VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
289759 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-67303 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via unsupported serial device control request | known affected: 31 | 2026-08-06T12:41:16+00:00 | Vulnerability · Source |
| CVE-2023-6377 | redhat_vex | xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions | fixed: 720 known affected: 9 | 2026-08-06T12:40:43+00:00 | Vulnerability · Source |
| CVE-2024-31080 | redhat_vex | xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T12:40:11+00:00 | Vulnerability · Source |
| CVE-2025-26240 | redhat_vex | python-pdfkit: python-pdfkit: Arbitrary Code Execution and Information Disclosure | known not affected: 1 | 2026-08-06T12:39:28+00:00 | Vulnerability · Source |
| CVE-2024-9632 | redhat_vex | xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | fixed: 663 known affected: 19 | 2026-08-06T12:39:12+00:00 | Vulnerability · Source |
| CVE-2026-64569 | redhat_vex | kernel: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | known affected: 232 known not affected: 42 | 2026-08-06T12:35:45+00:00 | Vulnerability · Source |
| CVE-2026-53689 | redhat_vex | libnfs: libnfs: Information disclosure and data corruption via crafted NFS server connection | known not affected: 1 | 2026-08-06T12:28:46+00:00 | Vulnerability · Source |
| CVE-2025-57803 | redhat_vex | imagemagick: ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow | fixed: 51 known affected: 7 | 2026-08-06T12:10:05+00:00 | Vulnerability · Source |
| CVE-2026-67305 | redhat_vex | FreeRDP: FreeRDP Windows Client: Remote Code Execution via Heap Buffer Overflow in Clipboard Processing | known not affected: 31 | 2026-08-06T12:08:20+00:00 | Vulnerability · Source |
| CVE-2026-68579 | redhat_vex | FreeRDP: FreeRDP: Arbitrary Code Execution via Heap Overflow in Clipboard Processing | known not affected: 31 | 2026-08-06T12:06:45+00:00 | Vulnerability · Source |
| CVE-2023-3384 | redhat_vex | quay: stored cross site scripting | fixed: 10 | 2026-08-06T11:23:56+00:00 | Vulnerability · Source |
| CVE-2025-8177 | redhat_vex | libtiff: LibTIFF Buffer Overflow | fixed: 4 known not affected: 61 | 2026-08-06T11:23:50+00:00 | Vulnerability · Source |
| CVE-2025-57848 | redhat_vex | container-native-virtualization: privilege escalation via excessive /etc/passwd permissions | fixed: 556 known affected: 4 | 2026-08-06T11:14:03+00:00 | Vulnerability · Source |
| CVE-2025-61730 | redhat_vex | crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls | fixed: 8 known affected: 208 | 2026-08-06T11:11:37+00:00 | Vulnerability · Source |
| CVE-2026-64194 | redhat_vex | Net::DNS: Net::DNS: Denial of Service via crafted DNS compression pointers | known affected: 5 known not affected: 2 | 2026-08-06T11:10:01+00:00 | Vulnerability · Source |
| CVE-2024-42368 | redhat_vex | bearertokenauthextension: Observable Timing Discrepancy in github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension | fixed: 76 known affected: 2 | 2026-08-06T10:54:29+00:00 | Vulnerability · Source |
| CVE-2025-12744 | redhat_vex | abrt: Command-injection in ABRT leading to local privilege escalation | fixed: 772 known affected: 14 known not affected: 22 | 2026-08-06T10:53:55+00:00 | Vulnerability · Source |
| CVE-2026-64572 | redhat_vex | kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path | known affected: 232 known not affected: 42 | 2026-08-06T10:49:09+00:00 | Vulnerability · Source |
| CVE-2026-64578 | redhat_vex | kernel: ksmbd: validate compound request size before reading StructureSize2 | known not affected: 274 | 2026-08-06T10:39:14+00:00 | Vulnerability · Source |
| CVE-2021-25220 | redhat_vex | bind: DNS forwarders - cache poisoning vulnerability | fixed: 1067 known not affected: 16 | 2026-08-06T10:39:07+00:00 | Vulnerability · Source |
| CVE-2026-64566 | redhat_vex | kernel: xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() | known not affected: 274 | 2026-08-06T10:29:04+00:00 | Vulnerability · Source |
| CVE-2026-42765 | redhat_vex | openssl: NULL Dereference in Certificate Verification with OCSP Checking | under investigation: 61 | 2026-08-06T10:29:03+00:00 | Vulnerability · Source |
| CVE-2026-59927 | redhat_vex | mistune: Mistune: Denial of Service via unbounded recursion in Markdown include directive | known affected: 25 | 2026-08-06T10:23:47+00:00 | Vulnerability · Source |
| CVE-2026-71190 | redhat_vex | openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parser | known affected: 33 | 2026-08-06T10:15:07+00:00 | Vulnerability · Source |
| CVE-2024-9143 | redhat_vex | openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access | known affected: 41 known not affected: 26 | 2026-08-06T10:06:51+00:00 | Vulnerability · Source |
