VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64036 | redhat_vex | kernel: cgroup/rstat: validate cpu before css_rstat_cpu() access | known affected: 198 known not affected: 76 | 2026-07-21T06:22:52+00:00 | Vulnerability · Source |
| CVE-2026-64114 | redhat_vex | kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 | known affected: 274 known not affected: 1 | 2026-07-21T06:02:20+00:00 | Vulnerability · Source |
| CVE-2026-43216 | redhat_vex | kernel: net: Drop the lock in skb_may_tx_timestamp() | known affected: 246 known not affected: 28 | 2026-07-21T05:49:57+00:00 | Vulnerability · Source |
| CVE-2026-45988 | redhat_vex | kernel: rxrpc: Fix re-decryption of RESPONSE packets | known affected: 184 known not affected: 90 | 2026-07-21T05:44:16+00:00 | Vulnerability · Source |
| CVE-2026-64081 | redhat_vex | kernel: firmware: arm_ffa: Validate framework notification message layout | known not affected: 274 | 2026-07-21T05:43:54+00:00 | Vulnerability · Source |
| CVE-2026-64135 | redhat_vex | kernel: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX | known not affected: 275 | 2026-07-21T05:15:42+00:00 | Vulnerability · Source |
| CVE-2026-12382 | redhat_vex | aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing | fixed: 9 known not affected: 653 | 2026-07-21T04:16:22+00:00 | Vulnerability · Source |
| CVE-2026-42503 | redhat_vex | golang: golang.org/x/tools/gopls: gopls: Arbitrary code execution due to insecure network binding | fixed: 8 known not affected: 1 | 2026-07-21T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-41642 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service via malformed BGP UPDATE message | known not affected: 1 | 2026-07-21T03:50:22+00:00 | Vulnerability · Source |
| CVE-2026-42285 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service due to specially crafted BGP UPDATE message | known not affected: 1 | 2026-07-21T03:31:05+00:00 | Vulnerability · Source |
| CVE-2026-44312 | redhat_vex | css_parser: css_parser: Man-in-the-Middle attack due to improper HTTPS certificate validation | known affected: 5 | 2026-07-21T02:01:54+00:00 | Vulnerability · Source |
| CVE-2026-3842 | microsoft_vex | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | fixed: 1 known affected: 1 | 2026-07-21T01:42:10+00:00 | Vulnerability · Source |
| CVE-2026-38755 | microsoft_vex | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:42:02+00:00 | Vulnerability · Source |
| CVE-2026-38754 | microsoft_vex | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-60081 | microsoft_vex | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | fixed: 1 known affected: 1 | 2026-07-21T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-15392 | microsoft_vex | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | fixed: 1 known affected: 1 | 2026-07-21T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-60082 | microsoft_vex | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | fixed: 1 known affected: 1 | 2026-07-21T01:41:17+00:00 | Vulnerability · Source |
| CVE-2026-15043 | microsoft_vex | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text | fixed: 1 known affected: 1 | 2026-07-21T01:41:10+00:00 | Vulnerability · Source |
| CVE-2026-57433 | microsoft_vex | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record | fixed: 1 known affected: 1 | 2026-07-21T01:41:02+00:00 | Vulnerability · Source |
| CVE-2026-48863 | microsoft_vex | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | fixed: 1 known affected: 1 | 2026-07-21T01:40:55+00:00 | Vulnerability · Source |
| CVE-2026-63882 | microsoft_vex | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | known affected: 1 | 2026-07-21T01:04:12+00:00 | Vulnerability · Source |
| CVE-2026-64111 | microsoft_vex | lsm: hold cred_guard_mutex for lsm_set_self_attr() | known affected: 1 | 2026-07-21T01:04:00+00:00 | Vulnerability · Source |
| CVE-2026-63961 | microsoft_vex | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | known affected: 1 | 2026-07-21T01:03:41+00:00 | Vulnerability · Source |
| CVE-2026-63881 | microsoft_vex | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | known affected: 1 | 2026-07-21T01:03:35+00:00 | Vulnerability · Source |
| CVE-2026-63960 | microsoft_vex | usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | known affected: 1 | 2026-07-21T01:03:29+00:00 | Vulnerability · Source |
| CVE-2026-63964 | microsoft_vex | usb: typec: ucsi: ccg: reject firmware images without a ':' record header | known affected: 1 | 2026-07-21T01:03:23+00:00 | Vulnerability · Source |
