VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286444 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47184 | redhat_vex | zeroconf: Zeroconf: Denial of Service via uncontrolled memory growth | known not affected: 1 | 2026-07-28T16:33:39+00:00 | Vulnerability · Source |
| CVE-2026-47180 | redhat_vex | zeroconf: Zeroconf: Denial of Service via crafted mDNS packets | known not affected: 1 | 2026-07-28T16:33:34+00:00 | Vulnerability · Source |
| CVE-2026-47183 | redhat_vex | zeroconf: Zeroconf: Denial of Service via unbounded memory growth from mDNS messages | known not affected: 1 | 2026-07-28T16:33:30+00:00 | Vulnerability · Source |
| CVE-2026-48045 | redhat_vex | zeroconf: Zeroconf: Unauthenticated network attacker can cause Denial of Service | known not affected: 1 | 2026-07-28T16:33:29+00:00 | Vulnerability · Source |
| CVE-2026-48487 | redhat_vex | zeroconf: Zeroconf: Data integrity vulnerability via malformed DNS records | known not affected: 1 | 2026-07-28T16:33:27+00:00 | Vulnerability · Source |
| CVE-2026-64481 | redhat_vex | kernel: ALSA: hda/cs35l41: Fix firmware load work teardown | known not affected: 1 | 2026-07-28T16:33:23+00:00 | Vulnerability · Source |
| CVE-2026-53281 | redhat_vex | kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-28T16:33:10+00:00 | Vulnerability · Source |
| CVE-2025-39797 | redhat_vex | kernel: xfrm: Duplicate SPI Handling | fixed: 612 known affected: 112 | 2026-07-28T16:33:07+00:00 | Vulnerability · Source |
| CVE-2026-5674 | redhat_vex | pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading | fixed: 92 known affected: 11 known not affected: 19 | 2026-07-28T16:28:12+00:00 | Vulnerability · Source |
| CVE-2026-64017 | redhat_vex | kernel: blk-mq: pop cached request if it is usable | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-28T16:27:12+00:00 | Vulnerability · Source |
| CVE-2026-52973 | redhat_vex | kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-28T16:27:07+00:00 | Vulnerability · Source |
| CVE-2026-43037 | redhat_vex | kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | fixed: 2455 known affected: 22 known not affected: 1 | 2026-07-28T16:26:24+00:00 | Vulnerability · Source |
| CVE-2026-12505 | redhat_vex | cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | fixed: 147 known affected: 4 | 2026-07-28T16:26:21+00:00 | Vulnerability · Source |
| CVE-2026-44390 | redhat_vex | unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets | fixed: 183 known affected: 11 | 2026-07-28T16:21:34+00:00 | Vulnerability · Source |
| CVE-2026-42534 | redhat_vex | unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic | fixed: 183 known affected: 11 | 2026-07-28T16:21:26+00:00 | Vulnerability · Source |
| CVE-2026-41292 | redhat_vex | unbound: Unbound: Denial of Service via excessive EDNS options | fixed: 183 known affected: 15 known not affected: 2 | 2026-07-28T16:21:22+00:00 | Vulnerability · Source |
| CVE-2026-54099 | redhat_vex | windows-machine-config-operator: windows-machine-config-operator: WICD CSR extra-Organization allows privilege escalation to system:masters | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-28T16:03:22+00:00 | Vulnerability · Source |
| CVE-2026-54100 | redhat_vex | windows-machine-config-operator: windows-machine-config-operator: SSH host key not verified enables credential theft | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-28T16:03:22+00:00 | Vulnerability · Source |
| CVE-2025-8941 | redhat_vex | linux-pam: Incomplete fix for CVE-2025-6020 | fixed: 324 known not affected: 27 | 2026-07-28T16:02:08+00:00 | Vulnerability · Source |
| CVE-2026-64369 | redhat_vex | kernel: s390: Revert support for DCACHE_WORD_ACCESS | known not affected: 1 | 2026-07-28T16:02:01+00:00 | Vulnerability · Source |
| CVE-2026-64385 | redhat_vex | kernel: smb: client: fix double-free in SMB2_ioctl() replay | known not affected: 1 | 2026-07-28T16:02:01+00:00 | Vulnerability · Source |
| CVE-2026-64278 | redhat_vex | kernel: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down | known not affected: 1 | 2026-07-28T15:52:00+00:00 | Vulnerability · Source |
| CVE-2026-64448 | redhat_vex | kernel: smb: client: restrict implied bcc[0] exemption to responses without data area | known not affected: 1 | 2026-07-28T15:52:00+00:00 | Vulnerability · Source |
| CVE-2026-64355 | redhat_vex | kernel: bpf: Reject fragmented frames in devmap | known not affected: 1 | 2026-07-28T15:41:59+00:00 | Vulnerability · Source |
| CVE-2026-64441 | redhat_vex | kernel: staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() | known not affected: 1 | 2026-07-28T15:41:59+00:00 | Vulnerability · Source |
