VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-22217 | redhat_vex | c-ares: Heap buffer over read in ares_parse_soa_reply | fixed: 63 known affected: 5 known not affected: 70 | 2026-08-06T19:15:20+00:00 | Vulnerability · Source |
| CVE-2023-5633 | redhat_vex | kernel: vmwgfx: reference count issue leads to use-after-free in surface handling | fixed: 771 known affected: 22 known not affected: 43 | 2026-08-06T19:14:22+00:00 | Vulnerability · Source |
| CVE-2023-6596 | redhat_vex | openshift: incomplete fix for Rapid Reset (CVE-2023-44487/CVE-2023-39325) | fixed: 8 known not affected: 1241 | 2026-08-06T19:14:20+00:00 | Vulnerability · Source |
| CVE-2023-5528 | redhat_vex | kubernetes: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes | fixed: 11 | 2026-08-06T19:14:10+00:00 | Vulnerability · Source |
| CVE-2023-6240 | redhat_vex | kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation | fixed: 859 known affected: 64 known not affected: 1 | 2026-08-06T19:12:43+00:00 | Vulnerability · Source |
| CVE-2026-54911 | redhat_vex | UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() | known affected: 14 known not affected: 4 | 2026-08-06T19:12:42+00:00 | Vulnerability · Source |
| CVE-2026-54619 | redhat_vex | sqlite3-ruby: sqlite3: sqlite3-ruby: Use-after-free when redefining SQLite functions with different arity | known affected: 2 | 2026-08-06T19:12:39+00:00 | Vulnerability · Source |
| CVE-2023-6931 | redhat_vex | kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size | fixed: 1171 known affected: 50 known not affected: 15 | 2026-08-06T19:12:39+00:00 | Vulnerability · Source |
| CVE-2023-6476 | redhat_vex | cri-o: Pods are able to break out of resource confinement on cgroupv2 | fixed: 52 known affected: 2 known not affected: 459 | 2026-08-06T19:12:35+00:00 | Vulnerability · Source |
| CVE-2023-6536 | redhat_vex | kernel: NULL pointer dereference in __nvmet_req_complete | fixed: 960 known affected: 22 known not affected: 42 | 2026-08-06T19:12:33+00:00 | Vulnerability · Source |
| CVE-2023-6606 | redhat_vex | kernel: Out-Of-Bounds Read vulnerability in smbCalcSize | fixed: 960 known affected: 64 | 2026-08-06T19:12:32+00:00 | Vulnerability · Source |
| CVE-2023-6531 | redhat_vex | kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF | fixed: 279 known affected: 22 known not affected: 90 | 2026-08-06T19:12:25+00:00 | Vulnerability · Source |
| CVE-2023-49081 | redhat_vex | aiohttp: HTTP request modification | fixed: 46 known affected: 2 known not affected: 2573 | 2026-08-06T19:12:22+00:00 | Vulnerability · Source |
| CVE-2023-49290 | redhat_vex | jwx: Malicious parameters in JWE can cause denial of service | known affected: 3 known not affected: 3 | 2026-08-06T19:12:20+00:00 | Vulnerability · Source |
| CVE-2023-6622 | redhat_vex | kernel: null pointer dereference vulnerability in nft_dynset_init() | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T19:12:17+00:00 | Vulnerability · Source |
| CVE-2024-0841 | redhat_vex | kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function | fixed: 429 known affected: 50 known not affected: 14 | 2026-08-06T19:10:56+00:00 | Vulnerability · Source |
| CVE-2023-6915 | redhat_vex | kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T19:10:55+00:00 | Vulnerability · Source |
| CVE-2023-53666 | redhat_vex | kernel: Linux kernel: Denial of Service in ASoC wcd938x codec due to improper error handling | fixed: 279 known affected: 22 known not affected: 166 | 2026-08-06T19:10:54+00:00 | Vulnerability · Source |
| CVE-2023-6817 | redhat_vex | kernel: inactive elements in nft_pipapo_walk | fixed: 1409 known affected: 22 known not affected: 43 | 2026-08-06T19:08:57+00:00 | Vulnerability · Source |
| CVE-2023-6546 | redhat_vex | kernel: GSM multiplexing race condition leads to privilege escalation | fixed: 1477 known affected: 22 known not affected: 43 | 2026-08-06T19:08:42+00:00 | Vulnerability · Source |
| CVE-2024-1085 | redhat_vex | kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function | fixed: 514 known affected: 22 known not affected: 90 | 2026-08-06T19:07:27+00:00 | Vulnerability · Source |
| CVE-2024-0607 | redhat_vex | kernel: nf_tables: pointer math issue in nft_byteorder_eval() | known affected: 156 known not affected: 42 | 2026-08-06T19:07:25+00:00 | Vulnerability · Source |
| CVE-2021-33630 | redhat_vex | kernel: net/sched: cbs NULL pointer dereference when offloading is enabled | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-06T19:06:50+00:00 | Vulnerability · Source |
| CVE-2023-52323 | redhat_vex | pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex | fixed: 554 known affected: 53 known not affected: 2262 | 2026-08-06T19:06:36+00:00 | Vulnerability · Source |
