VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291773 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9545 | microsoft_vex | exposing HTTP/3 early data | known affected: 1 known not affected: 4 | 2026-08-12T23:59:52+00:00 | Vulnerability · Source |
| CVE-2026-64001 | microsoft_vex | ALSA: pcm: oss: Fix setup list UAF on proc write error | known affected: 1 known not affected: 1 | 2026-08-12T23:59:43+00:00 | Vulnerability · Source |
| CVE-2026-3276 | microsoft_vex | Potential DoS via quadratic complexity in unicodedata.normalize() | fixed: 1 known affected: 3 | 2026-08-12T23:59:39+00:00 | Vulnerability · Source |
| CVE-2026-64079 | microsoft_vex | netfilter: x_tables: allocate hook ops while under mutex | known affected: 2 | 2026-08-12T23:59:15+00:00 | Vulnerability · Source |
| CVE-2026-64036 | microsoft_vex | cgroup/rstat: validate cpu before css_rstat_cpu() access | known affected: 2 | 2026-08-12T23:58:42+00:00 | Vulnerability · Source |
| CVE-2026-4360 | microsoft_vex | Tarfile.extract() doesn't fully respect filter parameter | fixed: 1 known affected: 2 known not affected: 1 | 2026-08-12T23:58:42+00:00 | Vulnerability · Source |
| CVE-2026-64038 | microsoft_vex | hwmon: (lm90) Stop work before releasing hwmon device | known affected: 2 | 2026-08-12T23:58:11+00:00 | Vulnerability · Source |
| CVE-2026-63808 | microsoft_vex | exfat: fix potential use-after-free in exfat_find_dir_entry() | known not affected: 1 | 2026-08-12T23:57:42+00:00 | Vulnerability · Source |
| CVE-2026-42507 | microsoft_vex | Arbitrary inputs are included in errors without any escaping in net/textproto | fixed: 3 known affected: 5 known not affected: 3 | 2026-08-12T23:56:47+00:00 | Vulnerability · Source |
| CVE-2026-53383 | microsoft_vex | ksmbd: reject non-VALID session in compound request branch | known not affected: 1 | 2026-08-12T23:56:29+00:00 | Vulnerability · Source |
| CVE-2025-71313 | microsoft_vex | PCI: endpoint: Add missing NULL check for alloc_workqueue() | known affected: 5 | 2026-08-12T23:56:13+00:00 | Vulnerability · Source |
| CVE-2026-63814 | microsoft_vex | f2fs: validate ACL entry sizes in f2fs_acl_from_disk() | known not affected: 1 | 2026-08-12T23:56:00+00:00 | Vulnerability · Source |
| CVE-2026-13325 | microsoft_vex | Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known affected: 2 | 2026-08-12T23:55:42+00:00 | Vulnerability · Source |
| CVE-2026-46254 | microsoft_vex | AppArmor: Allow apparmor to handle unaligned dfa tables | known affected: 5 | 2026-08-12T23:55:40+00:00 | Vulnerability · Source |
| CVE-2026-53390 | microsoft_vex | ksmbd: fix out-of-bounds read in smb_check_perm_dacl() | known not affected: 1 | 2026-08-12T23:55:17+00:00 | Vulnerability · Source |
| CVE-2026-46245 | microsoft_vex | drm/amd/display: Fix dc_link NULL handling in HPD init | known affected: 5 | 2026-08-12T23:55:11+00:00 | Vulnerability · Source |
| CVE-2026-13218 | microsoft_vex | Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher | known affected: 2 | 2026-08-12T23:55:09+00:00 | Vulnerability · Source |
| CVE-2026-13208 | microsoft_vex | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body | known affected: 2 | 2026-08-12T23:54:35+00:00 | Vulnerability · Source |
| CVE-2026-63812 | microsoft_vex | f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() | known not affected: 1 | 2026-08-12T23:54:32+00:00 | Vulnerability · Source |
| CVE-2026-13318 | microsoft_vex | Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip | known affected: 2 | 2026-08-12T23:53:54+00:00 | Vulnerability · Source |
| CVE-2026-63804 | microsoft_vex | gfs2: fix use-after-free in gfs2_qd_dealloc | known not affected: 1 | 2026-08-12T23:53:43+00:00 | Vulnerability · Source |
| CVE-2026-13322 | microsoft_vex | Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service | known affected: 2 | 2026-08-12T23:53:17+00:00 | Vulnerability · Source |
| CVE-2026-63817 | microsoft_vex | f2fs: validate compress cache inode only when enabled | known not affected: 1 | 2026-08-12T23:53:02+00:00 | Vulnerability · Source |
| CVE-2026-11979 | microsoft_vex | Stack-Based Buffer Overflow in libxml2 | under investigation: 1 | 2026-08-12T23:52:21+00:00 | Vulnerability · Source |
| CVE-2026-63797 | microsoft_vex | rpmsg: char: Fix use-after-free on probe error path | known not affected: 1 | 2026-08-12T23:52:21+00:00 | Vulnerability · Source |
| CVE-2026-63798 | microsoft_vex | irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove | known not affected: 1 | 2026-08-12T23:51:15+00:00 | Vulnerability · Source |