| CVE-2026-64524 | redhat_vex | kernel: drm/hyperv: validate resolution_count and fix WIN8 fallback | known not affected: 1 | 2026-07-28T15:36:58+00:00 | Vulnerability · Source |
| CVE-2026-64332 | redhat_vex | kernel: USB: ulpi: fix memory leak on registration failure | known not affected: 1 | 2026-07-28T15:36:58+00:00 | Vulnerability · Source |
| CVE-2026-64326 | redhat_vex | kernel: block: skip sync_blockdev() on surprise removal in bdev_mark_dead() | known not affected: 1 | 2026-07-28T15:32:00+00:00 | Vulnerability · Source |
| CVE-2025-50327 | redhat_vex | ZPAQFRANZ: ZPAQFRANZ: Privilege escalation and arbitrary code execution via Mark-of-the-Web bypass | known not affected: 1 | 2026-07-28T15:22:00+00:00 | Vulnerability · Source |
| CVE-2024-14040 | redhat_vex | kernel: net: nexthop: Increase weight to u16 | known affected: 108 known not affected: 167 | 2026-07-28T15:16:59+00:00 | Vulnerability · Source |
| CVE-2026-6477 | redhat_vex | postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory | fixed: 3491 known affected: 25 known not affected: 32 | 2026-07-28T15:05:11+00:00 | Vulnerability · Source |
| CVE-2025-23282 | redhat_vex | kvm: NVIDIA Display Driver vulnerability due to race condition leading to escalate privileges | known affected: 37 known not affected: 107 | 2026-07-28T14:27:14+00:00 | Vulnerability · Source |
| CVE-2026-34743 | redhat_vex | xz: XZ Utils: Denial of Service via buffer overflow in index decoding | fixed: 3 known affected: 26 | 2026-07-28T14:13:12+00:00 | Vulnerability · Source |
| CVE-2026-18047 | redhat_vex | dogtag-pki: pki-core: redhat-pki: pki: ACME admin enable/disable endpoint authentication bypass via trailing slash | known affected: 89 | 2026-07-28T14:09:02+00:00 | Vulnerability · Source |
| CVE-2026-6276 | redhat_vex | curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers | fixed: 3 known affected: 95 known not affected: 1 | 2026-07-28T14:04:03+00:00 | Vulnerability · Source |
| CVE-2026-66140 | redhat_vex | exim: Exim: Privilege escalation via directory traversal due to mishandled queue-name arguments | known not affected: 1 | 2026-07-28T14:03:24+00:00 | Vulnerability · Source |
| CVE-2026-7168 | redhat_vex | curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse | fixed: 3 known affected: 25 | 2026-07-28T13:59:48+00:00 | Vulnerability · Source |
| CVE-2026-6732 | redhat_vex | libxml2: libxml2: Denial of Service via crafted XSD-validated document | fixed: 3 known affected: 25 | 2026-07-28T13:49:29+00:00 | Vulnerability · Source |
| CVE-2026-6429 | redhat_vex | curl: libcurl: Credential leak via reused proxy connection during HTTP redirects | fixed: 3 known affected: 95 known not affected: 1 | 2026-07-28T13:49:19+00:00 | Vulnerability · Source |
| CVE-2026-6253 | redhat_vex | curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies | fixed: 3 known affected: 95 known not affected: 1 | 2026-07-28T13:49:15+00:00 | Vulnerability · Source |
| CVE-2026-5545 | redhat_vex | curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse | fixed: 3 known affected: 95 known not affected: 1 | 2026-07-28T13:43:54+00:00 | Vulnerability · Source |
| CVE-2026-31503 | redhat_vex | kernel: udp: Fix wildcard bind conflict check when using hash2 | known affected: 274 | 2026-07-28T13:38:20+00:00 | Vulnerability · Source |
| CVE-2026-23442 | redhat_vex | kernel: ipv6: add NULL checks for idev in SRv6 paths | known affected: 246 known not affected: 28 | 2026-07-28T13:38:15+00:00 | Vulnerability · Source |
| CVE-2026-23247 | redhat_vex | kernel: tcp: secure_seq: add back ports to TS offset | known affected: 246 known not affected: 28 | 2026-07-28T13:28:37+00:00 | Vulnerability · Source |
| CVE-2026-54272 | redhat_vex | ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification | known affected: 130 known not affected: 8 | 2026-07-28T13:11:13+00:00 | Vulnerability · Source |
| CVE-2026-41606 | redhat_vex | Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion | fixed: 36 known affected: 13 known not affected: 439 | 2026-07-28T13:09:10+00:00 | Vulnerability · Source |
| CVE-2026-8090 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Networking component | fixed: 260 known affected: 8 | 2026-07-28T13:08:57+00:00 | Vulnerability · Source |
| CVE-2026-24049 | redhat_vex | wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking | fixed: 176 known affected: 58 known not affected: 7114 | 2026-07-28T13:08:52+00:00 | Vulnerability · Source |
| CVE-2026-8094 | redhat_vex | firefox: thunderbird: Other issue in the WebRTC component | fixed: 260 known affected: 8 | 2026-07-28T13:08:43+00:00 | Vulnerability · Source |
| CVE-2026-64240 | redhat_vex | kernel: media: rc: igorplugusb: fix control request setup packet | known not affected: 274 | 2026-07-28T13:05:39+00:00 | Vulnerability · Source |