VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297749 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43909 | redhat_vex | OpenImageIO: OpenImageIO: Arbitrary code execution or denial of service via integer overflow in image processing | known not affected: 1 | 2026-06-28T07:38:24+00:00 | Vulnerability · Source |
| CVE-2026-43903 | redhat_vex | OpenImageIO: OpenImageIO: Denial of Service via crafted SGI image file | known not affected: 1 | 2026-06-28T07:38:23+00:00 | Vulnerability · Source |
| CVE-2020-35519 | redhat_vex | kernel: x25_bind out-of-bounds read | known not affected: 93 | 2026-06-28T07:38:23+00:00 | Vulnerability · Source |
| CVE-2020-35506 | redhat_vex | QEMU: use after free vulnerability in esp_do_dma() in hw/scsi/esp.c | known not affected: 110 | 2026-06-28T07:38:21+00:00 | Vulnerability · Source |
| CVE-2026-4371 | redhat_vex | thunderbird: Out of bounds read in IMAP parsing | fixed: 148 known affected: 5 | 2026-06-28T07:38:18+00:00 | Vulnerability · Source |
| CVE-2026-43498 | redhat_vex | kernel: accel/ivpu: Disallow re-exporting imported GEM objects | known not affected: 274 | 2026-06-28T07:38:16+00:00 | Vulnerability · Source |
| CVE-2026-43507 | redhat_vex | Prosody: Prosody: Denial of Service via XML parsing resource amplification | known not affected: 1 | 2026-06-28T07:38:14+00:00 | Vulnerability · Source |
| CVE-2026-43505 | redhat_vex | Prosody: mod_proxy65: Prosody: Unauthorized traffic relay via mod_proxy65 access control flaw | known not affected: 1 | 2026-06-28T07:38:14+00:00 | Vulnerability · Source |
| CVE-2026-43497 | redhat_vex | kernel: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free | known not affected: 274 | 2026-06-28T07:38:12+00:00 | Vulnerability · Source |
| CVE-2020-29660 | redhat_vex | kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-after-free | fixed: 150 known affected: 29 known not affected: 14 | 2026-06-28T07:38:11+00:00 | Vulnerability · Source |
| CVE-2020-29661 | redhat_vex | kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free | fixed: 1219 known not affected: 52 | 2026-06-28T07:38:11+00:00 | Vulnerability · Source |
| CVE-2026-43490 | redhat_vex | kernel: ksmbd: validate inherited ACE SID length | known not affected: 274 | 2026-06-28T07:38:10+00:00 | Vulnerability · Source |
| CVE-2026-43489 | redhat_vex | kernel: liveupdate: luo_file: remember retrieve() status | known not affected: 274 | 2026-06-28T07:38:09+00:00 | Vulnerability · Source |
| CVE-2026-43474 | redhat_vex | kernel: fs: init flags_valid before calling vfs_fileattr_get | known not affected: 274 | 2026-06-28T07:38:09+00:00 | Vulnerability · Source |
| CVE-2026-43484 | redhat_vex | kernel: mmc: core: Avoid bitfield RMW for claim/retune flags | known affected: 274 | 2026-06-28T07:38:08+00:00 | Vulnerability · Source |
| CVE-2026-43487 | redhat_vex | kernel: ata: libata-core: Disable LPM on ST1000DM010-2EP102 | known affected: 198 known not affected: 76 | 2026-06-28T07:38:08+00:00 | Vulnerability · Source |
| CVE-2026-43478 | redhat_vex | kernel: ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put | known affected: 184 known not affected: 90 | 2026-06-28T07:38:05+00:00 | Vulnerability · Source |
| CVE-2026-43479 | redhat_vex | kernel: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | known not affected: 274 | 2026-06-28T07:38:05+00:00 | Vulnerability · Source |
| CVE-2026-43473 | redhat_vex | kernel: scsi: mpi3mr: Add NULL checks when resetting request and reply queues | known affected: 232 known not affected: 42 | 2026-06-28T07:38:05+00:00 | Vulnerability · Source |
| CVE-2020-29534 | redhat_vex | kernel: io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd() allowing for privileges escalation | known not affected: 92 | 2026-06-28T07:38:04+00:00 | Vulnerability · Source |
| CVE-2026-43471 | redhat_vex | kernel: scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() | known affected: 76 known not affected: 198 | 2026-06-28T07:38:03+00:00 | Vulnerability · Source |
| CVE-2020-29372 | redhat_vex | kernel: IORING_OP_MADVISE races with coredumping | known not affected: 93 | 2026-06-28T07:38:00+00:00 | Vulnerability · Source |
| CVE-2020-29371 | redhat_vex | kernel: crafted romfs filesystem leaks uninitialized memory to userspace | known affected: 12 known not affected: 92 | 2026-06-28T07:38:00+00:00 | Vulnerability · Source |
