VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304238 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33871 | redhat_vex | netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood | fixed: 69 known affected: 51 known not affected: 3755 | 2026-10-02T15:40:05+00:00 | Vulnerability · Source |
| CVE-2026-33870 | redhat_vex | io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values | fixed: 69 known affected: 31 known not affected: 3190 | 2026-10-02T15:39:47+00:00 | Vulnerability · Source |
| CVE-2026-2229 | redhat_vex | undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter | fixed: 415 known affected: 5 known not affected: 589 | 2026-10-02T15:33:43+00:00 | Vulnerability · Source |
| CVE-2026-1528 | redhat_vex | undici: undici: Denial of Service via crafted WebSocket frame with large length | fixed: 347 known affected: 5 known not affected: 576 | 2026-10-02T15:33:27+00:00 | Vulnerability · Source |
| CVE-2026-1526 | redhat_vex | undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression | fixed: 415 known affected: 6 known not affected: 588 | 2026-10-02T15:33:03+00:00 | Vulnerability · Source |
| CVE-2026-24308 | redhat_vex | Apache ZooKeeper: Apache ZooKeeper: Information disclosure via improper handling of configuration values | fixed: 5 known affected: 7 known not affected: 770 | 2026-10-02T15:31:54+00:00 | Vulnerability · Source |
| CVE-2026-24281 | redhat_vex | Apache ZooKeeper: Apache ZooKeeper: Impersonation of servers or clients via reverse DNS spoofing | fixed: 5 known affected: 7 known not affected: 770 | 2026-10-02T15:31:11+00:00 | Vulnerability · Source |
| CVE-2026-1605 | redhat_vex | org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests | fixed: 100 known affected: 1 known not affected: 2652 | 2026-10-02T15:30:30+00:00 | Vulnerability · Source |
| CVE-2021-47419 | redhat_vex | kernel: net/sched: sch_taprio: properly cancel timer from taprio_destroy() | known affected: 48 known not affected: 150 | 2026-10-02T15:12:31+00:00 | Vulnerability · Source |
| CVE-2025-43023 | redhat_vex | hplip: HP Linux Imaging and Printing Software - Use of DSA Key | known affected: 29 | 2026-10-02T15:07:41+00:00 | Vulnerability · Source |
| CVE-2021-47562 | redhat_vex | kernel: ice: fix vsi->txq_map sizing | known affected: 44 known not affected: 154 | 2026-10-02T15:07:40+00:00 | Vulnerability · Source |
| CVE-2021-47415 | redhat_vex | kernel: iwlwifi: mvm: Fix possible NULL dereference | known affected: 44 known not affected: 154 | 2026-10-02T15:07:31+00:00 | Vulnerability · Source |
| CVE-2021-47238 | redhat_vex | kernel: net: ipv4: fix memory leak in ip_mc_add1_src | known affected: 60 known not affected: 138 | 2026-10-02T15:07:24+00:00 | Vulnerability · Source |
| CVE-2021-47225 | redhat_vex | kernel: mac80211: fix deadlock in AP/VLAN handling | known affected: 90 known not affected: 108 | 2026-10-02T15:06:46+00:00 | Vulnerability · Source |
| CVE-2021-46973 | redhat_vex | kernel: net: qrtr: Avoid potential use after free in MHI send | known affected: 58 known not affected: 140 | 2026-10-02T15:06:45+00:00 | Vulnerability · Source |
| CVE-2021-47194 | redhat_vex | kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type | known affected: 58 known not affected: 140 | 2026-10-02T15:06:45+00:00 | Vulnerability · Source |
| CVE-2021-47167 | redhat_vex | kernel: NFS: Fix an Oopsable condition in __nfs_pageio_add_request() | known affected: 58 known not affected: 140 | 2026-10-02T15:06:45+00:00 | Vulnerability · Source |
| CVE-2026-43257 | redhat_vex | kernel: media: cx88: Add missing unmap in snd_cx88_hw_params() | known affected: 48 known not affected: 226 | 2026-10-02T14:45:53+00:00 | Vulnerability · Source |
| CVE-2026-43135 | redhat_vex | kernel: media: cx23885: Add missing unmap in snd_cx23885_hw_params() | known affected: 48 known not affected: 226 | 2026-10-02T14:45:50+00:00 | Vulnerability · Source |
| CVE-2026-43065 | redhat_vex | kernel: ext4: always drain queued discard work in ext4_mb_release() | known affected: 198 known not affected: 76 | 2026-10-02T14:45:46+00:00 | Vulnerability · Source |
| CVE-2026-43007 | redhat_vex | kernel: accel/qaic: Handle DBC deactivation if the owner went away | known affected: 76 known not affected: 198 | 2026-10-02T14:45:45+00:00 | Vulnerability · Source |
| CVE-2026-43064 | redhat_vex | kernel: dmaengine: idxd: Fix not releasing workqueue on .release() | known affected: 232 known not affected: 42 | 2026-10-02T14:45:43+00:00 | Vulnerability · Source |
| CVE-2026-23350 | redhat_vex | kernel: drm/xe/queue: Call fini on exec queue creation fail | known affected: 76 known not affected: 198 | 2026-10-02T14:45:36+00:00 | Vulnerability · Source |
| CVE-2024-50194 | redhat_vex | kernel: arm64: probes: Fix uprobes for big-endian kernels | known affected: 18 known not affected: 180 | 2026-10-02T14:45:29+00:00 | Vulnerability · Source |
| CVE-2024-35794 | redhat_vex | kernel: dm-raid: really frozen sync_thread during suspend | fixed: 280 known affected: 112 known not affected: 8 | 2026-10-02T14:45:28+00:00 | Vulnerability · Source |