| CVE-2026-64579 | redhat_vex | kernel: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert | known affected: 232 known not affected: 42 | 2026-08-06T10:06:22+00:00 | Vulnerability · Source |
| CVE-2025-62171 | redhat_vex | ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems | fixed: 51 known affected: 7 | 2026-08-06T10:06:20+00:00 | Vulnerability · Source |
| CVE-2026-71192 | redhat_vex | openstack-swift: openstack-swift: S3API cross-tenant object read via Swift-native header injection | known affected: 33 | 2026-08-06T10:02:08+00:00 | Vulnerability · Source |
| CVE-2026-71191 | redhat_vex | openstack-swift: openstack-swift: S3API presigned URL unsigned header authorization bypass | known affected: 33 | 2026-08-06T09:54:47+00:00 | Vulnerability · Source |
| CVE-2026-31617 | redhat_vex | kernel: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | known affected: 76 known not affected: 198 | 2026-08-06T09:16:57+00:00 | Vulnerability · Source |
| CVE-2025-1975 | redhat_vex | ollama: Improper Validation of Array Index in ollama/ollama | known not affected: 4 | 2026-08-06T09:13:33+00:00 | Vulnerability · Source |
| CVE-2023-52969 | redhat_vex | mariadb: MariaDB Server Crash Due to Empty Backtrace Log | fixed: 924 known not affected: 28 | 2026-08-06T08:55:57+00:00 | Vulnerability · Source |
| CVE-2023-52971 | redhat_vex | mariadb: MariaDB Server Crash | fixed: 651 known not affected: 81 | 2026-08-06T08:55:56+00:00 | Vulnerability · Source |
| CVE-2023-52970 | redhat_vex | mariadb: MariaDB Server Crash via Item_direct_view_ref | fixed: 924 known not affected: 28 | 2026-08-06T08:55:44+00:00 | Vulnerability · Source |
| CVE-2026-31532 | redhat_vex | kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() | fixed: 2295 known affected: 22 known not affected: 14 | 2026-08-06T08:49:01+00:00 | Vulnerability · Source |
| CVE-2025-59530 | redhat_vex | github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame | fixed: 418 known affected: 15 known not affected: 2496 | 2026-08-06T08:39:55+00:00 | Vulnerability · Source |
| CVE-2025-21869 | redhat_vex | kernel: powerpc/code-patching: Disable KASAN report during patching via temporary mm | known affected: 226 known not affected: 48 | 2026-08-06T08:35:47+00:00 | Vulnerability · Source |
| CVE-2025-68665 | redhat_vex | langchain-core: LangChain: Arbitrary Code Execution via Serialization Injection | fixed: 2 known affected: 3 known not affected: 276 | 2026-08-06T08:30:08+00:00 | Vulnerability · Source |
| CVE-2025-38045 | redhat_vex | kernel: wifi: iwlwifi: fix debug actions order | known affected: 260 known not affected: 14 | 2026-08-06T08:20:46+00:00 | Vulnerability · Source |
| CVE-2025-38032 | redhat_vex | kernel: mr: consolidate the ipmr_can_free_table() checks. | known affected: 118 known not affected: 156 | 2026-08-06T08:20:44+00:00 | Vulnerability · Source |
| CVE-2026-45903 | redhat_vex | kernel: bpf: Fix memory access flags in helper prototypes | known affected: 90 known not affected: 184 | 2026-08-06T08:20:21+00:00 | Vulnerability · Source |
| CVE-2025-68209 | redhat_vex | kernel: mlx5: Fix default values in create CQ | known affected: 246 known not affected: 28 | 2026-08-06T08:20:18+00:00 | Vulnerability · Source |
| CVE-2025-38147 | redhat_vex | kernel: calipso: Don't call calipso functions for AF_INET sk. | known affected: 274 | 2026-08-06T08:20:16+00:00 | Vulnerability · Source |
| CVE-2025-38105 | redhat_vex | kernel: Linux kernel: Denial of Service in USB-audio MIDI driver due to improper timer shutdown | known affected: 274 | 2026-08-06T08:20:13+00:00 | Vulnerability · Source |
| CVE-2025-38048 | redhat_vex | kernel: Linux kernel: Data race in virtio_ring can lead to denial of service | known affected: 274 | 2026-08-06T08:20:13+00:00 | Vulnerability · Source |
| CVE-2024-53206 | redhat_vex | kernel: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). | known not affected: 198 | 2026-08-06T08:14:48+00:00 | Vulnerability · Source |
| CVE-2026-17718 | redhat_vex | chromium-browser: chromium-browser: Use after free in ANGLE | known not affected: 1 | 2026-08-06T08:03:19+00:00 | Vulnerability · Source |
| CVE-2026-43825 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP SvmDoccatModel: Remote code execution via untrusted Java deserialization | known not affected: 4 | 2026-08-06T07:58:24+00:00 | Vulnerability · Source |
| CVE-2026-55688 | redhat_vex | async-http-client: AsyncHttpClient: Cookie injection allows planting cookies for unrelated domains | known affected: 2 | 2026-08-06T07:58:24+00:00 | Vulnerability · Source |
| CVE-2026-17894 | redhat_vex | chromium-browser: chromium-browser: Use after free in Views | known not affected: 1 | 2026-08-06T07:58:23+00:00 | Vulnerability · Source |