VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64235 | redhat_vex | kernel: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines | known affected: 198 known not affected: 76 | 2026-07-28T09:58:20+00:00 | Vulnerability · Source |
| CVE-2026-64232 | redhat_vex | kernel: block: recompute nr_integrity_segments in blk_insert_cloned_request | known affected: 184 known not affected: 90 | 2026-07-28T09:53:36+00:00 | Vulnerability · Source |
| CVE-2026-64241 | redhat_vex | kernel: gpio: rockchip: teardown bugs and resource leaks | known not affected: 274 | 2026-07-28T09:47:41+00:00 | Vulnerability · Source |
| CVE-2026-64250 | redhat_vex | kernel: LoongArch: Report dying CPU to RCU in stop_this_cpu() | known not affected: 274 | 2026-07-28T09:42:35+00:00 | Vulnerability · Source |
| CVE-2026-64226 | redhat_vex | kernel: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path | known not affected: 274 | 2026-07-28T09:37:29+00:00 | Vulnerability · Source |
| CVE-2026-4367 | redhat_vex | libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing | fixed: 3 known affected: 13 | 2026-07-28T09:33:47+00:00 | Vulnerability · Source |
| CVE-2026-64209 | redhat_vex | kernel: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config | known not affected: 274 | 2026-07-28T09:28:13+00:00 | Vulnerability · Source |
| CVE-2026-64215 | redhat_vex | kernel: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table | known not affected: 274 | 2026-07-28T09:28:12+00:00 | Vulnerability · Source |
| CVE-2026-64255 | redhat_vex | kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | known affected: 184 known not affected: 90 | 2026-07-28T09:17:46+00:00 | Vulnerability · Source |
| CVE-2026-64238 | redhat_vex | kernel: gpio: shared: fix deadlock on shared proxy's parent removal | known affected: 3 known not affected: 274 | 2026-07-28T09:13:44+00:00 | Vulnerability · Source |
| CVE-2026-64254 | redhat_vex | kernel: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR | known affected: 3 known not affected: 274 | 2026-07-28T09:05:45+00:00 | Vulnerability · Source |
| CVE-2026-64212 | redhat_vex | kernel: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it | known affected: 184 known not affected: 90 | 2026-07-28T09:01:33+00:00 | Vulnerability · Source |
| CVE-2026-44432 | redhat_vex | urllib3: urllib3: Denial of Service due to excessive HTTP response decompression | fixed: 191 known affected: 49 known not affected: 1487 | 2026-07-28T09:01:13+00:00 | Vulnerability · Source |
| CVE-2026-64227 | redhat_vex | kernel: ACPI: driver: Check ACPI_COMPANION() against NULL during probe | known affected: 277 | 2026-07-28T08:49:26+00:00 | Vulnerability · Source |
| CVE-2026-64451 | redhat_vex | kernel: tracing: Fix NULL pointer dereference in func_set_flag() | known not affected: 274 | 2026-07-28T08:27:26+00:00 | Vulnerability · Source |
| CVE-2026-64456 | redhat_vex | kernel: hwrng: virtio: clamp device-reported used.len at copy_data() | known affected: 274 known not affected: 1 | 2026-07-28T08:19:26+00:00 | Vulnerability · Source |
| CVE-2026-64418 | redhat_vex | kernel: mm: shrinker: fix shrinker_info teardown race with expansion | known affected: 76 known not affected: 198 | 2026-07-28T08:08:49+00:00 | Vulnerability · Source |
| CVE-2026-53006 | redhat_vex | kernel: ipv6: fix possible UAF in icmpv6_rcv() | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2026-46086 | redhat_vex | kernel: net: bridge: use a stable FDB dst snapshot in RCU readers | fixed: 762 known affected: 64 | 2026-07-28T07:42:38+00:00 | Vulnerability · Source |
| CVE-2026-52993 | redhat_vex | kernel: tipc: fix double-free in tipc_buf_append() | fixed: 459 known affected: 108 known not affected: 42 | 2026-07-28T07:42:37+00:00 | Vulnerability · Source |
| CVE-2026-59922 | redhat_vex | mistune: Mistune: Denial of Service via crafted input | known affected: 24 | 2026-07-28T07:08:37+00:00 | Vulnerability · Source |
| CVE-2026-59924 | redhat_vex | mistune: Mistune: Information disclosure via crafted include paths | known affected: 24 | 2026-07-28T06:32:25+00:00 | Vulnerability · Source |
| CVE-2026-16419 | redhat_vex | chromium-browser: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access | known not affected: 1 | 2026-07-28T05:47:20+00:00 | Vulnerability · Source |
| CVE-2026-16417 | redhat_vex | chromium-browser: Chromium: Information disclosure via uninitialized use in Skia | known not affected: 1 | 2026-07-28T05:47:20+00:00 | Vulnerability · Source |
| CVE-2026-16416 | redhat_vex | chromium-browser: Google Chrome Chromecast: Sandbox Escape via Integer Overflow | known not affected: 1 | 2026-07-28T05:47:18+00:00 | Vulnerability · Source |
