VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286604 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64279 | redhat_vex | kernel: i2c: core: fix adapter deregistration race | known affected: 232 known not affected: 43 | 2026-07-29T14:52:50+00:00 | Vulnerability · Source |
| CVE-2026-15900 | redhat_vex | chromium-browser: Google Chrome: Sandbox escape via use after free vulnerability in GPU | known not affected: 1 | 2026-07-29T14:52:48+00:00 | Vulnerability · Source |
| CVE-2026-15901 | redhat_vex | chromium-browser: Chromium: Remote code execution via use-after-free in Network component | known not affected: 1 | 2026-07-29T14:52:47+00:00 | Vulnerability · Source |
| CVE-2026-15903 | redhat_vex | chromium-browser: Chromium: Arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-07-29T14:52:25+00:00 | Vulnerability · Source |
| CVE-2026-15902 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via a crafted HTML page due to a use-after-free vulnerability. | known not affected: 1 | 2026-07-29T14:52:16+00:00 | Vulnerability · Source |
| CVE-2026-15905 | redhat_vex | chromium-browser: Chromium: Heap corruption via use-after-free in Aura | known not affected: 1 | 2026-07-29T14:52:15+00:00 | Vulnerability · Source |
| CVE-2026-64647 | redhat_vex | next: Next.js: Information disclosure via server-side request caching | known affected: 22 | 2026-07-29T14:49:39+00:00 | Vulnerability · Source |
| CVE-2026-64643 | redhat_vex | next: Next.js: Information disclosure via Server Action ID exposure | known affected: 22 | 2026-07-29T14:47:50+00:00 | Vulnerability · Source |
| CVE-2026-64430 | redhat_vex | kernel: NTB: epf: Avoid calling pci_irq_vector() from hardirq context | known not affected: 274 | 2026-07-29T14:28:01+00:00 | Vulnerability · Source |
| CVE-2026-64305 | redhat_vex | kernel: crypto: qat - protect service table iterations with service_lock | known affected: 184 known not affected: 90 | 2026-07-29T14:23:14+00:00 | Vulnerability · Source |
| CVE-2022-1055 | redhat_vex | kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c | fixed: 475 known not affected: 42 | 2026-07-29T14:23:09+00:00 | Vulnerability · Source |
| CVE-2026-24835 | redhat_vex | podman-desktop: extension system vulnerable to authentication bypass | known affected: 4 known not affected: 6 | 2026-07-29T14:23:05+00:00 | Vulnerability · Source |
| CVE-2026-64295 | redhat_vex | kernel: mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access | known affected: 76 known not affected: 198 | 2026-07-29T14:17:53+00:00 | Vulnerability · Source |
| CVE-2026-64330 | redhat_vex | kernel: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() | known affected: 232 known not affected: 42 | 2026-07-29T14:13:12+00:00 | Vulnerability · Source |
| CVE-2026-56407 | redhat_vex | libexpat: libexpat: Arbitrary code execution due to integer overflow | fixed: 3 known affected: 43 | 2026-07-29T14:13:09+00:00 | Vulnerability · Source |
| CVE-2026-64288 | redhat_vex | kernel: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB | known affected: 76 known not affected: 198 | 2026-07-29T14:07:46+00:00 | Vulnerability · Source |
| CVE-2026-64422 | redhat_vex | kernel: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | known affected: 274 | 2026-07-29T14:07:36+00:00 | Vulnerability · Source |
| CVE-2026-64343 | redhat_vex | kernel: USB: ldusb: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T13:58:29+00:00 | Vulnerability · Source |
| CVE-2026-59888 | redhat_vex | com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records | known affected: 57 known not affected: 137 | 2026-07-29T13:53:21+00:00 | Vulnerability · Source |
| CVE-2026-64374 | redhat_vex | kernel: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | known affected: 48 known not affected: 226 | 2026-07-29T13:53:17+00:00 | Vulnerability · Source |
| CVE-2026-64529 | redhat_vex | kernel: crypto: qat - remove unused character device and IOCTLs | known affected: 184 known not affected: 90 | 2026-07-29T13:53:16+00:00 | Vulnerability · Source |
| CVE-2026-65602 | redhat_vex | traefik: Traefik: Information disclosure and integrity bypass via IngressRouteTCP cross-provider reference | known affected: 1 | 2026-07-29T13:53:12+00:00 | Vulnerability · Source |
| CVE-2026-54761 | redhat_vex | traefik: Traefik: Internal service exposure due to crossProviderNamespaces allowlist misconfiguration | known affected: 1 | 2026-07-29T13:53:09+00:00 | Vulnerability · Source |
| CVE-2026-55737 | redhat_vex | erlang-otp: Erlang OTP: Denial of Service via crafted external term format binary | known not affected: 1 | 2026-07-29T13:52:54+00:00 | Vulnerability · Source |
