VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291773 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53262 | microsoft_vex | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | known affected: 3 under investigation: 1 | 2026-08-13T00:14:44+00:00 | Vulnerability · Source |
| CVE-2026-45784 | microsoft_vex | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | known not affected: 6 | 2026-08-13T00:14:38+00:00 | Vulnerability · Source |
| CVE-2026-52961 | microsoft_vex | ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size | known affected: 4 | 2026-08-13T00:14:35+00:00 | Vulnerability · Source |
| CVE-2026-53107 | microsoft_vex | wifi: libertas: don't kill URBs in interrupt context | known affected: 3 under investigation: 1 | 2026-08-13T00:14:26+00:00 | Vulnerability · Source |
| CVE-2026-53009 | microsoft_vex | ice: fix double-free of tx_buf skb | known affected: 3 under investigation: 1 | 2026-08-13T00:14:17+00:00 | Vulnerability · Source |
| CVE-2026-53078 | microsoft_vex | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | known affected: 4 | 2026-08-13T00:14:07+00:00 | Vulnerability · Source |
| CVE-2026-54171 | microsoft_vex | Excon: redact additional sensitive/risky headers when following redirects | fixed: 2 known affected: 2 | 2026-08-13T00:14:06+00:00 | Vulnerability · Source |
| CVE-2026-53246 | microsoft_vex | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | known affected: 3 under investigation: 1 | 2026-08-13T00:13:57+00:00 | Vulnerability · Source |
| CVE-2026-50012 | microsoft_vex | Squid: Memory corruption in cache_digest reply handling | fixed: 2 known affected: 2 | 2026-08-13T00:13:52+00:00 | Vulnerability · Source |
| CVE-2026-53027 | microsoft_vex | fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | known affected: 3 under investigation: 1 | 2026-08-13T00:13:47+00:00 | Vulnerability · Source |
| CVE-2026-47729 | microsoft_vex | Squid: Memory disclosure in FTP gateway | fixed: 2 known affected: 2 | 2026-08-13T00:13:41+00:00 | Vulnerability · Source |
| CVE-2026-53129 | microsoft_vex | fs/mbcache: cancel shrink work before destroying the cache | known affected: 4 | 2026-08-13T00:13:39+00:00 | Vulnerability · Source |
| CVE-2026-53005 | microsoft_vex | af_unix: Drop all SCM attributes for SOCKMAP. | known affected: 3 under investigation: 1 | 2026-08-13T00:13:30+00:00 | Vulnerability · Source |
| CVE-2026-62299 | microsoft_vex | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record | fixed: 2 known affected: 2 | 2026-08-13T00:13:29+00:00 | Vulnerability · Source |
| CVE-2026-52953 | microsoft_vex | iommu/vt-d: Fix oops due to out of scope access | known affected: 3 under investigation: 1 | 2026-08-13T00:13:20+00:00 | Vulnerability · Source |
| CVE-2026-62309 | microsoft_vex | CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS | known affected: 1 under investigation: 1 | 2026-08-13T00:13:19+00:00 | Vulnerability · Source |
| CVE-2026-59831 | microsoft_vex | GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace | fixed: 2 known affected: 2 | 2026-08-13T00:12:52+00:00 | Vulnerability · Source |
| CVE-2026-52988 | microsoft_vex | netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | known affected: 4 | 2026-08-13T00:12:46+00:00 | Vulnerability · Source |
| CVE-2026-15028 | microsoft_vex | Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header | fixed: 1 known affected: 2 known not affected: 1 | 2026-08-13T00:12:42+00:00 | Vulnerability · Source |
| CVE-2026-52991 | microsoft_vex | sched/psi: fix race between file release and pressure write | known affected: 3 under investigation: 1 | 2026-08-13T00:12:38+00:00 | Vulnerability · Source |
| CVE-2026-53229 | microsoft_vex | net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure | known affected: 4 | 2026-08-13T00:12:27+00:00 | Vulnerability · Source |
| CVE-2026-42505 | microsoft_vex | Invoking Encrypted Client Hello privacy leak in crypto/tls | fixed: 1 known affected: 2 | 2026-08-13T00:12:18+00:00 | Vulnerability · Source |
| CVE-2026-53156 | microsoft_vex | nvmem: core: fix use-after-free bugs in error paths | known affected: 4 | 2026-08-13T00:12:15+00:00 | Vulnerability · Source |
| CVE-2026-53070 | microsoft_vex | sctp: disable BH before calling udp_tunnel_xmit_skb() | known affected: 4 | 2026-08-13T00:12:03+00:00 | Vulnerability · Source |
