VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64544 | redhat_vex | kernel: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents | known affected: 260 known not affected: 14 | 2026-08-05T12:42:12+00:00 | Vulnerability · Source |
| CVE-2026-64537 | redhat_vex | kernel: bridge: cfm: reject invalid CCM interval at configuration time | known not affected: 274 | 2026-08-05T12:42:09+00:00 | Vulnerability · Source |
| CVE-2026-64536 | redhat_vex | kernel: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop | known not affected: 274 | 2026-08-05T12:42:06+00:00 | Vulnerability · Source |
| CVE-2026-52958 | redhat_vex | kernel: libceph: Fix potential out-of-bounds access in osdmap_decode() | known affected: 232 known not affected: 42 | 2026-08-05T12:42:04+00:00 | Vulnerability · Source |
| CVE-2026-41843 | redhat_vex | spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal | known affected: 35 | 2026-08-05T12:42:01+00:00 | Vulnerability · Source |
| CVE-2024-50106 | redhat_vex | kernel: nfsd: fix race between laundromat and free_stateid | fixed: 305 known affected: 112 | 2026-08-05T12:22:44+00:00 | Vulnerability · Source |
| CVE-2022-4994 | redhat_vex | kernel: KVM: x86: wean fast IN from emulator_pio_in | known affected: 170 known not affected: 104 | 2026-08-05T12:17:55+00:00 | Vulnerability · Source |
| CVE-2021-46933 | redhat_vex | kernel: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. | known affected: 42 known not affected: 156 | 2026-08-05T12:17:52+00:00 | Vulnerability · Source |
| CVE-2024-50256 | redhat_vex | kernel: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() | fixed: 734 known affected: 50 known not affected: 14 | 2026-08-05T12:17:45+00:00 | Vulnerability · Source |
| CVE-2024-50125 | redhat_vex | kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout | fixed: 513 known affected: 112 | 2026-08-05T12:17:28+00:00 | Vulnerability · Source |
| CVE-2026-64357 | redhat_vex | kernel: xfs: fix exchmaps reservation limit check | known affected: 184 known not affected: 90 | 2026-08-05T12:17:26+00:00 | Vulnerability · Source |
| CVE-2026-64554 | redhat_vex | kernel: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | known affected: 184 known not affected: 76 under investigation: 14 | 2026-08-05T12:17:05+00:00 | Vulnerability · Source |
| CVE-2026-64548 | redhat_vex | kernel: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() | known affected: 246 known not affected: 28 | 2026-08-05T12:17:03+00:00 | Vulnerability · Source |
| CVE-2026-64541 | redhat_vex | kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | known affected: 232 known not affected: 42 | 2026-08-05T12:17:02+00:00 | Vulnerability · Source |
| CVE-2026-64532 | redhat_vex | kernel: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} | known not affected: 274 | 2026-08-05T12:17:00+00:00 | Vulnerability · Source |
| CVE-2026-64539 | redhat_vex | kernel: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD | known affected: 232 known not affected: 42 | 2026-08-05T12:16:58+00:00 | Vulnerability · Source |
| CVE-2026-54706 | redhat_vex | onionshare: symlink following in shared directories, allowing unintended disclosure of local files | known not affected: 1 | 2026-08-05T12:16:52+00:00 | Vulnerability · Source |
| CVE-2026-54707 | redhat_vex | onionshare: Receive mode writes uploaded files even when file uploads are disabled | known not affected: 1 | 2026-08-05T12:16:52+00:00 | Vulnerability · Source |
| CVE-2026-64219 | redhat_vex | kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | known affected: 260 under investigation: 14 | 2026-08-05T12:04:56+00:00 | Vulnerability · Source |
| CVE-2023-52678 | redhat_vex | kernel: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c | known not affected: 198 | 2026-08-05T11:52:51+00:00 | Vulnerability · Source |
| CVE-2022-50410 | redhat_vex | kernel: NFSD: Protect against send buffer overflow in NFSv2 READ | fixed: 767 known affected: 52 known not affected: 76 | 2026-08-05T11:47:29+00:00 | Vulnerability · Source |
| CVE-2022-50394 | redhat_vex | kernel: i2c: ismt: Fix an out-of-bounds bug in ismt_access() | known affected: 198 known not affected: 76 | 2026-08-05T11:47:20+00:00 | Vulnerability · Source |
| CVE-2022-50405 | redhat_vex | kernel: net/tunnel: wait until all sk_user_data reader finish before releasing the sock | fixed: 321 known affected: 38 known not affected: 118 | 2026-08-05T11:47:20+00:00 | Vulnerability · Source |
| CVE-2022-50386 | redhat_vex | kernel: Bluetooth: L2CAP: Fix user-after-free | fixed: 913 known affected: 108 known not affected: 90 | 2026-08-05T11:47:20+00:00 | Vulnerability · Source |
| CVE-2023-53429 | redhat_vex | kernel: btrfs: don't check PageError in __extent_writepage | known affected: 42 known not affected: 232 | 2026-08-05T11:27:29+00:00 | Vulnerability · Source |
