VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291704 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-68426 | redhat_vex | kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment | known affected: 232 known not affected: 42 | 2026-08-13T23:26:42+00:00 | Vulnerability · Source |
| CVE-2026-68298 | redhat_vex | kernel: drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() | known affected: 184 known not affected: 90 | 2026-08-13T23:22:10+00:00 | Vulnerability · Source |
| CVE-2026-68103 | redhat_vex | kernel: drm/amdgpu: reject mapping a reserved doorbell to a new queue | known affected: 274 | 2026-08-13T23:19:50+00:00 | Vulnerability · Source |
| CVE-2026-68091 | redhat_vex | kernel: HID: wacom: stop hardware after post-start probe failures | known affected: 184 known not affected: 90 | 2026-08-13T23:19:43+00:00 | Vulnerability · Source |
| CVE-2026-68096 | redhat_vex | kernel: audit: fix recursive locking deadlock in audit_dupe_exe() | known affected: 274 | 2026-08-13T23:19:20+00:00 | Vulnerability · Source |
| CVE-2026-68085 | redhat_vex | kernel: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled | known affected: 198 known not affected: 76 | 2026-08-13T23:19:07+00:00 | Vulnerability · Source |
| CVE-2026-68266 | redhat_vex | kernel: drm/xe: Hold a dma-buf reference for imported BOs | known affected: 184 known not affected: 90 | 2026-08-13T23:19:03+00:00 | Vulnerability · Source |
| CVE-2026-68173 | redhat_vex | kernel: ublk: wait on ublk_dev_ready() instead of ub->completion | known affected: 76 known not affected: 198 | 2026-08-13T23:18:49+00:00 | Vulnerability · Source |
| CVE-2026-68158 | redhat_vex | kernel: libceph: Fix multiplication overflow in decode_new_up_state_weight() | known affected: 260 known not affected: 14 | 2026-08-13T23:18:00+00:00 | Vulnerability · Source |
| CVE-2026-68153 | redhat_vex | kernel: libceph: remove debugfs files before client teardown | known affected: 260 known not affected: 14 | 2026-08-13T23:17:25+00:00 | Vulnerability · Source |
| CVE-2026-68147 | redhat_vex | kernel: fscrypt: Avoid dynamic allocation in fscrypt_get_devices() | known not affected: 274 | 2026-08-13T23:17:21+00:00 | Vulnerability · Source |
| CVE-2026-68315 | redhat_vex | kernel: sctp: validate stream count in sctp_process_strreset_inreq() | known affected: 232 known not affected: 42 | 2026-08-13T23:16:12+00:00 | Vulnerability · Source |
| CVE-2026-68128 | redhat_vex | kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL | known affected: 185 known not affected: 90 | 2026-08-13T23:15:51+00:00 | Vulnerability · Source |
| CVE-2026-68206 | redhat_vex | kernel: media: v4l2-ctrls: validate HEVC active reference counts | known affected: 184 known not affected: 90 | 2026-08-13T23:15:04+00:00 | Vulnerability · Source |
| CVE-2026-68297 | redhat_vex | kernel: tipc: fix u16 MTU truncation in media and bearer MTU validation | known affected: 232 known not affected: 42 | 2026-08-13T23:14:27+00:00 | Vulnerability · Source |
| CVE-2026-68293 | redhat_vex | kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads | known affected: 246 known not affected: 28 | 2026-08-13T23:14:26+00:00 | Vulnerability · Source |
| CVE-2026-68189 | redhat_vex | kernel: Bluetooth: hci_sync: Protect UUID list traversal | known affected: 232 known not affected: 42 | 2026-08-13T23:13:41+00:00 | Vulnerability · Source |
| CVE-2026-68300 | redhat_vex | kernel: sctp: auth: verify auth requirement when auth_chunk is NULL | known affected: 274 | 2026-08-13T23:13:14+00:00 | Vulnerability · Source |
| CVE-2026-68263 | redhat_vex | kernel: Linux kernel: drm/imagination use-after-free vulnerability | known affected: 77 known not affected: 198 | 2026-08-13T23:13:09+00:00 | Vulnerability · Source |
| CVE-2026-68265 | redhat_vex | kernel: drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC | known affected: 184 known not affected: 90 | 2026-08-13T23:13:03+00:00 | Vulnerability · Source |
| CVE-2026-68236 | redhat_vex | kernel: drm/amd/display: set new_stream to NULL after release | known affected: 232 known not affected: 28 under investigation: 14 | 2026-08-13T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-68123 | redhat_vex | kernel: openvswitch: fix GSO userspace truncation underflow | known affected: 261 known not affected: 1 under investigation: 14 | 2026-08-13T23:08:51+00:00 | Vulnerability · Source |
| CVE-2026-67986 | redhat_vex | amazing_print: amazing_print: Arbitrary code execution via Ruby code injection in AwesomeMethodArray#grep | known not affected: 2 | 2026-08-13T23:03:11+00:00 | Vulnerability · Source |
| CVE-2026-6879 | redhat_vex | python: Python: Performance degradation in XML processing due to quadratic time complexity | fixed: 16 | 2026-08-13T22:53:22+00:00 | Vulnerability · Source |
| CVE-2026-11972 | redhat_vex | python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode | fixed: 13 known affected: 219 | 2026-08-13T22:42:55+00:00 | Vulnerability · Source |