| CVE-2026-39822 | microsoft_vex | Root escape via symlink plus trailing slash in os | fixed: 1 known affected: 2 | 2026-08-13T00:12:02+00:00 | Vulnerability · Source |
| CVE-2026-53102 | microsoft_vex | wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() | known affected: 4 | 2026-08-13T00:11:52+00:00 | Vulnerability · Source |
| CVE-2026-40469 | microsoft_vex | Heap buffer overflow in gawk | under investigation: 1 | 2026-08-13T00:11:46+00:00 | Vulnerability · Source |
| CVE-2026-53108 | microsoft_vex | powerpc/64s: Fix unmap race with PMD migration entries | known affected: 3 under investigation: 1 | 2026-08-13T00:11:41+00:00 | Vulnerability · Source |
| CVE-2026-53091 | microsoft_vex | net: pull headers in qdisc_pkt_len_segs_init() | known affected: 4 | 2026-08-13T00:11:30+00:00 | Vulnerability · Source |
| CVE-2026-53053 | microsoft_vex | iommu/amd: Fix clone_alias() to use the original device's devid | known affected: 3 under investigation: 1 | 2026-08-13T00:11:19+00:00 | Vulnerability · Source |
| CVE-2026-53226 | microsoft_vex | gpio: rockchip: fix generic IRQ chip leak on remove | known affected: 4 | 2026-08-13T00:11:07+00:00 | Vulnerability · Source |
| CVE-2026-15308 | microsoft_vex | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | known affected: 2 known not affected: 1 | 2026-08-13T00:11:00+00:00 | Vulnerability · Source |
| CVE-2026-53258 | microsoft_vex | wifi: fix leak if split 6 GHz scanning fails | known affected: 4 | 2026-08-13T00:10:54+00:00 | Vulnerability · Source |
| CVE-2026-53109 | microsoft_vex | powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy | known affected: 4 | 2026-08-13T00:10:40+00:00 | Vulnerability · Source |
| CVE-2026-52937 | microsoft_vex | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | known affected: 4 | 2026-08-13T00:10:28+00:00 | Vulnerability · Source |
| CVE-2026-59890 | microsoft_vex | setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ | fixed: 2 known affected: 2 known not affected: 4 | 2026-08-13T00:10:27+00:00 | Vulnerability · Source |
| CVE-2026-53132 | microsoft_vex | vsock/virtio: fix potential unbounded skb queue | known affected: 4 | 2026-08-13T00:10:15+00:00 | Vulnerability · Source |
| CVE-2026-53000 | microsoft_vex | netfilter: nat: use kfree_rcu to release ops | known affected: 3 under investigation: 1 | 2026-08-13T00:09:45+00:00 | Vulnerability · Source |
| CVE-2026-14461 | microsoft_vex | Out-of-bound read in mtr | fixed: 2 known affected: 2 | 2026-08-13T00:09:38+00:00 | Vulnerability · Source |
| CVE-2026-53122 | microsoft_vex | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | known affected: 4 | 2026-08-13T00:09:29+00:00 | Vulnerability · Source |
| CVE-2026-59998 | microsoft_vex | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory. | known affected: 2 | 2026-08-13T00:09:17+00:00 | Vulnerability · Source |
| CVE-2026-53166 | microsoft_vex | futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock | known affected: 3 under investigation: 1 | 2026-08-13T00:09:11+00:00 | Vulnerability · Source |
| CVE-2026-53179 | microsoft_vex | staging: rtl8723bs: fix buffer over-read in rtw_update_protection | known affected: 4 | 2026-08-13T00:08:54+00:00 | Vulnerability · Source |
| CVE-2026-53015 | microsoft_vex | erofs: unify lcn as u64 for 32-bit platforms | known affected: 4 | 2026-08-13T00:08:36+00:00 | Vulnerability · Source |
| CVE-2026-56288 | microsoft_vex | NULL Pointer Dereference in GNU patch | fixed: 2 known affected: 2 under investigation: 1 | 2026-08-13T00:08:35+00:00 | Vulnerability · Source |
| CVE-2026-53178 | microsoft_vex | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | known affected: 4 | 2026-08-13T00:08:17+00:00 | Vulnerability · Source |
| CVE-2026-54522 | microsoft_vex | MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure | fixed: 1 known affected: 1 | 2026-08-13T00:08:10+00:00 | Vulnerability · Source |
| CVE-2026-56289 | microsoft_vex | Loop with Unreachable Exit Condition in GNU patch | fixed: 2 known affected: 2 under investigation: 1 | 2026-08-13T00:08:04+00:00 | Vulnerability · Source |
| CVE-2026-53120 | microsoft_vex | PCI: use generic driver_override infrastructure | known affected: 4 | 2026-08-13T00:08:01+00:00 | Vulnerability · Source |
| CVE-2026-53089 | microsoft_vex | bpf: Fix use-after-free in offloaded map/prog info fill | known affected: 3 under investigation: 1 | 2026-08-13T00:07:43+00:00 | Vulnerability · Source |