| CVE-2024-21803 | redhat_vex | kernel: bluetooth: use-after-free vulnerability in af_bluetooth.c | known not affected: 198 | 2026-08-06T19:06:35+00:00 | Vulnerability · Source |
| CVE-2021-33631 | redhat_vex | kernel: ext4: kernel bug in ext4_write_inline_data_end() | fixed: 893 known affected: 42 | 2026-08-06T19:06:28+00:00 | Vulnerability · Source |
| CVE-2024-1151 | redhat_vex | kernel: stack overflow problem in Open vSwitch kernel module leading to DoS | fixed: 514 known affected: 70 known not affected: 51 | 2026-08-06T19:06:24+00:00 | Vulnerability · Source |
| CVE-2024-24858 | redhat_vex | kernel: net/bluetooth: race condition in {conn,adv}_{min,max}_interval_set() function | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-06T19:06:23+00:00 | Vulnerability · Source |
| CVE-2024-22099 | redhat_vex | kernel: NULL Pointer dereference bluetooth allows Overflow Buffers | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-06T19:05:56+00:00 | Vulnerability · Source |
| CVE-2024-26624 | redhat_vex | kernel: af_unix: fix lockdep positive in sk_diag_dump_icons() | known affected: 28 known not affected: 170 | 2026-08-06T19:05:55+00:00 | Vulnerability · Source |
| CVE-2023-52466 | redhat_vex | kernel: out-of-bounds read in pci_dev_for_each_resource() | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-06T19:01:11+00:00 | Vulnerability · Source |
| CVE-2023-6932 | redhat_vex | kernel: use-after-free in IPv4 IGMP | fixed: 1109 known affected: 53 | 2026-08-06T19:01:01+00:00 | Vulnerability · Source |
| CVE-2023-43490 | redhat_vex | kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:59+00:00 | Vulnerability · Source |
| CVE-2023-52496 | redhat_vex | kernel: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters | known not affected: 198 | 2026-08-06T19:00:56+00:00 | Vulnerability · Source |
| CVE-2023-39368 | redhat_vex | kernel: Possible Denial of Service on Intel(R) Processors | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:47+00:00 | Vulnerability · Source |
| CVE-2023-28746 | redhat_vex | kernel: Local information disclosure on Intel(R) Atom(R) processors | fixed: 637 known affected: 59 known not affected: 29 | 2026-08-06T19:00:42+00:00 | Vulnerability · Source |
| CVE-2023-22655 | redhat_vex | kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:38+00:00 | Vulnerability · Source |
| CVE-2023-38575 | redhat_vex | kernel: Local information disclosure in some Intel(R) processors | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:30+00:00 | Vulnerability · Source |
| CVE-2024-26609 | redhat_vex | kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters | fixed: 429 known affected: 50 known not affected: 14 | 2026-08-06T19:00:24+00:00 | Vulnerability · Source |
| CVE-2026-12482 | redhat_vex | keras: Keras: Arbitrary File Operations via Malicious Tar Archive Processing | known affected: 9 | 2026-08-06T18:57:40+00:00 | Vulnerability · Source |
| CVE-2024-26821 | redhat_vex | kernel: fs: relax mount_setattr() permission checks | known affected: 42 known not affected: 156 | 2026-08-06T18:57:32+00:00 | Vulnerability · Source |
| CVE-2024-26908 | redhat_vex | kernel: x86/xen: Add some null pointer checking to smp.c | fixed: 987 known affected: 80 known not affected: 1 | 2026-08-06T18:57:13+00:00 | Vulnerability · Source |
| CVE-2024-2905 | redhat_vex | rpm-ostree: world-readable /etc/shadow file | fixed: 71 known not affected: 6 | 2026-08-06T18:57:06+00:00 | Vulnerability · Source |
| CVE-2024-0193 | redhat_vex | kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation | fixed: 724 known affected: 22 known not affected: 91 | 2026-08-06T18:49:14+00:00 | Vulnerability · Source |
| CVE-2024-3056 | redhat_vex | podman: kernel: containers in shared IPC namespace are vulnerable to denial of service attack | known affected: 263 known not affected: 35 | 2026-08-06T18:41:17+00:00 | Vulnerability · Source |
| CVE-2026-47429 | redhat_vex | vitest: Vitest: Arbitrary code execution and information disclosure via path traversal | fixed: 3 known not affected: 9 | 2026-08-06T18:36:03+00:00 | Vulnerability · Source |
| CVE-2024-1485 | redhat_vex | registry-support: decompress can delete files outside scope via relative paths | known affected: 2 | 2026-08-06T18:35:25+00:00 | Vulnerability · Source |
| CVE-2024-1725 | redhat_vex | kubevirt-csi: PersistentVolume allows access to HCP's root node | fixed: 12 known not affected: 1965 | 2026-08-06T18:22:20+00:00 | Vulnerability · Source |
| CVE-2026-44902 | redhat_vex | opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request | fixed: 2 known not affected: 7 | 2026-08-06T18:20:08+00:00 | Vulnerability · Source |
| CVE-2024-1753 | redhat_vex | buildah: full container escape at build time | fixed: 2191 known affected: 3 known not affected: 808 | 2026-08-06T18:18:12+00:00 | Vulnerability · Source |