VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291773 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-59818 | microsoft_vex | etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation | fixed: 1 known affected: 1 | 2026-08-13T00:07:36+00:00 | Vulnerability · Source |
| CVE-2026-53115 | microsoft_vex | bus: fsl-mc: use generic driver_override infrastructure | known affected: 4 | 2026-08-13T00:07:20+00:00 | Vulnerability · Source |
| CVE-2026-54908 | microsoft_vex | Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message | fixed: 2 known affected: 2 | 2026-08-13T00:07:14+00:00 | Vulnerability · Source |
| CVE-2026-52956 | microsoft_vex | libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() | known affected: 3 under investigation: 1 | 2026-08-13T00:07:01+00:00 | Vulnerability · Source |
| CVE-2026-14191 | microsoft_vex | WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader | known affected: 1 known not affected: 1 | 2026-08-13T00:06:45+00:00 | Vulnerability · Source |
| CVE-2026-56000 | microsoft_vex | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() | fixed: 1 known affected: 1 under investigation: 1 | 2026-08-13T00:06:27+00:00 | Vulnerability · Source |
| CVE-2026-64017 | microsoft_vex | blk-mq: pop cached request if it is usable | known affected: 2 | 2026-08-13T00:06:13+00:00 | Vulnerability · Source |
| CVE-2026-12003 | microsoft_vex | CPython >3.11 Insecure Input Validation resulting in privilege escalation | fixed: 1 known affected: 3 known not affected: 1 | 2026-08-13T00:06:05+00:00 | Vulnerability · Source |
| CVE-2026-63979 | microsoft_vex | net/handshake: hand off the pinned file reference to accept_doit | known affected: 1 known not affected: 1 | 2026-08-13T00:05:54+00:00 | Vulnerability · Source |
| CVE-2026-43966 | microsoft_vex | HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 | fixed: 2 known affected: 3 | 2026-08-13T00:05:43+00:00 | Vulnerability · Source |
| CVE-2026-64060 | microsoft_vex | netfs: Fix leak of request in netfs_write_begin() error handling | known affected: 2 | 2026-08-13T00:05:38+00:00 | Vulnerability · Source |
| CVE-2026-9669 | microsoft_vex | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | fixed: 1 known affected: 3 | 2026-08-13T00:05:23+00:00 | Vulnerability · Source |
| CVE-2026-64076 | microsoft_vex | netfilter: bridge: eb_tables: close module init race | known affected: 2 | 2026-08-13T00:05:21+00:00 | Vulnerability · Source |
| CVE-2026-64112 | microsoft_vex | rbd: eliminate a race in lock_dwork draining on unmap | known affected: 2 | 2026-08-13T00:05:03+00:00 | Vulnerability · Source |
| CVE-2026-48854 | microsoft_vex | Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc | under investigation: 1 | 2026-08-13T00:05:03+00:00 | Vulnerability · Source |
| CVE-2026-64154 | microsoft_vex | drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() | known affected: 2 | 2026-08-13T00:04:46+00:00 | Vulnerability · Source |
| CVE-2026-53317 | microsoft_vex | wifi: mt76: mt7921: Place upper limit on station AID | known affected: 3 | 2026-08-13T00:04:40+00:00 | Vulnerability · Source |
| CVE-2026-11526 | microsoft_vex | GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle | under investigation: 1 | 2026-08-13T00:04:29+00:00 | Vulnerability · Source |
| CVE-2026-14647 | microsoft_vex | onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds | fixed: 1 known affected: 2 | 2026-08-13T00:04:24+00:00 | Vulnerability · Source |
| CVE-2026-63879 | microsoft_vex | drm/amdgpu: fix amdgpu_hmm_range_get_pages | known affected: 2 | 2026-08-13T00:04:09+00:00 | Vulnerability · Source |
| CVE-2026-46683 | microsoft_vex | Snappy: SSRF and local file read via the xsl-style-sheet option | under investigation: 1 | 2026-08-13T00:04:09+00:00 | Vulnerability · Source |
| CVE-2026-63963 | microsoft_vex | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | known affected: 1 known not affected: 1 | 2026-08-13T00:03:50+00:00 | Vulnerability · Source |
| CVE-2026-54886 | microsoft_vex | SSH SFTP server denial of service via extended channel data infinite loop | fixed: 2 known affected: 2 | 2026-08-13T00:03:50+00:00 | Vulnerability · Source |
| CVE-2026-46643 | microsoft_vex | Snappy: Binary path is never shell-escaped due to an inverted is_executable check | under investigation: 1 | 2026-08-13T00:03:50+00:00 | Vulnerability · Source |
