VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-0549 | redhat_vex | hw: L1D Cache Eviction Sampling | fixed: 120 known affected: 1 | 2026-08-07T02:39:19+00:00 | Vulnerability · Source |
| CVE-2020-0543 | redhat_vex | hw: Special Register Buffer Data Sampling (SRBDS) | fixed: 120 known affected: 2 known not affected: 93 | 2026-08-07T02:39:19+00:00 | Vulnerability · Source |
| CVE-2020-8698 | redhat_vex | hw: Fast forward store predictor | fixed: 119 known affected: 1 | 2026-08-07T02:37:42+00:00 | Vulnerability · Source |
| CVE-2021-20271 | redhat_vex | rpm: Signature checks bypass via corrupted rpm package | fixed: 588 known affected: 8 known not affected: 17 | 2026-08-07T02:37:39+00:00 | Vulnerability · Source |
| CVE-2020-8696 | redhat_vex | hw: Vector Register Leakage-Active | fixed: 161 known affected: 1 | 2026-08-07T02:37:37+00:00 | Vulnerability · Source |
| CVE-2020-8695 | redhat_vex | hw: Information disclosure issue in Intel SGX via RAPL interface | fixed: 95 known not affected: 3 | 2026-08-07T02:37:36+00:00 | Vulnerability · Source |
| CVE-2020-8116 | redhat_vex | nodejs-dot-prop: prototype pollution | fixed: 200 known affected: 4 known not affected: 22 | 2026-08-07T02:37:35+00:00 | Vulnerability · Source |
| CVE-2020-8648 | redhat_vex | kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c | fixed: 537 known affected: 32 | 2026-08-07T02:37:35+00:00 | Vulnerability · Source |
| CVE-2021-3653 | redhat_vex | kernel: SVM nested virtualization issue in KVM (AVIC support) | fixed: 895 known affected: 14 known not affected: 130 | 2026-08-07T02:36:48+00:00 | Vulnerability · Source |
| CVE-2021-3656 | redhat_vex | kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE) | fixed: 819 known affected: 14 known not affected: 126 | 2026-08-07T02:36:48+00:00 | Vulnerability · Source |
| CVE-2020-24513 | redhat_vex | hw: information disclosure on some Intel Atom processors | fixed: 50 | 2026-08-07T02:36:37+00:00 | Vulnerability · Source |
| CVE-2020-25705 | redhat_vex | kernel: ICMP rate limiting can be used for DNS poisoning attack | fixed: 866 known affected: 43 known not affected: 52 | 2026-08-07T02:36:37+00:00 | Vulnerability · Source |
| CVE-2020-24511 | redhat_vex | hw: improper isolation of shared resources in some Intel Processors | fixed: 95 | 2026-08-07T02:36:35+00:00 | Vulnerability · Source |
| CVE-2020-29573 | redhat_vex | glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern | fixed: 332 known affected: 9 known not affected: 431 | 2026-08-07T02:36:27+00:00 | Vulnerability · Source |
| CVE-2019-19532 | redhat_vex | kernel: malicious USB devices can lead to multiple out-of-bounds write | fixed: 648 known affected: 43 | 2026-08-07T02:36:22+00:00 | Vulnerability · Source |
| CVE-2026-42561 | redhat_vex | python-multipart: python-multipart: Denial of Service via excessive multipart part headers | fixed: 20 known affected: 19 known not affected: 439 | 2026-08-07T02:23:57+00:00 | Vulnerability · Source |
| CVE-2026-24486 | redhat_vex | python-multipart: Python-Multipart: Arbitrary file write via path traversal vulnerability | fixed: 26 known affected: 15 known not affected: 1209 | 2026-08-07T02:23:56+00:00 | Vulnerability · Source |
| CVE-2023-46847 | redhat_vex | squid: Denial of Service in HTTP Digest Authentication | fixed: 280 | 2026-08-07T02:13:50+00:00 | Vulnerability · Source |
| CVE-2026-66036 | redhat_vex | ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter | known affected: 8 | 2026-08-07T02:01:56+00:00 | Vulnerability · Source |
| CVE-2026-66040 | redhat_vex | ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image | known affected: 8 | 2026-08-07T02:01:42+00:00 | Vulnerability · Source |
| CVE-2026-66041 | redhat_vex | ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file | known affected: 8 | 2026-08-07T02:01:23+00:00 | Vulnerability · Source |
| CVE-2026-66039 | redhat_vex | ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file | known affected: 8 | 2026-08-07T02:01:17+00:00 | Vulnerability · Source |
| CVE-2026-44673 | redhat_vex | libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob | fixed: 134 known not affected: 52 | 2026-08-07T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-55971 | redhat_vex | thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow | fixed: 138 known not affected: 16 | 2026-08-07T01:56:22+00:00 | Vulnerability · Source |
