VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286954 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32286 | redhat_vex | github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server | fixed: 131 known affected: 25 known not affected: 286 | 2026-08-02T16:40:13+00:00 | Vulnerability · Source |
| CVE-2024-34156 | redhat_vex | encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion | fixed: 7045 known affected: 37 known not affected: 2455 | 2026-08-02T16:40:13+00:00 | Vulnerability · Source |
| CVE-2026-23427 | suse_vex | SUSE CVE CVE-2026-23427 | known not affected: 338 | 2026-08-02T16:38:02+00:00 | Vulnerability · Source |
| CVE-2026-23428 | suse_vex | SUSE CVE CVE-2026-23428 | known not affected: 338 | 2026-08-02T16:38:00+00:00 | Vulnerability · Source |
| CVE-2026-25646 | suse_vex | SUSE CVE CVE-2026-25646 | first fixed: 28 known affected: 434 recommended: 387 | 2026-08-02T16:37:58+00:00 | Vulnerability · Source |
| CVE-2026-31409 | suse_vex | SUSE CVE CVE-2026-31409 | known not affected: 338 | 2026-08-02T16:37:54+00:00 | Vulnerability · Source |
| CVE-2026-31410 | suse_vex | SUSE CVE CVE-2026-31410 | known not affected: 338 | 2026-08-02T16:37:52+00:00 | Vulnerability · Source |
| CVE-2026-31716 | suse_vex | SUSE CVE CVE-2026-31716 | known not affected: 293 recommended: 4 | 2026-08-02T16:37:49+00:00 | Vulnerability · Source |
| CVE-2026-40186 | suse_vex | SUSE CVE CVE-2026-40186 | known not affected: 313 | 2026-08-02T16:37:45+00:00 | Vulnerability · Source |
| CVE-2026-43185 | suse_vex | SUSE CVE CVE-2026-43185 | known not affected: 310 | 2026-08-02T16:37:41+00:00 | Vulnerability · Source |
| CVE-2026-43330 | suse_vex | SUSE CVE CVE-2026-43330 | known affected: 394 known not affected: 196 recommended: 196 | 2026-08-02T16:37:39+00:00 | Vulnerability · Source |
| CVE-2026-46193 | suse_vex | SUSE CVE CVE-2026-46193 | known affected: 114 known not affected: 181 recommended: 4 | 2026-08-02T16:37:32+00:00 | Vulnerability · Source |
| CVE-2026-47035 | suse_vex | SUSE CVE CVE-2026-47035 | known not affected: 510 recommended: 2 | 2026-08-02T16:37:30+00:00 | Vulnerability · Source |
| CVE-2026-53379 | suse_vex | SUSE CVE CVE-2026-53379 | known not affected: 298 | 2026-08-02T16:37:26+00:00 | Vulnerability · Source |
| CVE-2026-53382 | suse_vex | SUSE CVE CVE-2026-53382 | known affected: 118 known not affected: 180 recommended: 4 | 2026-08-02T16:37:25+00:00 | Vulnerability · Source |
| CVE-2026-53383 | suse_vex | SUSE CVE CVE-2026-53383 | known not affected: 298 recommended: 4 | 2026-08-02T16:37:23+00:00 | Vulnerability · Source |
| CVE-2026-53387 | suse_vex | SUSE CVE CVE-2026-53387 | known not affected: 298 recommended: 4 | 2026-08-02T16:37:22+00:00 | Vulnerability · Source |
| CVE-2026-55971 | suse_vex | SUSE CVE CVE-2026-55971 | recommended: 9 | 2026-08-02T16:37:19+00:00 | Vulnerability · Source |
| CVE-2026-56741 | suse_vex | SUSE CVE CVE-2026-56741 | known not affected: 35 recommended: 65 | 2026-08-02T16:37:17+00:00 | Vulnerability · Source |
| CVE-2026-63796 | suse_vex | SUSE CVE CVE-2026-63796 | known affected: 298 recommended: 4 | 2026-08-02T16:37:15+00:00 | Vulnerability · Source |
| CVE-2026-63798 | suse_vex | SUSE CVE CVE-2026-63798 | known not affected: 298 recommended: 4 | 2026-08-02T16:37:13+00:00 | Vulnerability · Source |
| CVE-2026-63805 | suse_vex | SUSE CVE CVE-2026-63805 | known not affected: 298 recommended: 4 | 2026-08-02T16:37:12+00:00 | Vulnerability · Source |
| CVE-2025-65945 | redhat_vex | node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm | fixed: 41 known affected: 5 known not affected: 249 | 2026-08-02T16:32:04+00:00 | Vulnerability · Source |
| CVE-2025-15467 | redhat_vex | openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing | fixed: 307 known not affected: 218 | 2026-08-02T16:12:55+00:00 | Vulnerability · Source |
| CVE-2026-45447 | redhat_vex | openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() | fixed: 279 known affected: 12 known not affected: 328 under investigation: 2 | 2026-08-02T16:11:09+00:00 | Vulnerability · Source |
| CVE-2026-64339 | redhat_vex | kernel: usb: misc: usbio: bound bulk IN response length to the received transfer | known affected: 76 known not affected: 198 | 2026-08-02T15:44:28+00:00 | Vulnerability · Source |
| CVE-2026-32829 | redhat_vex | lz4_flex: lz4_flex's decompression can leak information from uninitialized memory or reused output buffer | fixed: 14 known affected: 2 known not affected: 357 | 2026-08-02T15:01:50+00:00 | Vulnerability · Source |