| CVE-2026-4360 | redhat_vex | python: Python Tarfile: Unexpected file ownership when extracting hardlinks | fixed: 16 known affected: 232 | 2026-08-13T22:42:54+00:00 | Vulnerability · Source |
| CVE-2026-46584 | redhat_vex | org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers | fixed: 2 known affected: 1 known not affected: 1 | 2026-08-13T22:35:20+00:00 | Vulnerability · Source |
| CVE-2026-6860 | redhat_vex | eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name | fixed: 31 known affected: 21 known not affected: 17 under investigation: 15 | 2026-08-13T22:35:18+00:00 | Vulnerability · Source |
| CVE-2026-54291 | redhat_vex | org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade | fixed: 2 known affected: 8 | 2026-08-13T22:34:10+00:00 | Vulnerability · Source |
| CVE-2026-53712 | redhat_vex | com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack | fixed: 2 known affected: 1 | 2026-08-13T22:34:07+00:00 | Vulnerability · Source |
| CVE-2026-8484 | redhat_vex | jansi: org.fusesource.jansi/jansi: Jansi: Heap buffer overflow leads to Denial of Service | fixed: 2 known affected: 257 | 2026-08-13T22:34:06+00:00 | Vulnerability · Source |
| CVE-2026-14355 | redhat_vex | php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD | fixed: 1520 known affected: 26 known not affected: 80 | 2026-08-13T22:19:21+00:00 | Vulnerability · Source |
| CVE-2026-56820 | redhat_vex | io.netty/netty-handler-ssl-ocsp: Netty: Certificate revocation bypass via OCSP response replay attack | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-13T22:04:21+00:00 | Vulnerability · Source |
| CVE-2026-56817 | redhat_vex | io.netty/netty-codec-xml: Netty: Information disclosure via XML External Entity (XXE) vulnerability | fixed: 1 known affected: 8 known not affected: 1 | 2026-08-13T22:04:13+00:00 | Vulnerability · Source |
| CVE-2026-55223 | redhat_vex | c3p0: c3p0: Remote code execution via deserialization vulnerability | fixed: 1 known affected: 4 known not affected: 7 | 2026-08-13T22:03:48+00:00 | Vulnerability · Source |
| CVE-2026-55153 | redhat_vex | com.mchange/mchange-commons-java: mchange-commons-java: Remote code execution via JNDI injection | fixed: 1 known affected: 2 known not affected: 8 | 2026-08-13T22:03:43+00:00 | Vulnerability · Source |
| CVE-2026-46726 | redhat_vex | camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure | fixed: 2 known affected: 1 | 2026-08-13T22:03:18+00:00 | Vulnerability · Source |
| CVE-2026-46592 | redhat_vex | org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation | fixed: 2 known affected: 1 known not affected: 1 | 2026-08-13T22:03:16+00:00 | Vulnerability · Source |
| CVE-2026-45205 | redhat_vex | commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input | fixed: 1 known affected: 26 known not affected: 22 | 2026-08-13T22:03:07+00:00 | Vulnerability · Source |
| CVE-2026-44891 | redhat_vex | io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder | fixed: 1 known affected: 3 known not affected: 1 | 2026-08-13T22:03:01+00:00 | Vulnerability · Source |
| CVE-2026-43866 | redhat_vex | camel-jms: Apache Camel JMS components: Arbitrary Exchange state injection | fixed: 1 known not affected: 1 | 2026-08-13T22:02:59+00:00 | Vulnerability · Source |
| CVE-2026-40859 | redhat_vex | org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data | fixed: 2 known affected: 1 known not affected: 1 | 2026-08-13T22:02:53+00:00 | Vulnerability · Source |
| CVE-2025-43438 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 92 known affected: 11 known not affected: 5 | 2026-08-13T21:54:57+00:00 | Vulnerability · Source |
| CVE-2025-43441 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 92 known affected: 11 known not affected: 5 | 2026-08-13T21:54:23+00:00 | Vulnerability · Source |
| CVE-2026-66277 | redhat_vex | org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via uncontrolled transfer frames | known affected: 9 | 2026-08-13T21:25:56+00:00 | Vulnerability · Source |
| CVE-2026-19028 | redhat_vex | hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter | known affected: 2 | 2026-08-13T20:14:08+00:00 | Vulnerability · Source |
| CVE-2025-4330 | redhat_vex | cpython: python: Extraction filter bypass for linking outside extraction directory | fixed: 1029 known affected: 71 known not affected: 51 | 2026-08-13T20:11:11+00:00 | Vulnerability · Source |
| CVE-2021-40490 | redhat_vex | kernel: race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem | fixed: 120 known affected: 44 known not affected: 122 | 2026-08-13T19:43:41+00:00 | Vulnerability · Source |
| CVE-2022-29582 | redhat_vex | kernel: Race condition that allows container escape to system root | known not affected: 198 | 2026-08-13T19:43:36+00:00 | Vulnerability · Source |
| CVE-2021-33034 | redhat_vex | kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan | fixed: 1291 known not affected: 143 | 2026-08-13T19:42:32+00:00 | Vulnerability · Source |