| CVE-2026-48145 | microsoft_vex | Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass | fixed: 1 known affected: 1 | 2026-08-07T01:22:41+00:00 | Vulnerability · Source |
| CVE-2026-64403 | microsoft_vex | Bluetooth: L2CAP: validate option length before reading conf opt value | fixed: 1 known affected: 1 | 2026-08-07T01:21:40+00:00 | Vulnerability · Source |
| CVE-2026-18477 | microsoft_vex | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape | known affected: 1 | 2026-08-07T01:21:35+00:00 | Vulnerability · Source |
| CVE-2026-64271 | microsoft_vex | Input: touchwin - reset the packet index on every complete packet | known not affected: 1 | 2026-08-07T01:21:26+00:00 | Vulnerability · Source |
| CVE-2026-18508 | microsoft_vex | Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite | known affected: 1 | 2026-08-07T01:21:22+00:00 | Vulnerability · Source |
| CVE-2026-64488 | microsoft_vex | ALSA: aoa: check snd_ctl_new1() return value | known not affected: 1 | 2026-08-07T01:21:15+00:00 | Vulnerability · Source |
| CVE-2026-14257 | microsoft_vex | brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash | known affected: 1 | 2026-08-07T01:21:09+00:00 | Vulnerability · Source |
| CVE-2026-64286 | microsoft_vex | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | fixed: 1 known affected: 1 | 2026-08-07T01:21:04+00:00 | Vulnerability · Source |
| CVE-2026-69152 | microsoft_vex | brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation | known affected: 1 | 2026-08-07T01:20:48+00:00 | Vulnerability · Source |
| CVE-2026-69153 | microsoft_vex | PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset | known affected: 1 | 2026-08-07T01:20:31+00:00 | Vulnerability · Source |
| CVE-2026-64272 | microsoft_vex | Input: mms114 - fix touch indexing for MMS134S and MMS136 | known not affected: 1 | 2026-08-07T01:20:27+00:00 | Vulnerability · Source |
| CVE-2026-41608 | microsoft_vex | Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport | fixed: 1 known affected: 1 | 2026-08-07T01:20:26+00:00 | Vulnerability · Source |
| CVE-2026-69249 | microsoft_vex | python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | known affected: 1 | 2026-08-07T01:20:10+00:00 | Vulnerability · Source |
| CVE-2026-64344 | microsoft_vex | USB: idmouse: fix use-after-free on disconnect race | known not affected: 1 | 2026-08-07T01:20:04+00:00 | Vulnerability · Source |
| CVE-2026-55970 | microsoft_vex | Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() | fixed: 1 known affected: 1 | 2026-08-07T01:20:02+00:00 | Vulnerability · Source |
| CVE-2026-69248 | microsoft_vex | python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | known affected: 1 | 2026-08-07T01:19:47+00:00 | Vulnerability · Source |
| CVE-2026-64351 | microsoft_vex | net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() | fixed: 1 known affected: 1 | 2026-08-07T01:19:39+00:00 | Vulnerability · Source |
| CVE-2026-70367 | microsoft_vex | Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services | known affected: 1 | 2026-08-07T01:19:20+00:00 | Vulnerability · Source |
| CVE-2026-64441 | microsoft_vex | staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() | fixed: 1 known affected: 1 | 2026-08-07T01:19:06+00:00 | Vulnerability · Source |
| CVE-2026-66053 | microsoft_vex | Apache Thrift: Python TSSLSocket Hostname Matcher Import | fixed: 1 known affected: 1 | 2026-08-07T01:19:03+00:00 | Vulnerability · Source |
| CVE-2026-70368 | microsoft_vex | Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message | known affected: 1 | 2026-08-07T01:18:50+00:00 | Vulnerability · Source |
| CVE-2024-56719 | microsoft_vex | net: stmmac: fix TSO DMA API usage causing oops | fixed: 2 known affected: 2 under investigation: 4 | 2026-08-07T01:18:42+00:00 | Vulnerability · Source |
| CVE-2024-56665 | microsoft_vex | bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog | fixed: 2 known affected: 2 under investigation: 4 | 2026-08-07T01:15:58+00:00 | Vulnerability · Source |
| CVE-2024-35887 | microsoft_vex | ax25: fix use-after-free bugs caused by ax25_ds_del_timer | known affected: 4 | 2026-08-07T01:15:29+00:00 | Vulnerability · Source |
| CVE-2024-35862 | microsoft_vex | smb: client: fix potential UAF in smb2_is_network_name_deleted() | known affected: 4 | 2026-08-07T01:14:53+00:00 | Vulnerability · Source |
| CVE-2024-56738 | microsoft_vex | GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks. | known affected: 8 | 2026-08-07T01:14:16+00:00 | Vulnerability · Source |