VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64250 | microsoft_vex | LoongArch: Report dying CPU to RCU in stop_this_cpu() | fixed: 1 known affected: 1 | 2026-08-07T04:25:12+00:00 | Vulnerability · Source |
| CVE-2026-64248 | microsoft_vex | MIPS: smp: report dying CPU to RCU in stop_this_cpu() | fixed: 1 known affected: 1 | 2026-08-07T04:24:53+00:00 | Vulnerability · Source |
| CVE-2026-64249 | microsoft_vex | fpga: region: fix use-after-free in child_regions_with_firmware() | known not affected: 1 | 2026-08-07T04:24:34+00:00 | Vulnerability · Source |
| CVE-2026-64212 | microsoft_vex | wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it | known affected: 1 known not affected: 1 | 2026-08-07T04:24:17+00:00 | Vulnerability · Source |
| CVE-2026-16615 | microsoft_vex | Librest: weak random number generation in pkce implementation | fixed: 1 known affected: 2 | 2026-08-07T04:23:30+00:00 | Vulnerability · Source |
| CVE-2026-16517 | microsoft_vex | Libarchive: libarchive: signed integer overflow in archive_write_zip_header | known affected: 2 | 2026-08-07T04:21:17+00:00 | Vulnerability · Source |
| CVE-2026-46600 | microsoft_vex | Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | known affected: 3 under investigation: 1 | 2026-08-07T04:21:08+00:00 | Vulnerability · Source |
| CVE-2026-12617 | microsoft_vex | Record ordering based unexpected exit with CNAME or DNAME | fixed: 1 known affected: 1 | 2026-08-07T04:20:55+00:00 | Vulnerability · Source |
| CVE-2026-11622 | microsoft_vex | Potential memory usage beyond configured limits | fixed: 1 known affected: 1 | 2026-08-07T04:20:45+00:00 | Vulnerability · Source |
| CVE-2026-11721 | microsoft_vex | Cache poisoning possible with label count discrepancy, RRSIG, and wildcards | fixed: 1 known affected: 1 | 2026-08-07T04:20:34+00:00 | Vulnerability · Source |
| CVE-2026-11331 | microsoft_vex | Potential wildcard CNAME RPZ policy bypass | fixed: 1 known affected: 1 | 2026-08-07T04:20:24+00:00 | Vulnerability · Source |
| CVE-2026-11605 | microsoft_vex | Unnecessary validation of DNSSEC signed records | fixed: 1 known affected: 1 | 2026-08-07T04:20:13+00:00 | Vulnerability · Source |
| CVE-2026-13321 | microsoft_vex | DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | fixed: 1 known affected: 1 | 2026-08-07T04:20:03+00:00 | Vulnerability · Source |
| CVE-2026-10723 | microsoft_vex | Incorrect acceptance of NSEC3 records | fixed: 1 known affected: 1 | 2026-08-07T04:19:52+00:00 | Vulnerability · Source |
| CVE-2026-13204 | microsoft_vex | Unexpected exit in certain situations with NSEC and NSEC3 both present | fixed: 1 known affected: 1 | 2026-08-07T04:19:42+00:00 | Vulnerability · Source |
| CVE-2025-68251 | microsoft_vex | erofs: avoid infinite loops due to corrupted subpage compact indexes | known affected: 5 | 2026-08-07T04:19:36+00:00 | Vulnerability · Source |
| CVE-2026-10822 | microsoft_vex | Key Record using PRIVATEDNS algorithm may lead to unexpected exit | known affected: 2 | 2026-08-07T04:19:31+00:00 | Vulnerability · Source |
| CVE-2026-56852 | microsoft_vex | Infinite loop on invalid input in golang.org/x/text | fixed: 40 known affected: 42 known not affected: 4 under investigation: 2 | 2026-08-07T04:19:21+00:00 | Vulnerability · Source |
| CVE-2025-38675 | microsoft_vex | xfrm: state: initialize state_ptrs earlier in xfrm_state_find | known affected: 5 | 2026-08-07T04:19:19+00:00 | Vulnerability · Source |
| CVE-2025-21752 | microsoft_vex | btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents | known affected: 5 | 2026-08-07T04:19:10+00:00 | Vulnerability · Source |
| CVE-2026-15697 | redhat_vex | svg.js: svg.js: Remote object prototype pollution | known affected: 2 | 2026-08-07T04:18:26+00:00 | Vulnerability · Source |
| CVE-2025-39706 | microsoft_vex | drm/amdkfd: Destroy KFD debugfs after destroy KFD wq | fixed: 1 known affected: 6 | 2026-08-07T04:17:19+00:00 | Vulnerability · Source |
| CVE-2025-39716 | microsoft_vex | parisc: Revise __get_user() to probe user read access | fixed: 1 known affected: 6 | 2026-08-07T04:17:11+00:00 | Vulnerability · Source |
| CVE-2025-59529 | microsoft_vex | simple protocol server ignores accepts unlimited connections and logs failures without limit | known affected: 7 | 2026-08-07T04:17:03+00:00 | Vulnerability · Source |
| CVE-2025-44904 | microsoft_vex | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. | fixed: 1 known affected: 5 | 2026-08-07T04:16:53+00:00 | Vulnerability · Source |