| CVE-2022-48635 | redhat_vex | kernel: fsdax: Fix infinite loop in dax_iomap_rw() | known affected: 78 known not affected: 120 | 2026-10-02T14:45:22+00:00 | Vulnerability · Source |
| CVE-2021-47607 | redhat_vex | kernel: bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg | known affected: 184 known not affected: 14 | 2026-10-02T14:45:18+00:00 | Vulnerability · Source |
| CVE-2021-47455 | redhat_vex | kernel: ptp: Fix possible memory leak in ptp_clock_register() | fixed: 316 known affected: 64 | 2026-10-02T14:45:13+00:00 | Vulnerability · Source |
| CVE-2026-79699 | redhat_vex | podman: buildah: skopeo: containers/storage: Malicious tar whiteout header allows replacement of extraction destination directory | known affected: 72 known not affected: 3 | 2026-10-02T14:45:09+00:00 | Vulnerability · Source |
| CVE-2026-46320 | redhat_vex | kernel: tap: free page on error paths in tap_get_user_xdp() | known affected: 232 known not affected: 42 | 2026-10-02T14:45:03+00:00 | Vulnerability · Source |
| CVE-2026-46102 | redhat_vex | kernel: net: strparser: fix skb_head leak in strp_abort_strp() | known affected: 232 known not affected: 42 | 2026-10-02T14:44:58+00:00 | Vulnerability · Source |
| CVE-2025-2312 | redhat_vex | cifs-utils: kernel: cifs-utils: cifs.upcall makes an upcall to the wrong namespace in containerized environments | known affected: 214 known not affected: 76 | 2026-10-02T14:44:42+00:00 | Vulnerability · Source |
| CVE-2024-49975 | redhat_vex | kernel: uprobes: fix kernel info leak via "[uprobes]" vma | fixed: 305 known affected: 112 | 2026-10-02T14:44:39+00:00 | Vulnerability · Source |
| CVE-2023-53054 | redhat_vex | kernel: usb: dwc2: fix a devres leak in hw_enable upon suspend resume | known not affected: 274 | 2026-10-02T14:44:37+00:00 | Vulnerability · Source |
| CVE-2024-43861 | redhat_vex | kernel: net: usb: qmi_wwan: fix memory leak for not ip packets | known affected: 184 known not affected: 14 | 2026-10-02T14:44:36+00:00 | Vulnerability · Source |
| CVE-2022-48988 | redhat_vex | kernel: memcg: fix possible use-after-free in memcg_write_event_control() | fixed: 120 known affected: 60 known not affected: 106 | 2026-10-02T14:44:31+00:00 | Vulnerability · Source |
| CVE-2022-48653 | redhat_vex | kernel: ice: double unplug aux on peer initiated reset | known affected: 184 known not affected: 14 | 2026-10-02T14:44:29+00:00 | Vulnerability · Source |
| CVE-2021-47563 | redhat_vex | kernel: ice: avoid bpf_prog refcount underflow | known affected: 44 known not affected: 154 | 2026-10-02T14:44:23+00:00 | Vulnerability · Source |
| CVE-2021-47557 | redhat_vex | kernel: net/sched: sch_ets: don't peek at classes beyond 'nbands' | known affected: 16 known not affected: 182 | 2026-10-02T14:44:19+00:00 | Vulnerability · Source |
| CVE-2021-47507 | redhat_vex | kernel: nfsd: Fix nsfd startup race (again) | known affected: 90 known not affected: 108 | 2026-10-02T14:44:19+00:00 | Vulnerability · Source |
| CVE-2021-47506 | redhat_vex | kernel: nfsd: fix use-after-free due to delegation race | known affected: 58 known not affected: 140 | 2026-10-02T14:44:14+00:00 | Vulnerability · Source |
| CVE-2021-47494 | redhat_vex | kernel: cfg80211: fix management registrations locking | known affected: 58 known not affected: 140 | 2026-10-02T14:44:12+00:00 | Vulnerability · Source |
| CVE-2026-84375 | redhat_vex | js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing | fixed: 131 known affected: 286 known not affected: 1150 | 2026-10-02T14:40:45+00:00 | Vulnerability · Source |
| CVE-2026-103505 | redhat_vex | github.com/kubernetes-sigs/aws-efs-csi-driver: AWS EFS CSI Driver: Arbitrary mount option injection via mounttargetipmap attribute | known affected: 2 | 2026-10-02T14:40:45+00:00 | Vulnerability · Source |
| CVE-2026-13311 | redhat_vex | shell-quote: shell-quote/parse: shell-quote: Denial of Service due to inefficient input parsing | fixed: 16 known affected: 53 known not affected: 331 | 2026-10-02T14:40:40+00:00 | Vulnerability · Source |
| CVE-2026-66331 | redhat_vex | thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport | known affected: 13 | 2026-10-02T14:40:40+00:00 | Vulnerability · Source |
| CVE-2026-63374 | redhat_vex | anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding | fixed: 3 known affected: 105 known not affected: 24 | 2026-10-02T14:40:38+00:00 | Vulnerability · Source |
| CVE-2026-18036 | redhat_vex | bouncycastle: bouncycastle: Information disclosure via timing side-channel in NTRU | known not affected: 1 | 2026-10-02T14:40:37+00:00 | Vulnerability · Source |
| CVE-2026-17508 | redhat_vex | bouncycastle: bouncycastle-fips: Bouncy Castle: Denial of Service via unbounded key derivation cost parameters | known not affected: 1 | 2026-10-02T14:40:35+00:00 | Vulnerability · Source |
| CVE-2026-92955 | redhat_vex | vm2: vm2 before 3.11.8 Sandbox Escape via NodeVM | known affected: 5 | 2026-10-02T14:40:29+00:00 | Vulnerability · Source |