VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286604 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33930 | redhat_vex | Apache Traffic Server: Apache Traffic Server: Denial of Service via over-long Host header | known not affected: 1 | 2026-07-29T12:33:41+00:00 | Vulnerability · Source |
| CVE-2026-64404 | redhat_vex | kernel: Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() | known affected: 184 known not affected: 90 | 2026-07-29T12:33:39+00:00 | Vulnerability · Source |
| CVE-2026-64425 | redhat_vex | kernel: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | known not affected: 274 | 2026-07-29T12:22:51+00:00 | Vulnerability · Source |
| CVE-2026-64491 | redhat_vex | kernel: ALSA: usx2y: us144mkii: fix work UAF on disconnect | known affected: 184 known not affected: 90 | 2026-07-29T12:22:42+00:00 | Vulnerability · Source |
| CVE-2026-64348 | redhat_vex | kernel: usb: free iso schedules on failed submit | known not affected: 274 | 2026-07-29T12:17:14+00:00 | Vulnerability · Source |
| CVE-2026-64519 | redhat_vex | kernel: NFSD: Fix infinite loop in layout state revocation | known affected: 198 known not affected: 76 | 2026-07-29T12:12:47+00:00 | Vulnerability · Source |
| CVE-2026-64376 | redhat_vex | kernel: firmware_loader: fix device reference leak in firmware_upload_register() | known affected: 184 known not affected: 90 | 2026-07-29T12:02:34+00:00 | Vulnerability · Source |
| CVE-2026-44891 | redhat_vex | io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder | known affected: 4 known not affected: 1 | 2026-07-29T12:02:26+00:00 | Vulnerability · Source |
| CVE-2026-64454 | redhat_vex | kernel: usb: dwc3: run gadget disconnect from sleepable suspend context | known affected: 184 known not affected: 90 | 2026-07-29T11:52:37+00:00 | Vulnerability · Source |
| CVE-2026-64472 | redhat_vex | kernel: vfio/mlx5: Fix racy bitfields and tighten struct layout | known affected: 184 known not affected: 90 | 2026-07-29T11:47:25+00:00 | Vulnerability · Source |
| CVE-2025-71319 | redhat_vex | image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. | fixed: 3 known affected: 14 known not affected: 48 | 2026-07-29T11:47:21+00:00 | Vulnerability · Source |
| CVE-2026-64338 | redhat_vex | kernel: USB: misc: uss720: unregister parport on probe failure | known affected: 198 known not affected: 76 | 2026-07-29T11:37:11+00:00 | Vulnerability · Source |
| CVE-2026-64298 | redhat_vex | kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | known affected: 274 | 2026-07-29T11:37:11+00:00 | Vulnerability · Source |
| CVE-2026-64334 | redhat_vex | kernel: USB: serial: digi_acceleport: fix hard lockup on disconnect | known affected: 274 | 2026-07-29T11:32:48+00:00 | Vulnerability · Source |
| CVE-2026-64511 | redhat_vex | kernel: ACPI: NFIT: core: Fix possible NULL pointer dereference | known affected: 184 known not affected: 90 | 2026-07-29T11:32:45+00:00 | Vulnerability · Source |
| CVE-2026-64423 | redhat_vex | kernel: ipv4: igmp: remove multicast group from hash table on device destruction | known affected: 246 known not affected: 28 | 2026-07-29T11:27:25+00:00 | Vulnerability · Source |
| CVE-2026-64372 | redhat_vex | kernel: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | known affected: 28 known not affected: 246 | 2026-07-29T11:27:17+00:00 | Vulnerability · Source |
| CVE-2026-64478 | redhat_vex | kernel: ALSA: usb-audio: avoid kobject path lookup in DualSense match | known affected: 198 known not affected: 76 | 2026-07-29T11:22:36+00:00 | Vulnerability · Source |
| CVE-2026-14586 | redhat_vex | unbound: Unbound: Denial of Service via assertion failure in DNS-over-QUIC environments | fixed: 4 known affected: 15 known not affected: 15 | 2026-07-29T11:22:31+00:00 | Vulnerability · Source |
| CVE-2026-59883 | redhat_vex | guzzle/guzzle: Guzzle: Cross-host cookie disclosure and injection due to improper domain matching in CookieJar. | known not affected: 1 | 2026-07-29T11:22:15+00:00 | Vulnerability · Source |
| CVE-2026-64495 | redhat_vex | kernel: iio: gyro: bmg160: bail out when bandwidth/filter is not in table | known not affected: 274 | 2026-07-29T11:19:24+00:00 | Vulnerability · Source |
| CVE-2026-29509 | redhat_vex | patool: Patool: Arbitrary file write via path traversal in archive extraction | known not affected: 1 | 2026-07-29T11:19:23+00:00 | Vulnerability · Source |
| CVE-2026-64494 | redhat_vex | kernel: iio: light: gp2ap002: fix runtime PM leak on read error | known not affected: 274 | 2026-07-29T11:14:57+00:00 | Vulnerability · Source |
| CVE-2026-64400 | redhat_vex | kernel: ksmbd: prevent path traversal bypass by restricting caseless retry | known not affected: 274 | 2026-07-29T11:14:53+00:00 | Vulnerability · Source |
| CVE-2026-64280 | redhat_vex | kernel: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | known not affected: 274 | 2026-07-29T11:14:48+00:00 | Vulnerability · Source |