| CVE-2022-50407 | microsoft_vex | crypto: hisilicon/qm - increase the memory of local variables | known affected: 4 | 2026-08-07T04:16:45+00:00 | Vulnerability · Source |
| CVE-2025-60876 | microsoft_vex | BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). | known affected: 11 | 2026-08-07T04:16:28+00:00 | Vulnerability · Source |
| CVE-2025-4802 | microsoft_vex | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). | fixed: 1 known affected: 7 | 2026-08-07T04:15:01+00:00 | Vulnerability · Source |
| CVE-2026-56392 | microsoft_vex | Heap-based Buffer Overflow in GNU coreutils | known affected: 1 under investigation: 1 | 2026-08-07T04:14:53+00:00 | Vulnerability · Source |
| CVE-2025-2309 | microsoft_vex | HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow | known affected: 9 | 2026-08-07T04:14:52+00:00 | Vulnerability · Source |
| CVE-2026-44210 | microsoft_vex | Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations | fixed: 1 known affected: 3 | 2026-08-07T04:14:43+00:00 | Vulnerability · Source |
| CVE-2024-57798 | microsoft_vex | drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | fixed: 2 known affected: 6 | 2026-08-07T04:14:41+00:00 | Vulnerability · Source |
| CVE-2024-48875 | microsoft_vex | btrfs: don't take dev_replace rwsem on task already holding it | fixed: 2 known affected: 2 under investigation: 4 | 2026-08-07T04:14:33+00:00 | Vulnerability · Source |
| CVE-2025-5278 | microsoft_vex | Coreutils: heap buffer under-read in gnu coreutils sort via key specification | fixed: 1 known affected: 2 | 2026-08-07T04:14:28+00:00 | Vulnerability · Source |
| CVE-2024-47141 | microsoft_vex | pinmux: Use sequential access to access desc->pinmux data | fixed: 2 known affected: 2 under investigation: 4 | 2026-08-07T04:14:25+00:00 | Vulnerability · Source |
| CVE-2024-47809 | microsoft_vex | dlm: fix possible lkb_resource null dereference | fixed: 2 known affected: 2 under investigation: 4 | 2026-08-07T04:14:17+00:00 | Vulnerability · Source |
| CVE-2026-23199 | redhat_vex | kernel: procfs: avoid fetching build ID while holding VMA lock | fixed: 309 known affected: 122 known not affected: 76 | 2026-08-07T04:13:21+00:00 | Vulnerability · Source |
| CVE-2026-47087 | redhat_vex | cyrus-imapd: Cyrus IMAP: Unauthorized access due to URLAUTH not honoring revoked authorizer access | known affected: 20 | 2026-08-07T04:08:46+00:00 | Vulnerability · Source |
| CVE-2026-47085 | redhat_vex | cyrus-imapd: Cyrus IMAP: Information disclosure via URLAUTH token forgery | known affected: 20 | 2026-08-07T04:08:44+00:00 | Vulnerability · Source |
| CVE-2026-47083 | redhat_vex | cyrus-imapd: Cyrus IMAP: Information disclosure via ESEARCH command | known affected: 20 | 2026-08-07T04:08:36+00:00 | Vulnerability · Source |
| CVE-2020-24512 | redhat_vex | hw: observable timing discrepancy in some Intel Processors | fixed: 95 | 2026-08-07T02:45:42+00:00 | Vulnerability · Source |
| CVE-2020-0548 | redhat_vex | hw: Vector Register Data Sampling | fixed: 120 known affected: 1 | 2026-08-07T02:45:39+00:00 | Vulnerability · Source |
| CVE-2026-44660 | redhat_vex | python-ujson: UltraJSON: Memory leak leading to Denial of Service | fixed: 6 known affected: 15 known not affected: 205 | 2026-08-07T02:44:21+00:00 | Vulnerability · Source |
| CVE-2026-66038 | redhat_vex | FFmpeg: Information disclosure via malformed zlib video stream | known affected: 8 | 2026-08-07T02:41:43+00:00 | Vulnerability · Source |
| CVE-2026-66037 | redhat_vex | FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer | known affected: 8 | 2026-08-07T02:41:38+00:00 | Vulnerability · Source |
| CVE-2023-20569 | redhat_vex | amd: Return Address Predictor vulnerability leading to information disclosure | fixed: 1244 known affected: 50 known not affected: 23 | 2026-08-07T02:39:52+00:00 | Vulnerability · Source |
| CVE-2023-20593 | redhat_vex | hw: amd: Cross-Process Information Leak | fixed: 1519 known not affected: 97 | 2026-08-07T02:39:50+00:00 | Vulnerability · Source |
| CVE-2023-20592 | redhat_vex | hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem | fixed: 282 known affected: 1 | 2026-08-07T02:39:48+00:00 | Vulnerability · Source |
| CVE-2023-2002 | redhat_vex | Kernel: bluetooth: Unauthorized management command execution | fixed: 1138 known not affected: 15 | 2026-08-07T02:39:46+00:00 | Vulnerability · Source |
| CVE-2020-10029 | redhat_vex | glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions | fixed: 1146 known affected: 9 | 2026-08-07T02:39:20+00:00 | Vulnerability · Source |