VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291906 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-21710 | microsoft_vex | A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`. When this occurs, `dest["__proto__"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`. * This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x** | fixed: 2 known affected: 5 | 2026-08-09T14:47:22+00:00 | Vulnerability · Source |
| CVE-2026-21717 | microsoft_vex | A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process. The most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table. This vulnerability affects **20.x, 22.x, 24.x, and 25.x**. | fixed: 1 known affected: 5 known not affected: 1 | 2026-08-09T14:47:16+00:00 | Vulnerability · Source |
| CVE-2026-4833 | microsoft_vex | Orc discount Markdown markdown.c compile recursion | known affected: 5 | 2026-08-09T14:47:10+00:00 | Vulnerability · Source |
| CVE-2026-4647 | microsoft_vex | Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library | fixed: 6 known affected: 13 | 2026-08-09T14:47:03+00:00 | Vulnerability · Source |
| CVE-2026-3099 | microsoft_vex | Libsoup: libsoup: authentication bypass via digest authentication replay attack | known affected: 8 | 2026-08-09T14:46:51+00:00 | Vulnerability · Source |
| CVE-2026-3633 | microsoft_vex | Libsoup: libsoup: header and http request injection via crlf injection | known affected: 8 | 2026-08-09T14:46:43+00:00 | Vulnerability · Source |
| CVE-2026-3632 | microsoft_vex | Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames | known affected: 8 | 2026-08-09T14:46:36+00:00 | Vulnerability · Source |
| CVE-2026-3634 | microsoft_vex | Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header | known affected: 8 | 2026-08-09T14:46:29+00:00 | Vulnerability · Source |
| CVE-2025-69649 | microsoft_vex | GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed. | fixed: 2 known affected: 5 | 2026-08-09T14:46:13+00:00 | Vulnerability · Source |
| CVE-2025-69645 | microsoft_vex | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file. | fixed: 2 known affected: 5 | 2026-08-09T14:46:07+00:00 | Vulnerability · Source |
| CVE-2025-69646 | microsoft_vex | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis. | fixed: 2 known affected: 5 | 2026-08-09T14:46:01+00:00 | Vulnerability · Source |
| CVE-2025-55551 | microsoft_vex | An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. | known affected: 15 | 2026-08-09T14:45:22+00:00 | Vulnerability · Source |
| CVE-2024-3660 | microsoft_vex | Arbitrary code injection vulnerability in Keras framework < 2.13 | known affected: 4 | 2026-08-09T14:45:09+00:00 | Vulnerability · Source |
| CVE-2023-45927 | microsoft_vex | S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf(). | known affected: 4 | 2026-08-09T14:40:53+00:00 | Vulnerability · Source |
| CVE-2026-71438 | redhat_vex | mermaid: Mermaid: Prototype pollution vulnerability via configuration APIs | known affected: 3 | 2026-08-09T07:25:12+00:00 | Vulnerability · Source |
| CVE-2026-71437 | redhat_vex | mermaid: Mermaid: Prototype pollution vulnerability allows potential arbitrary code execution | known affected: 3 | 2026-08-09T07:20:32+00:00 | Vulnerability · Source |
| CVE-2026-71852 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with large CID font width ranges | known affected: 14 | 2026-08-09T05:33:43+00:00 | Vulnerability · Source |
| CVE-2026-71870 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with large /ToUnicode streams | known affected: 14 | 2026-08-09T05:30:58+00:00 | Vulnerability · Source |
| CVE-2026-19155 | redhat_vex | chromium-browser: Chromium: Sandbox escape via use-after-free in Payments | known not affected: 1 | 2026-08-09T05:20:15+00:00 | Vulnerability · Source |
| CVE-2024-41110 | redhat_vex | moby: Authz zero length regression | fixed: 4 known affected: 3 known not affected: 36 | 2026-08-09T05:02:29+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 7 known not affected: 700 | 2026-08-09T03:54:33+00:00 | Vulnerability · Source |
| CVE-2026-64584 | microsoft_vex | usb: gadget: f_midi: cancel pending IN work before freeing the midi object | fixed: 1 known affected: 1 | 2026-08-09T01:43:45+00:00 | Vulnerability · Source |
| CVE-2026-64583 | microsoft_vex | usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown | fixed: 1 known affected: 1 | 2026-08-09T01:43:38+00:00 | Vulnerability · Source |
| CVE-2026-64604 | microsoft_vex | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | fixed: 1 known affected: 1 | 2026-08-09T01:43:30+00:00 | Vulnerability · Source |
