VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291949 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64497 | microsoft_vex | iio: chemical: scd30: Cleanup initializations and fix sign-extension bug | known affected: 1 | 2026-07-27T14:43:02+00:00 | Vulnerability · Source |
| CVE-2026-64319 | microsoft_vex | nvmet-auth: validate reply message payload bounds against transfer length | known affected: 1 | 2026-07-27T14:43:00+00:00 | Vulnerability · Source |
| CVE-2026-64428 | microsoft_vex | gpio: sch: use raw_spinlock_t in the irq startup path | known affected: 1 | 2026-07-27T14:42:54+00:00 | Vulnerability · Source |
| CVE-2026-64372 | microsoft_vex | cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | known affected: 1 | 2026-07-27T14:42:51+00:00 | Vulnerability · Source |
| CVE-2026-64276 | microsoft_vex | Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | known affected: 1 | 2026-07-27T14:42:46+00:00 | Vulnerability · Source |
| CVE-2026-64465 | microsoft_vex | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | known affected: 1 | 2026-07-27T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-64352 | microsoft_vex | bpf: Allow LPM map access from sleepable BPF programs | known affected: 1 | 2026-07-27T14:42:38+00:00 | Vulnerability · Source |
| CVE-2026-64475 | microsoft_vex | vfio/pci: Release the VGA arbiter client on register_device() failure | known affected: 1 | 2026-07-27T14:42:36+00:00 | Vulnerability · Source |
| CVE-2026-64514 | microsoft_vex | userfaultfd: gate must_wait writability check on pte_present() | known affected: 1 | 2026-07-27T14:42:31+00:00 | Vulnerability · Source |
| CVE-2026-64421 | microsoft_vex | media: nxp: imx8-isi: Fix use-after-free on remove | known affected: 1 | 2026-07-27T14:42:28+00:00 | Vulnerability · Source |
| CVE-2026-64481 | microsoft_vex | ALSA: hda/cs35l41: Fix firmware load work teardown | known affected: 1 | 2026-07-27T14:42:22+00:00 | Vulnerability · Source |
| CVE-2026-64315 | microsoft_vex | crypto: caam - use print_hex_dump_devel to guard key hex dumps | known affected: 1 | 2026-07-27T14:42:20+00:00 | Vulnerability · Source |
| CVE-2026-64391 | microsoft_vex | ksmbd: use opener credentials for ADS I/O | known affected: 1 | 2026-07-27T14:42:15+00:00 | Vulnerability · Source |
| CVE-2026-64438 | microsoft_vex | crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() | known affected: 1 | 2026-07-27T14:42:12+00:00 | Vulnerability · Source |
| CVE-2026-64274 | microsoft_vex | Input: goodix - clamp the device-reported contact count | known affected: 1 | 2026-07-27T14:42:06+00:00 | Vulnerability · Source |
| CVE-2026-64270 | microsoft_vex | Input: mms114 - reject an oversized device packet size | known affected: 1 | 2026-07-27T14:42:04+00:00 | Vulnerability · Source |
| CVE-2026-64443 | microsoft_vex | staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop | known affected: 1 | 2026-07-27T14:41:58+00:00 | Vulnerability · Source |
| CVE-2026-64385 | microsoft_vex | smb: client: fix double-free in SMB2_ioctl() replay | known affected: 1 | 2026-07-27T14:41:55+00:00 | Vulnerability · Source |
| CVE-2026-64322 | microsoft_vex | udf: validate sparing table length as an entry count, not a byte count | known affected: 1 | 2026-07-27T14:41:50+00:00 | Vulnerability · Source |
| CVE-2026-64479 | microsoft_vex | ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() | known affected: 1 | 2026-07-27T14:41:47+00:00 | Vulnerability · Source |
| CVE-2026-64436 | microsoft_vex | net: af_key: initialize alg_key_len for IPComp states | known affected: 1 | 2026-07-27T14:41:43+00:00 | Vulnerability · Source |
| CVE-2026-64458 | microsoft_vex | mm/damon/ops-common: handle extreme intervals in damon_hot_score() | known affected: 1 | 2026-07-27T14:41:39+00:00 | Vulnerability · Source |
| CVE-2026-64347 | microsoft_vex | usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler | known affected: 1 | 2026-07-27T14:41:35+00:00 | Vulnerability · Source |
| CVE-2026-64511 | microsoft_vex | ACPI: NFIT: core: Fix possible NULL pointer dereference | known affected: 1 | 2026-07-27T14:41:27+00:00 | Vulnerability · Source |
| CVE-2026-64435 | microsoft_vex | audit: Fix data races of skb_queue_len() readers on audit_queue | known affected: 1 | 2026-07-27T14:41:24+00:00 | Vulnerability · Source |