| CVE-2026-64496 | redhat_vex | kernel: iio: event: Fix event FIFO reset race | known affected: 260 known not affected: 15 | 2026-07-29T11:09:28+00:00 | Vulnerability · Source |
| CVE-2026-64368 | redhat_vex | kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | known affected: 184 known not affected: 91 | 2026-07-29T11:09:26+00:00 | Vulnerability · Source |
| CVE-2026-64402 | redhat_vex | kernel: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() | known not affected: 274 | 2026-07-29T11:09:04+00:00 | Vulnerability · Source |
| CVE-2026-64357 | redhat_vex | kernel: xfs: fix exchmaps reservation limit check | known affected: 184 known not affected: 90 | 2026-07-29T10:47:59+00:00 | Vulnerability · Source |
| CVE-2026-64275 | redhat_vex | kernel: Input: elan_i2c - prevent division by zero and arithmetic underflow | known affected: 232 known not affected: 42 | 2026-07-29T10:44:26+00:00 | Vulnerability · Source |
| CVE-2026-64517 | redhat_vex | kernel: drm/xe/gsc: Fix double-free of managed BO in error path | known affected: 184 known not affected: 90 | 2026-07-29T10:43:22+00:00 | Vulnerability · Source |
| CVE-2026-42875 | redhat_vex | external-secrets: External Secrets Operator: Namespace boundary bypass allows unauthorized access to CA material | known not affected: 1 | 2026-07-29T10:43:17+00:00 | Vulnerability · Source |
| CVE-2026-54572 | redhat_vex | rclone: Rclone: Arbitrary file write via malicious symbolic link handling | known not affected: 1 | 2026-07-29T10:42:42+00:00 | Vulnerability · Source |
| CVE-2026-64466 | redhat_vex | kernel: rust_binder: clear freeze listener on node removal | known not affected: 274 | 2026-07-29T10:39:17+00:00 | Vulnerability · Source |
| CVE-2026-8926 | redhat_vex | curl: curl: Information disclosure via incorrect .netrc password lookup | fixed: 7 known affected: 8 known not affected: 19 | 2026-07-29T10:39:14+00:00 | Vulnerability · Source |
| CVE-2026-16805 | redhat_vex | chromium-browser: chromium-browser: Use after free in Blink | known not affected: 1 | 2026-07-29T10:38:29+00:00 | Vulnerability · Source |
| CVE-2026-64394 | redhat_vex | kernel: ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY | known not affected: 274 | 2026-07-29T10:33:32+00:00 | Vulnerability · Source |
| CVE-2026-64514 | redhat_vex | kernel: userfaultfd: gate must_wait writability check on pte_present() | known affected: 260 known not affected: 14 | 2026-07-29T10:31:12+00:00 | Vulnerability · Source |
| CVE-2026-64273 | redhat_vex | kernel: Input: iforce - bound the device-reported force-feedback effect index | known affected: 184 known not affected: 90 | 2026-07-29T10:31:10+00:00 | Vulnerability · Source |
| CVE-2026-64464 | redhat_vex | kernel: xhci: sideband: fix ring sg table pages leak | known affected: 184 known not affected: 90 | 2026-07-29T10:31:06+00:00 | Vulnerability · Source |
| CVE-2026-64316 | redhat_vex | kernel: crypto: caam - use print_hex_dump_devel to guard key hex dumps | known affected: 184 known not affected: 90 | 2026-07-29T10:30:48+00:00 | Vulnerability · Source |
| CVE-2026-64507 | redhat_vex | kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation | known affected: 274 | 2026-07-29T10:26:30+00:00 | Vulnerability · Source |
| CVE-2026-64364 | redhat_vex | kernel: HID: multitouch: fix out-of-bounds bit access on mt_io_flags | known not affected: 261 under investigation: 14 | 2026-07-29T10:20:37+00:00 | Vulnerability · Source |
| CVE-2026-17523 | redhat_vex | kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges | known affected: 48 known not affected: 226 | 2026-07-29T10:12:35+00:00 | Vulnerability · Source |
| CVE-2026-18201 | redhat_vex | keycloak-services: keycloak-services: Generic identity-provider creation can bind brokers to organizations without manage-organizations | known affected: 3 known not affected: 3 | 2026-07-29T10:07:58+00:00 | Vulnerability · Source |
| CVE-2026-64356 | redhat_vex | kernel: xfs: fix memory leak in xfs_dqinode_metadir_create() | known affected: 184 known not affected: 90 | 2026-07-29T10:07:55+00:00 | Vulnerability · Source |
| CVE-2026-64294 | redhat_vex | kernel: mm: do file ownership checks with the proper mount idmap | known affected: 198 known not affected: 76 | 2026-07-29T10:03:17+00:00 | Vulnerability · Source |
| CVE-2026-18207 | redhat_vex | keycloak-services: keycloak-services: Client policy source-group condition bypass via duplicate group name matching | known affected: 3 known not affected: 3 | 2026-07-29T10:03:10+00:00 | Vulnerability · Source |
| CVE-2026-44002 | redhat_vex | vm2: vm2: Information disclosure through unsanitized host paths | known affected: 1 known not affected: 1 | 2026-07-29T09:58:30+00:00 | Vulnerability · Source |
| CVE-2026-51235 | redhat_vex | LibRaw: LibRaw: Buffer Overflow vulnerability in image processing | known affected: 3 known not affected: 13 | 2026-07-29T09:58:19+00:00 | Vulnerability · Source |