VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53143 | microsoft_vex | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | fixed: 1 known affected: 1 | 2026-06-29T14:45:42+00:00 | Vulnerability · Source |
| CVE-2026-52926 | microsoft_vex | batman-adv: clear current gateway during teardown | fixed: 1 known affected: 1 | 2026-06-29T14:43:29+00:00 | Vulnerability · Source |
| CVE-2026-52916 | microsoft_vex | batman-adv: frag: disallow unicast fragment in fragment | fixed: 1 known affected: 1 | 2026-06-29T14:42:39+00:00 | Vulnerability · Source |
| CVE-2026-56410 | microsoft_vex | xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. | fixed: 1 known affected: 1 | 2026-06-29T14:42:15+00:00 | Vulnerability · Source |
| CVE-2026-56409 | microsoft_vex | xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. | fixed: 1 known affected: 1 | 2026-06-29T14:42:07+00:00 | Vulnerability · Source |
| CVE-2026-56411 | microsoft_vex | xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. | fixed: 1 known affected: 1 | 2026-06-29T14:41:59+00:00 | Vulnerability · Source |
| CVE-2026-49356 | microsoft_vex | Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core | known affected: 1 | 2026-06-29T14:40:53+00:00 | Vulnerability · Source |
| CVE-2026-50219 | microsoft_vex | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur, | fixed: 1 known affected: 1 known not affected: 2 | 2026-06-29T14:40:30+00:00 | Vulnerability · Source |
| CVE-2026-45186 | microsoft_vex | In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. | fixed: 1 known affected: 1 known not affected: 2 | 2026-06-29T14:40:22+00:00 | Vulnerability · Source |
| CVE-2026-41080 | microsoft_vex | libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. | fixed: 1 known affected: 3 known not affected: 4 | 2026-06-29T14:40:10+00:00 | Vulnerability · Source |
| CVE-2026-53655 | microsoft_vex | node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) | known affected: 1 | 2026-06-29T14:40:08+00:00 | Vulnerability · Source |
| CVE-2025-66382 | microsoft_vex | In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time. | fixed: 1 known affected: 7 | 2026-06-29T14:40:01+00:00 | Vulnerability · Source |
| CVE-2026-12246 | redhat_vex | nsd: Out of bounds stack write with crafted APL RR | known not affected: 1 | 2026-06-29T14:03:49+00:00 | Vulnerability · Source |
| CVE-2026-12245 | redhat_vex | NSD: Denial of DNS over TLS service by any DoT client | known not affected: 1 | 2026-06-29T14:03:34+00:00 | Vulnerability · Source |
| CVE-2026-12244 | redhat_vex | nsd: A specially crafted SVCB RR can cause a heap overflow of up to 65509 attacker controlled bytes. | known not affected: 1 | 2026-06-29T14:03:20+00:00 | Vulnerability · Source |
| CVE-2026-53222 | redhat_vex | kernel: ptp: ocp: fix resource freeing order | known not affected: 274 | 2026-06-29T13:55:14+00:00 | Vulnerability · Source |
| CVE-2026-53204 | redhat_vex | kernel: firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe | known not affected: 274 | 2026-06-29T13:55:08+00:00 | Vulnerability · Source |
| CVE-2026-53155 | redhat_vex | kernel: mm/huge_memory: use correct flags for device private PMD entry | known not affected: 274 | 2026-06-29T13:54:59+00:00 | Vulnerability · Source |
| CVE-2026-12490 | redhat_vex | nsd: Bypass of client certificate verification with transfer over TLS | known not affected: 1 | 2026-06-29T13:50:06+00:00 | Vulnerability · Source |
| CVE-2026-54285 | redhat_vex | @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers | known not affected: 20 | 2026-06-29T12:34:11+00:00 | Vulnerability · Source |
| CVE-2026-22977 | redhat_vex | kernel: Kernel: Denial of Service in network socket error handling | known affected: 232 known not affected: 42 | 2026-06-29T12:34:07+00:00 | Vulnerability · Source |
| CVE-2026-50171 | redhat_vex | @angular/common: Angular @angular/common: Denial of Service via malformed digitsInfo parameter | known affected: 1 known not affected: 81 | 2026-06-29T12:01:57+00:00 | Vulnerability · Source |
| CVE-2026-53299 | redhat_vex | kernel: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() | known not affected: 274 | 2026-06-29T11:11:41+00:00 | Vulnerability · Source |