| CVE-2026-53297 | microsoft_vex | net: mana: Guard mana_remove against double invocation | known affected: 3 | 2026-08-12T23:49:52+00:00 | Vulnerability · Source |
| CVE-2026-53313 | microsoft_vex | drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths | known affected: 3 | 2026-08-12T23:49:05+00:00 | Vulnerability · Source |
| CVE-2026-63822 | microsoft_vex | wifi: ath11k: fix warning when unbinding | known not affected: 1 | 2026-08-12T23:48:38+00:00 | Vulnerability · Source |
| CVE-2026-53284 | microsoft_vex | btrfs: only release the dirty pages io tree after successful writes | known affected: 3 | 2026-08-12T23:47:26+00:00 | Vulnerability · Source |
| CVE-2026-53292 | microsoft_vex | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind | known affected: 3 | 2026-08-12T23:46:33+00:00 | Vulnerability · Source |
| CVE-2026-53393 | microsoft_vex | nfsd: reset write verifier on deferred writeback errors | fixed: 1 known affected: 1 | 2026-08-12T23:45:53+00:00 | Vulnerability · Source |
| CVE-2026-0864 | microsoft_vex | Configuration Injection via Carriage Return (\r) in write() method | fixed: 1 known affected: 3 known not affected: 1 | 2026-08-12T23:45:44+00:00 | Vulnerability · Source |
| CVE-2026-53387 | microsoft_vex | iio: light: veml6075: add bounds check to veml6075_it_ms index | known not affected: 1 | 2026-08-12T23:44:47+00:00 | Vulnerability · Source |
| CVE-2026-11972 | microsoft_vex | tarfile opened in streaming mode mishandles EOF | fixed: 1 known affected: 3 known not affected: 1 | 2026-08-12T23:44:42+00:00 | Vulnerability · Source |
| CVE-2026-63829 | microsoft_vex | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | fixed: 1 known affected: 1 | 2026-08-12T23:43:53+00:00 | Vulnerability · Source |
| CVE-2026-9675 | microsoft_vex | undici WebSocket client vulnerable to denial of service via cumulative fragment bypass | fixed: 1 known affected: 1 | 2026-08-12T23:43:41+00:00 | Vulnerability · Source |
| CVE-2026-43450 | redhat_vex | kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | fixed: 453 known affected: 104 known not affected: 36 | 2026-08-12T23:41:48+00:00 | Vulnerability · Source |
| CVE-2026-68334 | redhat_vex | kernel: Linux kernel: `rxrpc` race condition causes Denial of Service | known not affected: 33 | 2026-08-12T23:41:31+00:00 | Vulnerability · Source |
| CVE-2026-73232 | redhat_vex | github.com/ffuf/ffuf: ffuf: Denial of Service via HTTP response decompression bomb | known not affected: 1 | 2026-08-12T23:41:01+00:00 | Vulnerability · Source |
| CVE-2026-44618 | redhat_vex | org.apache.cxf/cxf-rt-ws-transfer: Apache CXF: XML External Entity (XXE) attack via insecure XML parser configuration | known not affected: 3 | 2026-08-12T23:04:47+00:00 | Vulnerability · Source |
| CVE-2026-64296 | redhat_vex | kernel: exfat: bound uniname advance in exfat_find_dir_entry() | known affected: 184 known not affected: 90 | 2026-08-12T21:46:58+00:00 | Vulnerability · Source |
| CVE-2026-64317 | redhat_vex | kernel: isofs: bound Rock Ridge symlink components to the SL record | known affected: 76 known not affected: 198 | 2026-08-12T21:46:50+00:00 | Vulnerability · Source |
| CVE-2026-71391 | redhat_vex | emacs: off-by-one error via a malicious font file | known not affected: 29 | 2026-08-12T21:46:26+00:00 | Vulnerability · Source |
| CVE-2026-64237 | redhat_vex | kernel: Input: elan_i2c - validate firmware size before use | known affected: 232 known not affected: 42 | 2026-08-12T21:46:23+00:00 | Vulnerability · Source |
| CVE-2026-44774 | redhat_vex | traefik: Traefik: Privilege escalation via Kubernetes Gateway API provider configuration bypass | fixed: 4 known not affected: 63 | 2026-08-12T21:40:05+00:00 | Vulnerability · Source |
| CVE-2026-71394 | redhat_vex | emacs: use of uninitialized memory via a malicious font file | known not affected: 29 | 2026-08-12T21:31:29+00:00 | Vulnerability · Source |
| CVE-2026-71392 | redhat_vex | emacs: integer overflow via a malicious font file | known not affected: 29 | 2026-08-12T21:31:17+00:00 | Vulnerability · Source |
| CVE-2024-24783 | redhat_vex | golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm | fixed: 2046 known affected: 100 known not affected: 1030 | 2026-08-12T21:24:09+00:00 | Vulnerability · Source |
| CVE-2023-29400 | redhat_vex | golang: html/template: improper handling of empty HTML attributes | fixed: 1684 known affected: 42 known not affected: 1086 under investigation: 2 | 2026-08-12T21:22:59+00:00 | Vulnerability · Source |