VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-63974 | redhat_vex | kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | known affected: 184 known not affected: 90 | 2026-07-21T11:33:27+00:00 | Vulnerability · Source |
| CVE-2026-63879 | redhat_vex | kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages | known not affected: 274 | 2026-07-21T11:26:41+00:00 | Vulnerability · Source |
| CVE-2026-64003 | redhat_vex | kernel: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues | known affected: 198 known not affected: 76 | 2026-07-21T11:21:14+00:00 | Vulnerability · Source |
| CVE-2026-63963 | redhat_vex | kernel: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | known not affected: 1 | 2026-07-21T11:16:12+00:00 | Vulnerability · Source |
| CVE-2026-63973 | redhat_vex | kernel: net: mana: Add NULL guards in teardown path to prevent panic on attach failure | known affected: 232 known not affected: 43 | 2026-07-21T11:16:12+00:00 | Vulnerability · Source |
| CVE-2026-63896 | redhat_vex | kernel: usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling | known affected: 76 known not affected: 198 | 2026-07-21T11:11:20+00:00 | Vulnerability · Source |
| CVE-2026-63907 | redhat_vex | kernel: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory | known affected: 76 known not affected: 198 | 2026-07-21T11:08:22+00:00 | Vulnerability · Source |
| CVE-2026-63997 | redhat_vex | kernel: ethtool: module: avoid leaking a netdev ref on module flash errors | known affected: 243 known not affected: 31 | 2026-07-21T11:08:16+00:00 | Vulnerability · Source |
| CVE-2026-63949 | redhat_vex | kernel: auxdisplay: line-display: fix OOB read on zero-length message_store() | known not affected: 274 | 2026-07-21T11:08:11+00:00 | Vulnerability · Source |
| CVE-2026-38752 | redhat_vex | busybox: BusyBox: Denial of Service via crafted AWK script | fixed: 3 known affected: 3 | 2026-07-21T11:06:41+00:00 | Vulnerability · Source |
| CVE-2026-38755 | redhat_vex | busybox: Busybox: Denial of Service via heap overflow in evalcommand() function | fixed: 3 known affected: 3 | 2026-07-21T11:06:39+00:00 | Vulnerability · Source |
| CVE-2026-15588 | redhat_vex | GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering | fixed: 3 known affected: 47 | 2026-07-21T11:06:10+00:00 | Vulnerability · Source |
| CVE-2025-71319 | redhat_vex | image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. | fixed: 3 known affected: 14 known not affected: 48 | 2026-07-21T11:06:03+00:00 | Vulnerability · Source |
| CVE-2026-44902 | redhat_vex | opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request | fixed: 1 known affected: 1 known not affected: 7 | 2026-07-21T10:59:08+00:00 | Vulnerability · Source |
| CVE-2026-12151 | redhat_vex | undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames | fixed: 347 known affected: 23 known not affected: 760 | 2026-07-21T10:58:56+00:00 | Vulnerability · Source |
| CVE-2026-9697 | redhat_vex | undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy | fixed: 181 known affected: 20 known not affected: 800 | 2026-07-21T10:58:51+00:00 | Vulnerability · Source |
| CVE-2026-6734 | redhat_vex | undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing | fixed: 177 known affected: 20 known not affected: 153 | 2026-07-21T10:58:50+00:00 | Vulnerability · Source |
| CVE-2026-63928 | redhat_vex | kernel: USB: serial: omninet: fix memory corruption with small endpoint | known affected: 274 | 2026-07-21T10:58:02+00:00 | Vulnerability · Source |
| CVE-2026-41240 | redhat_vex | DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization | fixed: 49 known affected: 19 known not affected: 386 | 2026-07-21T10:39:38+00:00 | Vulnerability · Source |
| CVE-2026-64620 | redhat_vex | FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow | known affected: 31 | 2026-07-21T10:31:29+00:00 | Vulnerability · Source |