| CVE-2026-53301 | redhat_vex | kernel: reset: amlogic: t7: Fix null reset ops | known not affected: 274 | 2026-06-29T11:04:38+00:00 | Vulnerability · Source |
| CVE-2026-53317 | redhat_vex | kernel: wifi: mt76: mt7921: Place upper limit on station AID | known affected: 232 known not affected: 42 | 2026-06-29T10:08:15+00:00 | Vulnerability · Source |
| CVE-2026-53288 | redhat_vex | kernel: arm64: Reserve an extra page for early kernel mapping | known not affected: 274 | 2026-06-29T09:58:43+00:00 | Vulnerability · Source |
| CVE-2026-53312 | redhat_vex | kernel: iommu/riscv: Remove overflows on the invalidation path | known not affected: 274 | 2026-06-29T09:53:59+00:00 | Vulnerability · Source |
| CVE-2026-53298 | redhat_vex | kernel: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() | known not affected: 274 | 2026-06-29T09:50:50+00:00 | Vulnerability · Source |
| CVE-2026-53302 | redhat_vex | kernel: crypto: eip93 - fix hmac setkey algo selection | known not affected: 274 | 2026-06-29T09:48:26+00:00 | Vulnerability · Source |
| CVE-2026-53308 | redhat_vex | kernel: power: supply: max77705: Free allocated workqueue and fix removal order | known not affected: 274 | 2026-06-29T09:20:40+00:00 | Vulnerability · Source |
| CVE-2026-56766 | redhat_vex | hydra: Hydra: Remote Code Execution via NTLM Authentication Stack Buffer Overflow | known not affected: 1 | 2026-06-29T09:20:40+00:00 | Vulnerability · Source |
| CVE-2026-53320 | redhat_vex | kernel: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() | known not affected: 274 | 2026-06-29T08:48:42+00:00 | Vulnerability · Source |
| CVE-2026-57436 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via heap use-after-free | known affected: 17 | 2026-06-29T08:44:05+00:00 | Vulnerability · Source |
| CVE-2026-57434 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via NULL pointer dereference | known affected: 17 | 2026-06-29T08:44:02+00:00 | Vulnerability · Source |
| CVE-2026-57235 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via out-of-bounds read | known affected: 17 | 2026-06-29T08:43:56+00:00 | Vulnerability · Source |
| CVE-2026-57435 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service due to use-after-free when replacing XML attribute values | known affected: 17 | 2026-06-29T08:39:40+00:00 | Vulnerability · Source |
| CVE-2026-53307 | redhat_vex | kernel: pinctrl: pinconf-generic: Fully validate 'pinmux' property | known not affected: 274 | 2026-06-29T08:39:30+00:00 | Vulnerability · Source |
| CVE-2026-53303 | redhat_vex | kernel: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() | known not affected: 274 | 2026-06-29T08:36:14+00:00 | Vulnerability · Source |
| CVE-2026-53319 | redhat_vex | kernel: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() | known not affected: 274 | 2026-06-29T08:36:13+00:00 | Vulnerability · Source |
| CVE-2026-41696 | redhat_vex | org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation | known affected: 2 | 2026-06-29T07:12:29+00:00 | Vulnerability · Source |
| CVE-2026-41852 | redhat_vex | spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation | known affected: 15 | 2026-06-29T07:00:39+00:00 | Vulnerability · Source |
| CVE-2026-44598 | redhat_vex | shiro: org.apache.shiro/shiro-jakarta-ee: Apache Shiro: Server-Side Request Forgery via forged shiroSavedRequest cookie | known affected: 1 | 2026-06-29T05:57:19+00:00 | Vulnerability · Source |
| CVE-2026-13038 | redhat_vex | chromium-browser: chromium-browser: Use after free in Autofill | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13024 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13025 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13031 | redhat_vex | chromium-browser: chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13033 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read in Blink>InterestGroups | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13032 | redhat_vex | chromium-browser: chromium-browser: Use after free in WebGL | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13027 | redhat_vex | chromium-browser: chromium-browser: Use after free in FileSystem | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13282 | redhat_vex | chromium-browser: chromium-browser: Use after free in Payments | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |