VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290342 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-21708 | redhat_vex | graphql-go: Denial of service via stack overflow panics | fixed: 12 known affected: 1 known not affected: 808 | 2026-08-07T07:36:34+00:00 | Vulnerability · Source |
| CVE-2022-29162 | redhat_vex | runc: incorrect handling of inheritable capabilities | fixed: 562 known affected: 7 known not affected: 803 | 2026-08-07T07:31:24+00:00 | Vulnerability · Source |
| CVE-2021-23648 | redhat_vex | sanitize-url: XSS due to improper sanitization in sanitizeUrl function | fixed: 22 known affected: 5 known not affected: 608 | 2026-08-07T07:31:08+00:00 | Vulnerability · Source |
| CVE-2022-21658 | redhat_vex | rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed | fixed: 73 known affected: 5 known not affected: 18 | 2026-08-07T07:31:04+00:00 | Vulnerability · Source |
| CVE-2026-71430 | redhat_vex | re2: node-re2: Denial of Service due to excessive string length in replacements | known not affected: 1 | 2026-08-07T07:31:02+00:00 | Vulnerability · Source |
| CVE-2022-3248 | redhat_vex | kubernetes: OpenShift API admission checks does not enforce "custom-host" permissions | known affected: 24 known not affected: 2 | 2026-08-07T07:26:57+00:00 | Vulnerability · Source |
| CVE-2022-0393 | redhat_vex | vim: out-of-bounds read in delete_buff_tail() in getchar.c | known not affected: 24 | 2026-08-07T07:26:45+00:00 | Vulnerability · Source |
| CVE-2022-23308 | redhat_vex | libxml2: Use-after-free of ID and IDREF attributes | fixed: 180 known affected: 10 known not affected: 4 | 2026-08-07T07:26:42+00:00 | Vulnerability · Source |
| CVE-2022-22942 | redhat_vex | kernel: failing usercopy allows for use-after-free exploitation | fixed: 1260 known affected: 14 known not affected: 117 | 2026-08-07T07:25:37+00:00 | Vulnerability · Source |
| CVE-2022-2385 | redhat_vex | aws-iam-authenticator: AccessKeyID validation bypass | known affected: 1 | 2026-08-07T07:25:04+00:00 | Vulnerability · Source |
| CVE-2022-25758 | redhat_vex | scss-tokenizer: Regular expression denial of service in scss-tokenizer | known affected: 40 known not affected: 6 | 2026-08-07T07:14:46+00:00 | Vulnerability · Source |
| CVE-2022-35929 | redhat_vex | cosign: `cosign verify-attestation --type` can report a false positive if any attestation exists | known affected: 6 | 2026-08-07T07:14:43+00:00 | Vulnerability · Source |
| CVE-2022-29901 | redhat_vex | hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions | fixed: 736 known affected: 14 | 2026-08-07T07:14:30+00:00 | Vulnerability · Source |
| CVE-2024-46292 | redhat_vex | mod_security: denial of service via name paramter | known not affected: 9 | 2026-08-07T06:18:22+00:00 | Vulnerability · Source |
| CVE-2026-11793 | redhat_vex | 389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsing | known affected: 33 | 2026-08-07T04:58:44+00:00 | Vulnerability · Source |
| CVE-2026-64246 | microsoft_vex | power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() | known not affected: 1 | 2026-08-07T04:26:58+00:00 | Vulnerability · Source |
| CVE-2026-66033 | microsoft_vex | libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:26:50+00:00 | Vulnerability · Source |
| CVE-2026-66035 | microsoft_vex | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:26:33+00:00 | Vulnerability · Source |
| CVE-2026-66032 | microsoft_vex | libssh2 Double-Free Heap Corruption via sftp_open() | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:26:12+00:00 | Vulnerability · Source |
| CVE-2026-66034 | microsoft_vex | libssh2 Heap Out-of-Bounds Read via publickey subsystem | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:25:47+00:00 | Vulnerability · Source |
| CVE-2026-64254 | microsoft_vex | NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR | known not affected: 1 | 2026-08-07T04:25:29+00:00 | Vulnerability · Source |
| CVE-2026-64252 | microsoft_vex | MIPS: DEC: Prevent initial console buffer from landing in XKPHYS | known not affected: 1 | 2026-08-07T04:25:20+00:00 | Vulnerability · Source |
| CVE-2026-64250 | microsoft_vex | LoongArch: Report dying CPU to RCU in stop_this_cpu() | fixed: 1 known affected: 1 | 2026-08-07T04:25:12+00:00 | Vulnerability · Source |
| CVE-2026-64248 | microsoft_vex | MIPS: smp: report dying CPU to RCU in stop_this_cpu() | fixed: 1 known affected: 1 | 2026-08-07T04:24:53+00:00 | Vulnerability · Source |
| CVE-2026-64249 | microsoft_vex | fpga: region: fix use-after-free in child_regions_with_firmware() | known not affected: 1 | 2026-08-07T04:24:34+00:00 | Vulnerability · Source |
| CVE-2026-64212 | microsoft_vex | wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it | known affected: 1 known not affected: 1 | 2026-08-07T04:24:17+00:00 | Vulnerability · Source |
| CVE-2026-16615 | microsoft_vex | Librest: weak random number generation in pkce implementation | fixed: 1 known affected: 2 | 2026-08-07T04:23:30+00:00 | Vulnerability · Source |
| CVE-2026-16517 | microsoft_vex | Libarchive: libarchive: signed integer overflow in archive_write_zip_header | known affected: 2 | 2026-08-07T04:21:17+00:00 | Vulnerability · Source |
| CVE-2026-46600 | microsoft_vex | Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | known affected: 3 under investigation: 1 | 2026-08-07T04:21:08+00:00 | Vulnerability · Source |
| CVE-2026-12617 | microsoft_vex | Record ordering based unexpected exit with CNAME or DNAME | fixed: 1 known affected: 1 | 2026-08-07T04:20:55+00:00 | Vulnerability · Source |
| CVE-2026-11622 | microsoft_vex | Potential memory usage beyond configured limits | fixed: 1 known affected: 1 | 2026-08-07T04:20:45+00:00 | Vulnerability · Source |
| CVE-2026-11721 | microsoft_vex | Cache poisoning possible with label count discrepancy, RRSIG, and wildcards | fixed: 1 known affected: 1 | 2026-08-07T04:20:34+00:00 | Vulnerability · Source |
| CVE-2026-11331 | microsoft_vex | Potential wildcard CNAME RPZ policy bypass | fixed: 1 known affected: 1 | 2026-08-07T04:20:24+00:00 | Vulnerability · Source |
| CVE-2026-11605 | microsoft_vex | Unnecessary validation of DNSSEC signed records | fixed: 1 known affected: 1 | 2026-08-07T04:20:13+00:00 | Vulnerability · Source |
| CVE-2026-13321 | microsoft_vex | DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | fixed: 1 known affected: 1 | 2026-08-07T04:20:03+00:00 | Vulnerability · Source |
| CVE-2026-10723 | microsoft_vex | Incorrect acceptance of NSEC3 records | fixed: 1 known affected: 1 | 2026-08-07T04:19:52+00:00 | Vulnerability · Source |
| CVE-2026-13204 | microsoft_vex | Unexpected exit in certain situations with NSEC and NSEC3 both present | fixed: 1 known affected: 1 | 2026-08-07T04:19:42+00:00 | Vulnerability · Source |
| CVE-2025-68251 | microsoft_vex | erofs: avoid infinite loops due to corrupted subpage compact indexes | known affected: 5 | 2026-08-07T04:19:36+00:00 | Vulnerability · Source |
| CVE-2026-10822 | microsoft_vex | Key Record using PRIVATEDNS algorithm may lead to unexpected exit | known affected: 2 | 2026-08-07T04:19:31+00:00 | Vulnerability · Source |
| CVE-2026-56852 | microsoft_vex | Infinite loop on invalid input in golang.org/x/text | fixed: 40 known affected: 42 known not affected: 4 under investigation: 2 | 2026-08-07T04:19:21+00:00 | Vulnerability · Source |
| CVE-2025-38675 | microsoft_vex | xfrm: state: initialize state_ptrs earlier in xfrm_state_find | known affected: 5 | 2026-08-07T04:19:19+00:00 | Vulnerability · Source |
| CVE-2025-21752 | microsoft_vex | btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents | known affected: 5 | 2026-08-07T04:19:10+00:00 | Vulnerability · Source |
| CVE-2026-15697 | redhat_vex | svg.js: svg.js: Remote object prototype pollution | known affected: 2 | 2026-08-07T04:18:26+00:00 | Vulnerability · Source |
| CVE-2025-39706 | microsoft_vex | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | fixed: 1 known affected: 6 | 2026-08-07T04:17:19+00:00 | Vulnerability · Source |
| CVE-2025-39716 | microsoft_vex | parisc: Revise __get_user() to probe user read access | fixed: 1 known affected: 6 | 2026-08-07T04:17:11+00:00 | Vulnerability · Source |
| CVE-2025-59529 | microsoft_vex | simple protocol server ignores accepts unlimited connections and logs failures without limit | known affected: 7 | 2026-08-07T04:17:03+00:00 | Vulnerability · Source |
| CVE-2025-44904 | microsoft_vex | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. | fixed: 1 known affected: 5 | 2026-08-07T04:16:53+00:00 | Vulnerability · Source |
| CVE-2022-50407 | microsoft_vex | crypto: hisilicon/qm - increase the memory of local variables | known affected: 4 | 2026-08-07T04:16:45+00:00 | Vulnerability · Source |
| CVE-2025-60876 | microsoft_vex | BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). | known affected: 11 | 2026-08-07T04:16:28+00:00 | Vulnerability · Source |
| CVE-2025-4802 | microsoft_vex | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). | fixed: 1 known affected: 7 | 2026-08-07T04:15:01+00:00 | Vulnerability · Source |