixed: 486 known affected: 1 known not affected: 5 | 2026-10-08T14:14:48+00:00 | Vulnerability · Source |
| CVE-2026-15722 | redhat_vex | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing | fixed: 485 known affected: 5 known not affected: 1 | 2026-10-08T14:14:43+00:00 | Vulnerability · Source |
| CVE-2026-94286 | redhat_vex | libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser | fixed: 5 known affected: 12 | 2026-10-08T14:13:06+00:00 | Vulnerability · Source |
| CVE-2026-98176 | redhat_vex | kernel: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc | known affected: 200 known not affected: 77 | 2026-10-08T12:06:30+00:00 | Vulnerability · Source |
| CVE-2023-5752 | redhat_vex | pip: Mercurial configuration injectable in repo revision when installing via pip | fixed: 8 known affected: 5 known not affected: 296 | 2026-10-08T12:06:21+00:00 | Vulnerability · Source |
| CVE-2026-98362 | redhat_vex | kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate | known affected: 235 known not affected: 42 | 2026-10-08T12:06:20+00:00 | Vulnerability · Source |
| CVE-2024-3177 | redhat_vex | kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin | fixed: 24 known affected: 18 known not affected: 277 | 2026-10-08T12:06:19+00:00 | Vulnerability · Source |
| CVE-2026-77408 | redhat_vex | github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow | known affected: 9 known not affected: 5 | 2026-10-08T12:03:08+00:00 | Vulnerability · Source |
| CVE-2026-77301 | redhat_vex | adm-zip: adm-zip: Denial of Service via uncontrolled memory allocation | known affected: 24 known not affected: 2 | 2026-10-08T12:03:07+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 16 known not affected: 691 | 2026-10-08T12:03:02+00:00 | Vulnerability · Source |