VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288100 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64271 | redhat_vex | kernel: Input: touchwin - reset the packet index on every complete packet | known not affected: 260 under investigation: 14 | 2026-08-13T18:40:59+00:00 | Vulnerability · Source |
| CVE-2026-68373 | redhat_vex | kernel: Linux kernel: Out-of-bounds read in wifi driver due to length underflow | known affected: 199 known not affected: 77 | 2026-08-13T18:39:22+00:00 | Vulnerability · Source |
| CVE-2026-41602 | redhat_vex | github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation | fixed: 48 known affected: 12 known not affected: 646 | 2026-08-13T18:36:06+00:00 | Vulnerability · Source |
| CVE-2026-7163 | redhat_vex | assisted-service: assisted-service: Authenticated users can gain administrative access to OpenShift clusters via credential disclosure | fixed: 24 known not affected: 64 | 2026-08-13T18:35:54+00:00 | Vulnerability · Source |
| CVE-2024-45338 | redhat_vex | golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html | fixed: 2839 known affected: 115 known not affected: 16025 | 2026-08-13T18:35:32+00:00 | Vulnerability · Source |
| CVE-2024-36880 | redhat_vex | kernel: Bluetooth: qca: add missing firmware sanity checks | fixed: 305 known affected: 112 | 2026-08-13T18:29:30+00:00 | Vulnerability · Source |
| CVE-2023-49568 | redhat_vex | go-git: Maliciously crafted Git server replies can cause DoS on go-git clients | fixed: 612 known affected: 32 known not affected: 7136 under investigation: 1 | 2026-08-13T18:29:11+00:00 | Vulnerability · Source |
| CVE-2026-55827 | redhat_vex | FreeRDP: FreeRDP: Remote code execution via heap out-of-bounds write in RemoteFX decoding | fixed: 130 known affected: 12 known not affected: 12 | 2026-08-13T18:23:14+00:00 | Vulnerability · Source |
| CVE-2026-56852 | redhat_vex | golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input | fixed: 98 known affected: 74 known not affected: 7 under investigation: 57 | 2026-08-13T18:22:58+00:00 | Vulnerability · Source |
| CVE-2026-13321 | redhat_vex | bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | fixed: 326 known affected: 42 known not affected: 5 | 2026-08-13T18:22:55+00:00 | Vulnerability · Source |
| CVE-2026-13204 | redhat_vex | bind: bind9: Unexpected exit with NSEC and NSEC3 both present | fixed: 326 known affected: 42 known not affected: 5 | 2026-08-13T18:22:45+00:00 | Vulnerability · Source |
| CVE-2026-11721 | redhat_vex | bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards | fixed: 326 known affected: 42 known not affected: 5 | 2026-08-13T18:22:38+00:00 | Vulnerability · Source |
| CVE-2026-11622 | redhat_vex | bind: bind9: Potential memory usage beyond configured limits | fixed: 326 known affected: 42 known not affected: 5 | 2026-08-13T18:22:35+00:00 | Vulnerability · Source |
| CVE-2026-59692 | redhat_vex | gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback | fixed: 176 known affected: 13 | 2026-08-13T18:22:21+00:00 | Vulnerability · Source |
| CVE-2026-59691 | redhat_vex | gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer | fixed: 176 known affected: 13 | 2026-08-13T18:22:15+00:00 | Vulnerability · Source |
| CVE-2024-53908 | redhat_vex | django: Potential SQL injection in HasKey(lhs, rhs) on Oracle | fixed: 278 known affected: 6 known not affected: 181 | 2026-08-13T18:14:30+00:00 | Vulnerability · Source |
| CVE-2025-39957 | redhat_vex | kernel: wifi: mac80211: increase scan_ies_len for S1G | known affected: 274 | 2026-08-13T18:08:59+00:00 | Vulnerability · Source |
| CVE-2021-47376 | redhat_vex | kernel: bpf: Add oversize check before call kvcalloc() | known affected: 76 known not affected: 122 | 2026-08-13T18:08:57+00:00 | Vulnerability · Source |
| CVE-2025-40167 | redhat_vex | kernel: ext4: detect invalid INLINE_DATA + EXTENTS flag combination | known affected: 274 | 2026-08-13T18:08:55+00:00 | Vulnerability · Source |
| CVE-2026-23247 | redhat_vex | kernel: Linux kernel: Information disclosure via off-path TCP source port leakage | known affected: 246 known not affected: 28 | 2026-08-13T18:08:50+00:00 | Vulnerability · Source |
| CVE-2025-0426 | redhat_vex | k8s.io/kubernetes: kubelet: node denial of service via kubelet checkpoint API | fixed: 6 known affected: 74 known not affected: 212 | 2026-08-13T18:08:44+00:00 | Vulnerability · Source |
| CVE-2026-68365 | redhat_vex | kernel: USB: serial: io_edgeport: cap received transmit credits | known affected: 199 known not affected: 77 | 2026-08-13T18:08:43+00:00 | Vulnerability · Source |
| CVE-2025-14017 | redhat_vex | curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers | fixed: 3 known affected: 102 | 2026-08-13T18:08:36+00:00 | Vulnerability · Source |
| CVE-2024-7387 | redhat_vex | openshift/builder: Path traversal allows command injection in privileged BuildContainer using docker build strategy | fixed: 684 known not affected: 676 | 2026-08-13T18:08:22+00:00 | Vulnerability · Source |