| CVE-2023-53431 | redhat_vex | kernel: Linux kernel: Denial of Service in scsi_ses due to enclosure with no components | known affected: 198 known not affected: 76 | 2026-08-05T11:27:26+00:00 | Vulnerability · Source |
| CVE-2023-53333 | redhat_vex | kernel: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one | known affected: 198 known not affected: 76 | 2026-08-05T11:27:25+00:00 | Vulnerability · Source |
| CVE-2023-53378 | redhat_vex | kernel: drm/i915/dpt: Treat the DPT BO as a framebuffer | known affected: 156 known not affected: 118 | 2026-08-05T11:27:22+00:00 | Vulnerability · Source |
| CVE-2023-53315 | redhat_vex | kernel: wifi: ath11k: Fix SKB corruption in REO destination ring | known affected: 156 known not affected: 118 | 2026-08-05T11:27:17+00:00 | Vulnerability · Source |
| CVE-2023-53338 | redhat_vex | kernel: lwt: Fix return values of BPF xmit ops | fixed: 279 known affected: 70 known not affected: 118 | 2026-08-05T11:27:15+00:00 | Vulnerability · Source |
| CVE-2021-47555 | redhat_vex | kernel: net: vlan: fix underflow for the real_dev refcnt | known affected: 42 known not affected: 156 | 2026-08-05T11:12:49+00:00 | Vulnerability · Source |
| CVE-2021-47368 | redhat_vex | kernel: enetc: Fix illegal access when reading affinity_hint | known not affected: 198 | 2026-08-05T11:12:46+00:00 | Vulnerability · Source |
| CVE-2021-47580 | redhat_vex | kernel: scsi: scsi_debug: Fix type in min_t to avoid stack OOB | fixed: 346 known affected: 42 | 2026-08-05T11:04:20+00:00 | Vulnerability · Source |
| CVE-2022-48686 | redhat_vex | kernel: nvme-tcp: fix UAF when detecting digest errors | fixed: 266 known affected: 48 known not affected: 150 | 2026-08-05T10:49:26+00:00 | Vulnerability · Source |
| CVE-2022-49931 | redhat_vex | kernel: IB/hfi1: Correctly move list in sc_disable() | known affected: 184 known not affected: 90 | 2026-08-05T10:27:02+00:00 | Vulnerability · Source |
| CVE-2026-10059 | redhat_vex | cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via ClusterCurator ServiceAccount token | known affected: 1 | 2026-08-05T10:07:05+00:00 | Vulnerability · Source |
| CVE-2026-17993 | redhat_vex | chromium-browser: chromium-browser: Race in Updater | known not affected: 1 | 2026-08-05T09:46:30+00:00 | Vulnerability · Source |
| CVE-2026-17992 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in Skia | known not affected: 1 | 2026-08-05T09:46:27+00:00 | Vulnerability · Source |
| CVE-2026-17802 | redhat_vex | chromium-browser: chromium-browser: Side-channel information leakage in GPU | known not affected: 1 | 2026-08-05T09:25:14+00:00 | Vulnerability · Source |
| CVE-2026-11998 | redhat_vex | angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass | known affected: 1 known not affected: 47 | 2026-08-05T08:58:10+00:00 | Vulnerability · Source |
| CVE-2024-41123 | redhat_vex | rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> | fixed: 598 known affected: 80 known not affected: 49 | 2026-08-05T08:55:11+00:00 | Vulnerability · Source |
| CVE-2026-67338 | redhat_vex | jupyterlab: JupyterLab: Stored cross-site scripting in Extension Manager allows arbitrary code execution | known affected: 16 | 2026-08-05T08:55:10+00:00 | Vulnerability · Source |
| CVE-2024-39908 | redhat_vex | rexml: DoS vulnerability in REXML | fixed: 558 known affected: 80 known not affected: 49 | 2026-08-05T08:47:02+00:00 | Vulnerability · Source |
| CVE-2026-12259 | redhat_vex | nltk: nltk: Installation of attacker-controlled packages due to improper checksum validation | known affected: 14 | 2026-08-05T08:43:00+00:00 | Vulnerability · Source |
| CVE-2026-53704 | redhat_vex | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser | fixed: 36 known affected: 2 known not affected: 4 | 2026-08-05T08:42:24+00:00 | Vulnerability · Source |
| CVE-2026-53703 | redhat_vex | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser | fixed: 46 known not affected: 4 | 2026-08-05T08:38:52+00:00 | Vulnerability · Source |
| CVE-2026-48913 | redhat_vex | httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service. | fixed: 27 known affected: 44 known not affected: 30 | 2026-08-05T08:38:36+00:00 | Vulnerability · Source |
| CVE-2025-53020 | redhat_vex | mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase | fixed: 325 known not affected: 63 | 2026-08-05T08:38:19+00:00 | Vulnerability · Source |
| CVE-2026-49975 | redhat_vex | httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack | fixed: 333 known not affected: 110 | 2026-08-05T08:28:51+00:00 | Vulnerability · Source |
| CVE-2026-59939 | redhat_vex | httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies | fixed: 1223 known affected: 45 known not affected: 298 | 2026-08-05T08:28:41+00:00 | Vulnerability · Source |