| CVE-2026-64371 | redhat_vex | kernel: proc: protect ptrace_may_access() with exec_update_lock (part 1) | known affected: 275 | 2026-08-02T13:55:35+00:00 | Vulnerability · Source |
| CVE-2026-64446 | redhat_vex | kernel: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() | known affected: 1 known not affected: 274 | 2026-08-02T13:55:31+00:00 | Vulnerability · Source |
| CVE-2026-64500 | redhat_vex | kernel: iio: adc: lpc32xx: Initialize completion before requesting IRQ | known affected: 1 known not affected: 274 | 2026-08-02T13:55:21+00:00 | Vulnerability · Source |
| CVE-2026-64549 | redhat_vex | kernel: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() | known affected: 247 known not affected: 28 | 2026-08-02T13:41:36+00:00 | Vulnerability · Source |
| CVE-2026-7374 | redhat_vex | kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability | fixed: 23 known not affected: 258 | 2026-08-02T12:51:53+00:00 | Vulnerability · Source |
| CVE-2026-64382 | redhat_vex | kernel: smb: client: fix double-free in SMB2_open() replay | known affected: 184 known not affected: 90 | 2026-08-02T12:38:37+00:00 | Vulnerability · Source |
| CVE-2026-23467 | redhat_vex | kernel: drm/i915/dmc: Fix an unlikely NULL pointer deference at probe | known affected: 198 known not affected: 76 | 2026-08-02T12:10:50+00:00 | Vulnerability · Source |
| CVE-2026-31540 | redhat_vex | kernel: drm/i915/gt: Check set_default_submission() before deferencing | known affected: 246 known not affected: 28 | 2026-08-02T12:10:34+00:00 | Vulnerability · Source |
| CVE-2026-31767 | redhat_vex | kernel: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | known affected: 198 known not affected: 76 | 2026-08-02T12:10:23+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 7 known not affected: 700 | 2026-08-02T11:50:04+00:00 | Vulnerability · Source |
| CVE-2026-53356 | redhat_vex | kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset | known affected: 184 known not affected: 76 under investigation: 14 | 2026-08-02T11:28:39+00:00 | Vulnerability · Source |
| CVE-2026-63884 | redhat_vex | kernel: drm/i915: Fix potential UAF in TTM object purge | known affected: 232 known not affected: 28 under investigation: 14 | 2026-08-02T11:23:13+00:00 | Vulnerability · Source |
| CVE-2026-18572 | redhat_vex | keycloak-services: keycloak-services: UMA claim token can override authorization time-policy evaluation attributes | known affected: 3 known not affected: 3 | 2026-08-02T07:03:45+00:00 | Vulnerability · Source |
| CVE-2026-18573 | redhat_vex | keycloak-services: keycloak-services: Client access-type policy condition bypass during client update | known affected: 3 known not affected: 3 | 2026-08-02T07:03:42+00:00 | Vulnerability · Source |
| CVE-2026-18570 | redhat_vex | keycloak-services: keycloak-services: Full-scope-disabled client policy validation bypass via omitted fullScopeAllowed | known affected: 3 known not affected: 3 | 2026-08-02T07:03:34+00:00 | Vulnerability · Source |
| CVE-2026-50163 | redhat_vex | oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks | fixed: 8 known affected: 30 known not affected: 84 | 2026-08-02T02:06:56+00:00 | Vulnerability · Source |
| CVE-2026-41889 | redhat_vex | github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions | fixed: 18 known affected: 150 known not affected: 84 | 2026-08-02T02:06:50+00:00 | Vulnerability · Source |
| CVE-2025-68973 | redhat_vex | GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write | fixed: 394 known affected: 3 known not affected: 149 | 2026-08-02T01:41:44+00:00 | Vulnerability · Source |
| CVE-2025-47277 | redhat_vex | vllm: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service | fixed: 15 known not affected: 1 | 2026-08-02T00:56:21+00:00 | Vulnerability · Source |
| CVE-2025-57810 | redhat_vex | jspdf: jsPDF Denial of Service (DoS) | fixed: 4 known affected: 2 known not affected: 21 | 2026-08-02T00:53:25+00:00 | Vulnerability · Source |
| CVE-2026-27571 | redhat_vex | nats-server: WebSockets pre-auth memory DoS | fixed: 8 known affected: 3 known not affected: 35 | 2026-08-02T00:52:39+00:00 | Vulnerability · Source |
| CVE-2025-48379 | redhat_vex | python-pillow: pillow: Pillow DDS Heap Buffer Overflow | fixed: 12 known affected: 18 known not affected: 45 | 2026-08-02T00:33:20+00:00 | Vulnerability · Source |
| CVE-2025-57809 | redhat_vex | xgrammar: XGrammar affected by Denial of Service by infinite recursion grammars | fixed: 12 known affected: 2 | 2026-08-02T00:32:12+00:00 | Vulnerability · Source |