| CVE-2026-64296 | microsoft_vex | exfat: bound uniname advance in exfat_find_dir_entry() | known affected: 1 | 2026-07-27T14:41:19+00:00 | Vulnerability · Source |
| CVE-2026-64422 | microsoft_vex | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | known affected: 1 | 2026-07-27T14:41:17+00:00 | Vulnerability · Source |
| CVE-2026-64364 | microsoft_vex | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | known affected: 1 | 2026-07-27T14:41:11+00:00 | Vulnerability · Source |
| CVE-2026-64275 | microsoft_vex | Input: elan_i2c - prevent division by zero and arithmetic underflow | known affected: 1 | 2026-07-27T14:41:09+00:00 | Vulnerability · Source |
| CVE-2026-64287 | microsoft_vex | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | known affected: 1 | 2026-07-27T14:41:03+00:00 | Vulnerability · Source |
| CVE-2026-64280 | microsoft_vex | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | known affected: 1 | 2026-07-27T14:41:01+00:00 | Vulnerability · Source |
| CVE-2026-64440 | microsoft_vex | staging: rtl8723bs: fix OOB write in HT_caps_handler() | known affected: 1 | 2026-07-27T14:40:55+00:00 | Vulnerability · Source |
| CVE-2026-64329 | microsoft_vex | usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove | known affected: 1 | 2026-07-27T14:40:54+00:00 | Vulnerability · Source |
| CVE-2026-64449 | microsoft_vex | staging: vme_user: bound slave read/write to the kern_buf size | known affected: 1 | 2026-07-27T14:40:47+00:00 | Vulnerability · Source |
| CVE-2026-64332 | microsoft_vex | USB: ulpi: fix memory leak on registration failure | known affected: 1 | 2026-07-27T14:40:46+00:00 | Vulnerability · Source |
| CVE-2026-64456 | microsoft_vex | hwrng: virtio: clamp device-reported used.len at copy_data() | known affected: 1 | 2026-07-27T14:40:39+00:00 | Vulnerability · Source |
| CVE-2026-64393 | microsoft_vex | ksmbd: run set info with opener credentials | known affected: 1 | 2026-07-27T14:40:38+00:00 | Vulnerability · Source |
| CVE-2026-64365 | microsoft_vex | HID: letsketch: fix UAF on inrange_timer at driver unbind | known affected: 1 | 2026-07-27T14:40:31+00:00 | Vulnerability · Source |
| CVE-2026-64342 | microsoft_vex | USB: iowarrior: fix use-after-free on disconnect | known affected: 1 | 2026-07-27T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-64370 | microsoft_vex | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | known affected: 1 | 2026-07-27T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-8092 | redhat_vex | firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 | fixed: 260 known affected: 8 | 2026-07-27T14:40:16+00:00 | Vulnerability · Source |
| CVE-2026-64508 | microsoft_vex | bpf: Support for hardening against JIT spraying | known affected: 1 | 2026-07-27T14:40:14+00:00 | Vulnerability · Source |
| CVE-2026-64359 | microsoft_vex | nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers | known affected: 1 | 2026-07-27T14:40:14+00:00 | Vulnerability · Source |
| CVE-2024-2616 | redhat_vex | Mozilla: Improve handling of out-of-memory conditions in ICU | fixed: 256 known affected: 4 | 2026-07-27T14:36:38+00:00 | Vulnerability · Source |
| CVE-2026-41901 | redhat_vex | thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass | known affected: 2 known not affected: 3 | 2026-07-27T14:07:00+00:00 | Vulnerability · Source |
| CVE-2019-17594 | redhat_vex | ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c | fixed: 52 known affected: 13 | 2026-07-27T13:55:45+00:00 | Vulnerability · Source |
| CVE-2019-17595 | redhat_vex | ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c | fixed: 52 known affected: 13 | 2026-07-27T13:55:42+00:00 | Vulnerability · Source |
| CVE-2023-42669 | redhat_vex | samba: "rpcecho" development server allows denial of service via sleep() call on AD DC | fixed: 2860 known affected: 94 | 2026-07-27T13:49:45+00:00 | Vulnerability · Source |
| CVE-2023-4091 | redhat_vex | samba: SMB clients can truncate files with read-only permissions | fixed: 2860 known affected: 94 | 2026-07-27T13:49:41+00:00 | Vulnerability · Source |
| CVE-2023-3961 | redhat_vex | samba: smbd allows client access to unix domain sockets on the file system as root | fixed: 2860 known affected: 35 known not affected: 59 | 2026-07-27T13:49:28+00:00 | Vulnerability · Source |