| CVE-2026-64097 | microsoft_vex | drm/amd/display: Validate GPIO pin LUT table size before iterating | known affected: 1 | 2026-07-21T01:02:50+00:00 | Vulnerability · Source |
| CVE-2026-63954 | microsoft_vex | hpfs: fix a crash if hpfs_map_dnode_bitmap fails | known affected: 1 | 2026-07-21T01:02:44+00:00 | Vulnerability · Source |
| CVE-2026-64015 | microsoft_vex | security/keys: fix missed RCU read section on lookup | known affected: 1 | 2026-07-21T01:02:19+00:00 | Vulnerability · Source |
| CVE-2026-63959 | microsoft_vex | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | known affected: 1 | 2026-07-21T01:02:06+00:00 | Vulnerability · Source |
| CVE-2026-64133 | microsoft_vex | ALSA: asihpi: Fix potential OOB array access at reading cache | known affected: 1 | 2026-07-21T01:01:42+00:00 | Vulnerability · Source |
| CVE-2026-3085 | redhat_vex | gstreamer-plugins-good: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay | fixed: 1369 known affected: 3 known not affected: 3 | 2026-07-20T19:06:56+00:00 | Vulnerability · Source |
| CVE-2026-3082 | redhat_vex | gstreamer-plugins-bad: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser | fixed: 1319 known affected: 5 known not affected: 7 | 2026-07-20T18:57:28+00:00 | Vulnerability · Source |
| CVE-2026-3083 | redhat_vex | gstreamer-plugins-good: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay | fixed: 1369 known affected: 3 known not affected: 3 | 2026-07-20T18:57:24+00:00 | Vulnerability · Source |
| CVE-2026-2923 | redhat_vex | gstreamer-plugins-bad: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling | fixed: 711 known not affected: 16 | 2026-07-20T18:51:16+00:00 | Vulnerability · Source |
| CVE-2026-2921 | redhat_vex | gstreamer-plugins-base: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling | fixed: 1369 known affected: 3 known not affected: 3 | 2026-07-20T18:45:41+00:00 | Vulnerability · Source |
| CVE-2026-2922 | redhat_vex | gstreamer-plugins-ugly: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer | fixed: 628 known affected: 4 known not affected: 10 | 2026-07-20T18:45:39+00:00 | Vulnerability · Source |
| CVE-2026-2920 | redhat_vex | gstreamer-plugins-ugly: GStreamer: Arbitrary code execution via ASF file processing | fixed: 711 known not affected: 12 | 2026-07-20T18:32:30+00:00 | Vulnerability · Source |
| CVE-2026-63834 | redhat_vex | kernel: batman-adv: tp_meter: restrict number of unacked list entries | known not affected: 275 | 2026-07-20T17:30:54+00:00 | Vulnerability · Source |
| CVE-2026-63826 | redhat_vex | kernel: fbdev: fix use-after-free in store_modes() | known affected: 156 known not affected: 119 | 2026-07-20T17:25:39+00:00 | Vulnerability · Source |
| CVE-2026-63823 | redhat_vex | kernel: keys: Pin request_key_auth payload in instantiate paths | known affected: 274 | 2026-07-20T17:23:53+00:00 | Vulnerability · Source |
| CVE-2026-63822 | redhat_vex | kernel: wifi: ath11k: fix warning when unbinding | known affected: 232 known not affected: 43 | 2026-07-20T17:12:30+00:00 | Vulnerability · Source |
| CVE-2026-64046 | redhat_vex | kernel: net: tls: prevent chain-after-chain in plain text SG | known affected: 232 known not affected: 42 | 2026-07-20T17:12:10+00:00 | Vulnerability · Source |
| CVE-2026-64073 | redhat_vex | kernel: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT | known affected: 184 known not affected: 90 | 2026-07-20T17:11:27+00:00 | Vulnerability · Source |
| CVE-2026-15187 | redhat_vex | enquirer: Enquirer: Prototype pollution vulnerability allows remote attackers to modify object attributes | fixed: 4 known affected: 59 | 2026-07-20T17:11:07+00:00 | Vulnerability · Source |
| CVE-2026-63809 | redhat_vex | kernel: bpf: use kvfree() for replaced sysctl write buffer | known affected: 184 known not affected: 90 | 2026-07-20T17:11:04+00:00 | Vulnerability · Source |
| CVE-2026-53373 | redhat_vex | kernel: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() | known affected: 14 known not affected: 260 | 2026-07-20T17:10:50+00:00 | Vulnerability · Source |
| CVE-2026-53384 | redhat_vex | kernel: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | known affected: 232 known not affected: 42 | 2026-07-20T17:09:40+00:00 | Vulnerability · Source |
| CVE-2026-64080 | redhat_vex | kernel: firmware: arm_ffa: Snapshot notifier callbacks under lock | known not affected: 274 | 2026-07-20T17:09:34+00:00 | Vulnerability · Source |
| CVE-2026-53388 | redhat_vex | kernel: fuse: re-lock request before replacing page cache folio | known affected: 274 known not affected: 1 | 2026-07-20T17:09:28+00:00 | Vulnerability · Source |