| CVE-2026-16414 | redhat_vex | chromium-browser: Chromecast: Chromecast in Google Chrome: Sandbox escape via malicious network traffic | known not affected: 1 | 2026-07-28T05:47:10+00:00 | Vulnerability · Source |
| CVE-2026-16422 | redhat_vex | chromium-browser: Google Chrome: Domain spoofing via insufficient certificate validation | known not affected: 1 | 2026-07-28T05:47:08+00:00 | Vulnerability · Source |
| CVE-2026-16423 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via crafted HTML and UI gestures | known not affected: 1 | 2026-07-28T05:42:30+00:00 | Vulnerability · Source |
| CVE-2026-16415 | redhat_vex | chromium-browser: Google Chrome Extensions: Omnibox spoofing via crafted HTML page | known not affected: 1 | 2026-07-28T05:42:25+00:00 | Vulnerability · Source |
| CVE-2026-16421 | redhat_vex | chromium-browser: Chromium: Arbitrary code execution in WebAudio via a crafted HTML page | known not affected: 1 | 2026-07-28T05:42:19+00:00 | Vulnerability · Source |
| CVE-2026-16418 | redhat_vex | chromium-browser: Chromium: Remote code execution via stack buffer overflow in V8 | known not affected: 1 | 2026-07-28T05:42:19+00:00 | Vulnerability · Source |
| CVE-2026-16424 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape vulnerability in GPU | known not affected: 1 | 2026-07-28T05:42:09+00:00 | Vulnerability · Source |
| CVE-2026-16420 | redhat_vex | chromium-browser: Google Chrome WebAudio: Arbitrary code execution via type confusion in crafted HTML | known not affected: 1 | 2026-07-28T05:42:08+00:00 | Vulnerability · Source |
| CVE-2026-16413 | redhat_vex | chromium-browser: Chromium: Sandbox escape via out-of-bounds write in ANGLE | known not affected: 1 | 2026-07-28T05:41:58+00:00 | Vulnerability · Source |
| CVE-2026-42583 | redhat_vex | netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder | fixed: 6 known affected: 35 known not affected: 86 | 2026-07-28T05:12:35+00:00 | Vulnerability · Source |
| CVE-2026-43727 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-28T04:42:18+00:00 | Vulnerability · Source |
| CVE-2026-43707 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-28T04:42:13+00:00 | Vulnerability · Source |
| CVE-2026-43712 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-28T04:42:12+00:00 | Vulnerability · Source |
| CVE-2026-43732 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information | fixed: 92 known affected: 17 | 2026-07-28T04:42:09+00:00 | Vulnerability · Source |
| CVE-2022-41724 | redhat_vex | golang: crypto/tls: large handshake records may cause panics | fixed: 1716 known affected: 86 known not affected: 2714 | 2026-07-28T04:28:16+00:00 | Vulnerability · Source |
| CVE-2022-29526 | redhat_vex | golang: syscall: faccessat checks wrong group | fixed: 109 known affected: 45 known not affected: 223 | 2026-07-28T04:27:49+00:00 | Vulnerability · Source |
| CVE-2025-61140 | redhat_vex | jsonpath: jsonpath: Prototype Pollution vulnerability in the value function | fixed: 12 known affected: 9 known not affected: 211 | 2026-07-28T03:00:13+00:00 | Vulnerability · Source |
| CVE-2026-27628 | redhat_vex | pypdf: possible infinite loop when loading circular /Prev entries in cross-reference streams | fixed: 23 known affected: 5 known not affected: 321 | 2026-07-28T03:00:12+00:00 | Vulnerability · Source |
| CVE-2026-47825 | redhat_vex | spring-cloud-gateway: Spring Cloud Gateway Server: Security bypass due to untrusted header forwarding | known affected: 2 | 2026-07-28T03:00:12+00:00 | Vulnerability · Source |
| CVE-2026-16389 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Libraries component in NSS | known not affected: 24 | 2026-07-28T03:00:11+00:00 | Vulnerability · Source |
| CVE-2026-64427 | redhat_vex | kernel: HID: logitech-dj: Fix maxfield check in DJ short report validation | known not affected: 274 | 2026-07-28T03:00:11+00:00 | Vulnerability · Source |
| CVE-2026-64189 | redhat_vex | kernel: netfilter: ipset: fix race between dump and ip_set_list resize | known affected: 246 known not affected: 29 | 2026-07-28T03:00:10+00:00 | Vulnerability · Source |
| CVE-2026-64509 | redhat_vex | kernel: rust: block: fix GenDisk cleanup paths | known not affected: 274 | 2026-07-28T03:00:07+00:00 | Vulnerability · Source |
| CVE-2026-64512 | redhat_vex | kernel: ACPI: CPPC: Suppress UBSAN warning caused by field misuse | known affected: 184 known not affected: 90 | 2026-07-28T03:00:06+00:00 | Vulnerability · Source |
| CVE-2026-64398 | redhat_vex | kernel: ksmbd: add a permission check for FSCTL_SET_ZERO_DATA | known not affected: 275 | 2026-07-28T03:00:06+00:00 | Vulnerability · Source |