| CVE-2026-64306 | redhat_vex | kernel: crypto: drbg - Fix returning success on failure in CTR_DRBG | known affected: 274 | 2026-07-29T13:49:00+00:00 | Vulnerability · Source |
| CVE-2026-64492 | redhat_vex | kernel: iio: temperature: tmp006: use devm_iio_trigger_register | known not affected: 274 | 2026-07-29T13:43:18+00:00 | Vulnerability · Source |
| CVE-2026-64505 | redhat_vex | kernel: usb: gadget: function: rndis: add length check for header | known not affected: 274 | 2026-07-29T13:38:57+00:00 | Vulnerability · Source |
| CVE-2026-64834 | redhat_vex | FFmpeg: Denial of Service via crafted RTP/ASF stream | known affected: 8 | 2026-07-29T13:38:10+00:00 | Vulnerability · Source |
| CVE-2026-64263 | redhat_vex | kernel: fuse-uring: fix moving cancelled entry to ent_in_userspace list | known not affected: 274 | 2026-07-29T13:33:19+00:00 | Vulnerability · Source |
| CVE-2026-59948 | redhat_vex | composer/composer: Composer: Arbitrary file write via crafted package name | known not affected: 1 | 2026-07-29T13:33:13+00:00 | Vulnerability · Source |
| CVE-2026-59947 | redhat_vex | composer/composer: Composer: Information disclosure of credentials via debug output | known not affected: 1 | 2026-07-29T13:33:05+00:00 | Vulnerability · Source |
| CVE-2026-64522 | redhat_vex | kernel: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA | known affected: 198 known not affected: 76 | 2026-07-29T13:28:19+00:00 | Vulnerability · Source |
| CVE-2026-64410 | redhat_vex | kernel: netfilter: flowtable: IPIP tunnel hardware offload is not yet support | known affected: 76 known not affected: 198 | 2026-07-29T13:28:10+00:00 | Vulnerability · Source |
| CVE-2026-55969 | redhat_vex | thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound | fixed: 9 known affected: 66 known not affected: 11 | 2026-07-29T13:28:03+00:00 | Vulnerability · Source |
| CVE-2026-64428 | redhat_vex | kernel: gpio: sch: use raw_spinlock_t in the irq startup path | known affected: 14 known not affected: 260 | 2026-07-29T13:24:51+00:00 | Vulnerability · Source |
| CVE-2026-64257 | redhat_vex | kernel: smb: client: reject overlapping data areas in SMB2 responses | known not affected: 274 | 2026-07-29T13:24:48+00:00 | Vulnerability · Source |
| CVE-2026-64506 | redhat_vex | kernel: wifi: rtw89: correct drop logic for malformed AMPDU frames | known not affected: 274 | 2026-07-29T13:24:47+00:00 | Vulnerability · Source |
| CVE-2026-64518 | redhat_vex | kernel: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key() | known not affected: 274 | 2026-07-29T13:24:44+00:00 | Vulnerability · Source |
| CVE-2026-40990 | redhat_vex | spring-cloud-function: Spring Cloud Function: Denial of Service via excessive function registration | under investigation: 1 | 2026-07-29T13:19:21+00:00 | Vulnerability · Source |
| CVE-2026-64436 | redhat_vex | kernel: net: af_key: initialize alg_key_len for IPComp states | known affected: 198 known not affected: 76 | 2026-07-29T13:19:20+00:00 | Vulnerability · Source |
| CVE-2026-64387 | redhat_vex | kernel: smb: client: fix query directory replay double-free | known affected: 184 known not affected: 90 | 2026-07-29T13:12:17+00:00 | Vulnerability · Source |
| CVE-2026-41714 | redhat_vex | spring-amqp: Spring AMQP: Lack of certificate validation in TLS connections | known affected: 3 | 2026-07-29T13:09:53+00:00 | Vulnerability · Source |
| CVE-2026-41701 | redhat_vex | Spring AMQP: Spring AMQP: Predictable correlation IDs may lead to information disclosure | known affected: 3 | 2026-07-29T13:09:48+00:00 | Vulnerability · Source |
| CVE-2026-64344 | redhat_vex | kernel: USB: idmouse: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T13:05:37+00:00 | Vulnerability · Source |
| CVE-2026-64445 | redhat_vex | kernel: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() | known not affected: 275 | 2026-07-29T12:58:22+00:00 | Vulnerability · Source |
| CVE-2026-54919 | redhat_vex | cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends | known not affected: 1 | 2026-07-29T12:53:41+00:00 | Vulnerability · Source |
| CVE-2026-64375 | redhat_vex | kernel: proc: protect ptrace_may_access() with exec_update_lock (FD links) | known affected: 260 under investigation: 14 | 2026-07-29T12:53:38+00:00 | Vulnerability · Source |
| CVE-2026-18220 | redhat_vex | binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing | known not affected: 76 | 2026-07-29T12:53:23+00:00 | Vulnerability · Source |
| CVE-2026-64302 | redhat_vex | kernel: x86/mm: Fix freeing of PMD-sized vmemmap pages | known not affected: 274 | 2026-07-29T12:43:15+00:00 | Vulnerability · Source |
| CVE-2026-64461 | redhat_vex | kernel: PCI: mediatek: Fix IRQ domain leak when port fails to enable | known not affected: 274 | 2026-07-29T12:37:57+00:00 | Vulnerability · Source |