| CVE-2020-29373 | redhat_vex | kernel: Insecure handling of root directory for path lookups via io_uring | known not affected: 93 | 2026-06-28T07:38:00+00:00 | Vulnerability · Source |
| CVE-2026-43463 | redhat_vex | kernel: rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() | known affected: 184 known not affected: 90 | 2026-06-28T07:37:59+00:00 | Vulnerability · Source |
| CVE-2020-29370 | redhat_vex | kernel: Race condition in SLUB bulk alloc slowpath | known not affected: 93 | 2026-06-28T07:37:56+00:00 | Vulnerability · Source |
| CVE-2020-29369 | redhat_vex | kernel: race condition between expand_downwards and expand_upwards and page-table free operations from an munmap call | known not affected: 104 | 2026-06-28T07:37:56+00:00 | Vulnerability · Source |
| CVE-2026-43460 | redhat_vex | kernel: spi: rockchip-sfc: Fix double-free in remove() callback | known not affected: 274 | 2026-06-28T07:37:56+00:00 | Vulnerability · Source |
| CVE-2026-43461 | redhat_vex | kernel: spi: amlogic: spifc-a4: Fix DMA mapping error handling | known not affected: 274 | 2026-06-28T07:37:56+00:00 | Vulnerability · Source |
| CVE-2026-43458 | redhat_vex | kernel: serial: caif: hold tty->link reference in ldisc_open and ser_release | known not affected: 274 | 2026-06-28T07:37:55+00:00 | Vulnerability · Source |
| CVE-2020-2922 | redhat_vex | mysql: C API unspecified vulnerability (CPU Apr 2020) | fixed: 1412 known affected: 23 | 2026-06-28T07:37:55+00:00 | Vulnerability · Source |
| CVE-2026-43455 | redhat_vex | kernel: mctp: route: hold key->lock in mctp_flow_prepare_output() | known not affected: 274 | 2026-06-28T07:37:53+00:00 | Vulnerability · Source |
| CVE-2020-2928 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:53+00:00 | Vulnerability · Source |
| CVE-2020-2925 | redhat_vex | mysql: Server: PS unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:52+00:00 | Vulnerability · Source |
| CVE-2020-2926 | redhat_vex | mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:52+00:00 | Vulnerability · Source |
| CVE-2020-2924 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:51+00:00 | Vulnerability · Source |
| CVE-2020-2923 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:51+00:00 | Vulnerability · Source |
| CVE-2020-2921 | redhat_vex | mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:50+00:00 | Vulnerability · Source |
| CVE-2020-2904 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:49+00:00 | Vulnerability · Source |
| CVE-2026-43448 | redhat_vex | kernel: nvme-pci: Fix race bug in nvme_poll_irqdisable() | known affected: 232 known not affected: 42 | 2026-06-28T07:37:47+00:00 | Vulnerability · Source |
| CVE-2026-43449 | redhat_vex | kernel: Linux kernel: NVMe PCI driver slab-out-of-bounds can lead to privilege escalation or denial of service | known affected: 232 known not affected: 42 | 2026-06-28T07:37:47+00:00 | Vulnerability · Source |
| CVE-2020-28941 | redhat_vex | kernel: NULL pointer dereference in spk_ttyio_ldisc_close function in drivers/accessibility/speakup/spk_ttyio.c | known not affected: 104 | 2026-06-28T07:37:47+00:00 | Vulnerability · Source |
| CVE-2020-2892 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:46+00:00 | Vulnerability · Source |
| CVE-2026-43443 | redhat_vex | kernel: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition | known affected: 184 known not affected: 90 | 2026-06-28T07:37:44+00:00 | Vulnerability · Source |
| CVE-2026-43442 | redhat_vex | kernel: io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops | known not affected: 274 | 2026-06-28T07:37:43+00:00 | Vulnerability · Source |
| CVE-2026-43439 | redhat_vex | kernel: cgroup: fix race between task migration and iteration | known affected: 232 known not affected: 42 | 2026-06-28T07:37:43+00:00 | Vulnerability · Source |
| CVE-2020-2893 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:37:41+00:00 | Vulnerability · Source |
| CVE-2020-28916 | redhat_vex | QEMU: e1000e: infinite loop scenario in case of null packet descriptor | fixed: 838 known affected: 49 known not affected: 63 | 2026-06-28T07:37:40+00:00 | Vulnerability · Source |
| CVE-2026-43438 | redhat_vex | kernel: sched_ext: Remove redundant css_put() in scx_cgroup_init() | known not affected: 274 | 2026-06-28T07:37:40+00:00 | Vulnerability · Source |
| CVE-2026-43426 | redhat_vex | kernel: usb: renesas_usbhs: fix use-after-free in ISR during device removal | known not affected: 274 | 2026-06-28T07:37:38+00:00 | Vulnerability · Source |