| CVE-2026-64590 | microsoft_vex | dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning | fixed: 1 known affected: 1 | 2026-08-09T01:43:23+00:00 | Vulnerability · Source |
| CVE-2026-64577 | microsoft_vex | gtp: check skb_pull_data() return in gtp1u_send_echo_resp() | fixed: 1 known affected: 1 | 2026-08-09T01:43:14+00:00 | Vulnerability · Source |
| CVE-2026-64567 | microsoft_vex | btrfs: reject free space cache with more entries than pages | fixed: 1 known affected: 1 | 2026-08-09T01:43:07+00:00 | Vulnerability · Source |
| CVE-2026-64569 | microsoft_vex | mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | fixed: 1 known affected: 1 | 2026-08-09T01:43:00+00:00 | Vulnerability · Source |
| CVE-2026-64572 | microsoft_vex | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | fixed: 1 known affected: 1 | 2026-08-09T01:42:53+00:00 | Vulnerability · Source |
| CVE-2026-64573 | microsoft_vex | Bluetooth: qca: fix NVM tag length underflow in TLV parser | fixed: 1 known affected: 1 | 2026-08-09T01:42:46+00:00 | Vulnerability · Source |
| CVE-2026-64574 | microsoft_vex | wifi: mac80211: tear down new links on vif update error path | fixed: 1 known affected: 1 | 2026-08-09T01:42:39+00:00 | Vulnerability · Source |
| CVE-2026-64580 | microsoft_vex | xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() | fixed: 1 known affected: 1 | 2026-08-09T01:42:32+00:00 | Vulnerability · Source |
| CVE-2026-64576 | microsoft_vex | nexthop: initialize extack in nh_res_bucket_migrate() | fixed: 1 known affected: 1 | 2026-08-09T01:42:24+00:00 | Vulnerability · Source |
| CVE-2026-64579 | microsoft_vex | xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert | fixed: 1 known affected: 1 | 2026-08-09T01:42:17+00:00 | Vulnerability · Source |
| CVE-2026-64571 | microsoft_vex | wifi: p54: validate RX frame length in p54_rx_eeprom_readback() | fixed: 1 known affected: 1 | 2026-08-09T01:42:09+00:00 | Vulnerability · Source |
| CVE-2026-64578 | microsoft_vex | ksmbd: validate compound request size before reading StructureSize2 | fixed: 1 known affected: 1 | 2026-08-09T01:42:02+00:00 | Vulnerability · Source |
| CVE-2026-64562 | microsoft_vex | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | fixed: 1 known affected: 1 | 2026-08-09T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-64565 | microsoft_vex | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() | fixed: 1 known affected: 1 | 2026-08-09T01:41:47+00:00 | Vulnerability · Source |
| CVE-2026-64564 | microsoft_vex | sctp: don't free the ASCONF's own transport in DEL-IP processing | fixed: 1 known affected: 1 | 2026-08-09T01:41:39+00:00 | Vulnerability · Source |
| CVE-2026-64561 | microsoft_vex | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | fixed: 1 known affected: 1 | 2026-08-09T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-64560 | microsoft_vex | posix-cpu-timers: Prevent UAF caused by non-leader exec() race | fixed: 1 known affected: 1 | 2026-08-09T01:41:22+00:00 | Vulnerability · Source |
| CVE-2026-64542 | microsoft_vex | ipv6: ndisc: fix NULL deref in accept_untracked_na() | fixed: 1 known affected: 1 | 2026-08-09T01:41:15+00:00 | Vulnerability · Source |
| CVE-2026-15788 | microsoft_vex | WCOW cache mount source selector resolves NTFS junctions outside of cache root | known affected: 1 under investigation: 1 | 2026-08-09T01:41:02+00:00 | Vulnerability · Source |
| CVE-2026-26081 | microsoft_vex | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. | fixed: 1 known affected: 2 | 2026-08-09T01:40:55+00:00 | Vulnerability · Source |
| CVE-2026-26080 | microsoft_vex | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected. | known affected: 1 known not affected: 1 | 2026-08-09T01:40:48+00:00 | Vulnerability · Source |
| CVE-2026-15588 | microsoft_vex | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | fixed: 1 known affected: 2 | 2026-08-09T01:40:41+00:00 | Vulnerability · Source |
| CVE-2026-63308 | microsoft_vex | Helm Files.Lines Denial of Service via Empty Chart Files | fixed: 1 known affected: 2 | 2026-08-09T01:40:33+00:00 | Vulnerability · Source |
| CVE-2026-53910 | microsoft_vex | Heap-based Buffer Overflow in GNU diffutils | known not affected: 1 | 2026-08-09T01:40:26+00:00 | Vulnerability · Source |
| CVE-2026-62994 | microsoft_vex | CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin | fixed: 1 known affected: 2 | 2026-08-09T01:40:20+00:00 | Vulnerability · Source |
| CVE-2026-18839 | microsoft_vex | Popt-devel: popt-static: size_t underflow in singleoptionhelp | known affected: 1 under investigation: 1 | 2026-08-09T01:03:39+00:00 | Vulnerability · Source |