| CVE-2026-68364 | redhat_vex | kernel: drm/amd/display: Fix ISM dc_lock deadlock during suspend | known affected: 276 | 2026-08-13T18:05:25+00:00 | Vulnerability · Source |
| CVE-2026-68360 | redhat_vex | kernel: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop | known not affected: 276 | 2026-08-13T18:05:23+00:00 | Vulnerability · Source |
| CVE-2025-1686 | redhat_vex | io.pebbletemplates:pebble: Path Traversal Vulnerability in Pebble Templates | known affected: 1 known not affected: 3 | 2026-08-13T18:05:22+00:00 | Vulnerability · Source |
| CVE-2025-22866 | redhat_vex | crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | fixed: 251 known affected: 397 known not affected: 642 | 2026-08-13T18:05:02+00:00 | Vulnerability · Source |
| CVE-2026-68358 | redhat_vex | kernel: hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop | known affected: 79 known not affected: 197 | 2026-08-13T18:05:00+00:00 | Vulnerability · Source |
| CVE-2025-22871 | redhat_vex | net/http: Request smuggling due to acceptance of invalid chunked data in net/http | fixed: 6754 known affected: 60 known not affected: 4566 | 2026-08-13T18:04:13+00:00 | Vulnerability · Source |
| CVE-2026-68356 | redhat_vex | kernel: watchdog: airoha: Prevent division by zero when clock frequency is zero | known not affected: 276 | 2026-08-13T18:04:11+00:00 | Vulnerability · Source |
| CVE-2025-12816 | redhat_vex | node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications | fixed: 460 known affected: 37 known not affected: 2169 | 2026-08-13T18:03:26+00:00 | Vulnerability · Source |
| CVE-2026-68363 | redhat_vex | kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash | known affected: 157 known not affected: 119 | 2026-08-13T18:03:06+00:00 | Vulnerability · Source |
| CVE-2025-24976 | redhat_vex | distribution: Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT | fixed: 24 known affected: 12 known not affected: 296 | 2026-08-13T18:00:21+00:00 | Vulnerability · Source |
| CVE-2025-39727 | redhat_vex | kernel: mm: swap: fix potential buffer overflow in setup_clusters() | fixed: 616 known not affected: 198 | 2026-08-13T18:00:09+00:00 | Vulnerability · Source |
| CVE-2025-39942 | redhat_vex | kernel: Linux kernel (ksmbd): Remote denial of service in smbdirect | known not affected: 274 | 2026-08-13T18:00:04+00:00 | Vulnerability · Source |
| CVE-2025-38285 | redhat_vex | kernel: bpf: Fix WARN() in get_bpf_raw_tp_regs | known affected: 232 known not affected: 42 | 2026-08-13T18:00:04+00:00 | Vulnerability · Source |
| CVE-2026-68347 | redhat_vex | kernel: iommu/amd: Fix IRQ unsafe locking in gdom allocation | known not affected: 276 | 2026-08-13T18:00:00+00:00 | Vulnerability · Source |
| CVE-2025-40129 | redhat_vex | kernel: sunrpc: fix null pointer dereference on zero-length checksum | known affected: 198 known not affected: 76 | 2026-08-13T17:59:59+00:00 | Vulnerability · Source |
| CVE-2026-68346 | redhat_vex | kernel: ALSA: hda: cs35l41: validate and free ACPI mute object | known affected: 77 known not affected: 199 | 2026-08-13T17:59:58+00:00 | Vulnerability · Source |
| CVE-2025-40187 | redhat_vex | kernel: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | known affected: 274 | 2026-08-13T17:59:55+00:00 | Vulnerability · Source |
| CVE-2025-40358 | redhat_vex | kernel: Linux kernel (RISC-V): Information disclosure and denial of service in stacktrace | known not affected: 274 | 2026-08-13T17:59:54+00:00 | Vulnerability · Source |
| CVE-2025-14924 | redhat_vex | transformers: code execution when processing a malicious megatron_gpt2 model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-08-13T17:58:57+00:00 | Vulnerability · Source |
| CVE-2025-14928 | redhat_vex | transformers: code execution when converting a malicious HuBERT model checkpoint | fixed: 40 known affected: 29 known not affected: 636 | 2026-08-13T17:58:56+00:00 | Vulnerability · Source |
| CVE-2025-14921 | redhat_vex | transformers: code execution when processing a malicious Transformer-XL model file | fixed: 39 known affected: 30 known not affected: 635 | 2026-08-13T17:58:48+00:00 | Vulnerability · Source |
| CVE-2025-14927 | redhat_vex | transformers: code execution when converting a malicious SEW-D model checkpoint | fixed: 42 known affected: 29 known not affected: 633 | 2026-08-13T17:58:46+00:00 | Vulnerability · Source |
| CVE-2025-14920 | redhat_vex | transformers: code execution when processing a malicious Perceiver model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-08-13T17:58:43+00:00 | Vulnerability · Source |
| CVE-2025-15467 | redhat_vex | openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing | fixed: 307 known not affected: 218 | 2026-08-13T17:58:38+00:00 | Vulnerability · Source |
| CVE-2025-14926 | redhat_vex | transformers: code execution when converting a malicious SEW model checkpoint | fixed: 42 known affected: 29 known not affected: 633 | 2026-08-13T17:57:26+00:00 | Vulnerability · Source |
| CVE-2025-14930 | redhat_vex | transformers: code execution when processing a malicious GLM4 model file | fixed: 46 known affected: 28 known not affected: 629 | 2026-08-13T17:57:22+00:00 | Vulnerability · Source |