| CVE-2026-46330 | microsoft_vex | Revert "net/smc: Introduce TCP ULP support" | known affected: 5 | 2026-08-13T00:03:32+00:00 | Vulnerability · Source |
| CVE-2026-63983 | microsoft_vex | net/sched: fix packet loop on netem when duplicate is on | known affected: 2 | 2026-08-13T00:03:32+00:00 | Vulnerability · Source |
| CVE-2026-64077 | microsoft_vex | netfilter: ebtables: move to two-stage removal scheme | known affected: 2 | 2026-08-13T00:03:13+00:00 | Vulnerability · Source |
| CVE-2026-46325 | microsoft_vex | RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE | known affected: 5 | 2026-08-13T00:03:12+00:00 | Vulnerability · Source |
| CVE-2026-9079 | microsoft_vex | stale proxy password leak | fixed: 1 known affected: 2 known not affected: 4 | 2026-08-13T00:03:10+00:00 | Vulnerability · Source |
| CVE-2026-63940 | microsoft_vex | KVM: SEV: Ignore Port I/O requests of length '0' | known affected: 2 | 2026-08-13T00:02:56+00:00 | Vulnerability · Source |
| CVE-2026-8286 | microsoft_vex | wrong STARTTLS connection reuse | fixed: 1 known affected: 2 known not affected: 5 | 2026-08-13T00:02:53+00:00 | Vulnerability · Source |
| CVE-2026-46324 | microsoft_vex | netfilter: nf_tables: use list_del_rcu for netlink hooks | known affected: 5 | 2026-08-13T00:02:50+00:00 | Vulnerability · Source |
| CVE-2026-64078 | microsoft_vex | netfilter: x_tables: add and use xtables_unregister_table_exit | known affected: 2 | 2026-08-13T00:02:38+00:00 | Vulnerability · Source |
| CVE-2026-10536 | microsoft_vex | HTTP/2 stream-dependency tree UAF | fixed: 1 known affected: 2 known not affected: 5 | 2026-08-13T00:02:35+00:00 | Vulnerability · Source |
| CVE-2026-64117 | microsoft_vex | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 2 | 2026-08-13T00:02:20+00:00 | Vulnerability · Source |
| CVE-2026-8927 | microsoft_vex | env-set cross-proxy Digest auth state leak | fixed: 1 known affected: 2 known not affected: 5 | 2026-08-13T00:02:18+00:00 | Vulnerability · Source |
| CVE-2026-63958 | microsoft_vex | usb: typec: ucsi: validate connector number in ucsi_connector_change() | known not affected: 1 | 2026-08-13T00:01:59+00:00 | Vulnerability · Source |
| CVE-2026-8932 | microsoft_vex | incomplete mTLS config matching in conn reuse | fixed: 1 known affected: 2 known not affected: 5 | 2026-08-13T00:01:58+00:00 | Vulnerability · Source |
| CVE-2025-71315 | microsoft_vex | drm/vkms: Convert to DRM's vblank timer | known affected: 5 | 2026-08-13T00:01:50+00:00 | Vulnerability · Source |
| CVE-2026-63962 | microsoft_vex | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | known affected: 1 known not affected: 1 | 2026-08-13T00:01:37+00:00 | Vulnerability · Source |
| CVE-2026-8458 | microsoft_vex | wrong reuse for different services | fixed: 1 known affected: 2 known not affected: 5 | 2026-08-13T00:01:35+00:00 | Vulnerability · Source |
| CVE-2026-46314 | microsoft_vex | drm/v3d: Reject empty multisync extension to prevent infinite loop | known affected: 5 | 2026-08-13T00:01:30+00:00 | Vulnerability · Source |
| CVE-2026-8924 | microsoft_vex | trailing dot domain super cookie | known affected: 2 known not affected: 6 | 2026-08-13T00:01:12+00:00 | Vulnerability · Source |
| CVE-2026-46302 | microsoft_vex | selinux: allow multiple opens of /sys/fs/selinux/policy | known affected: 5 | 2026-08-13T00:01:07+00:00 | Vulnerability · Source |
| CVE-2026-64070 | microsoft_vex | powerpc/hv-gpci: fix preempt count leak in sysfs show paths | known affected: 1 known not affected: 1 | 2026-08-13T00:00:55+00:00 | Vulnerability · Source |
| CVE-2026-46282 | microsoft_vex | iio: frequency: admv1013: fix NULL pointer dereference on str | known affected: 5 | 2026-08-13T00:00:43+00:00 | Vulnerability · Source |
| CVE-2026-11856 | microsoft_vex | cross-origin Digest auth state leak | fixed: 1 known affected: 3 known not affected: 5 | 2026-08-13T00:00:37+00:00 | Vulnerability · Source |
| CVE-2026-64138 | microsoft_vex | ksmbd: validate SID in parent security descriptor during ACL inheritance | known affected: 1 known not affected: 1 | 2026-08-13T00:00:31+00:00 | Vulnerability · Source |
| CVE-2026-50265 | microsoft_vex | Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292 | under investigation: 1 | 2026-08-13T00:00:17+00:00 | Vulnerability · Source |
| CVE-2026-64160 | microsoft_vex | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point | known affected: 2 | 2026-08-13T00:00:05+00:00 | Vulnerability · Source |