| CVE-2026-64187 | redhat_vex | kernel: xfs: fail recovery on a committed log item with no regions | known affected: 274 | 2026-07-21T10:21:18+00:00 | Vulnerability · Source |
| CVE-2026-64205 | redhat_vex | kernel: i2c: i801: fix hardware state machine corruption in error path | known affected: 198 known not affected: 76 | 2026-07-21T10:21:11+00:00 | Vulnerability · Source |
| CVE-2026-64206 | redhat_vex | kernel: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | known affected: 232 known not affected: 42 | 2026-07-21T10:21:05+00:00 | Vulnerability · Source |
| CVE-2026-64192 | redhat_vex | kernel: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | known affected: 232 known not affected: 42 | 2026-07-21T10:21:01+00:00 | Vulnerability · Source |
| CVE-2026-64191 | redhat_vex | kernel: i2c: stub: Reject I2C block transfers with invalid length | known affected: 260 known not affected: 14 | 2026-07-21T10:17:08+00:00 | Vulnerability · Source |
| CVE-2026-40895 | redhat_vex | follow-redirects: follow-redirects: Information disclosure via cross-domain redirects | fixed: 192 known affected: 41 known not affected: 3599 | 2026-07-21T10:12:09+00:00 | Vulnerability · Source |
| CVE-2026-44660 | redhat_vex | python-ujson: UltraJSON: Memory leak leading to Denial of Service | fixed: 4 known affected: 16 known not affected: 205 | 2026-07-21T09:59:27+00:00 | Vulnerability · Source |
| CVE-2026-33747 | redhat_vex | BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend | fixed: 171 known affected: 29 known not affected: 506 | 2026-07-21T09:59:10+00:00 | Vulnerability · Source |
| CVE-2026-33699 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF in non-strict mode | fixed: 4 known affected: 7 known not affected: 437 | 2026-07-21T09:59:05+00:00 | Vulnerability · Source |
| CVE-2026-22773 | redhat_vex | vllm: vLLM: Denial of Service via specially crafted image in multimodal model serving | fixed: 11 known affected: 10 known not affected: 408 | 2026-07-21T09:58:52+00:00 | Vulnerability · Source |
| CVE-2025-69228 | redhat_vex | aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request | fixed: 31 known affected: 77 known not affected: 938 | 2026-07-21T09:58:49+00:00 | Vulnerability · Source |
| CVE-2025-69227 | redhat_vex | aiohttp: aiohttp: Denial of Service via specially crafted POST request | fixed: 35 known affected: 72 known not affected: 1049 | 2026-07-21T09:58:46+00:00 | Vulnerability · Source |
| CVE-2026-54293 | redhat_vex | nltk: NLTK: Information Disclosure via Path Traversal in `nltk.data.load()` | fixed: 2 known affected: 7 known not affected: 206 | 2026-07-21T09:58:24+00:00 | Vulnerability · Source |
| CVE-2026-42584 | redhat_vex | netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion | fixed: 27 known affected: 33 known not affected: 343 | 2026-07-21T09:58:10+00:00 | Vulnerability · Source |
| CVE-2026-42581 | redhat_vex | netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers | fixed: 27 known not affected: 328 under investigation: 48 | 2026-07-21T09:58:06+00:00 | Vulnerability · Source |
| CVE-2026-42578 | redhat_vex | netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation | fixed: 27 known affected: 32 known not affected: 344 | 2026-07-21T09:58:02+00:00 | Vulnerability · Source |
| CVE-2026-33236 | redhat_vex | nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files | fixed: 10 known affected: 9 known not affected: 899 | 2026-07-21T09:57:32+00:00 | Vulnerability · Source |
| CVE-2026-28356 | redhat_vex | multipart: denial of service via maliciously crafted HTTP or multipart segment headers | fixed: 17 known affected: 19 known not affected: 668 | 2026-07-21T09:57:15+00:00 | Vulnerability · Source |
| CVE-2026-27893 | redhat_vex | vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting | fixed: 25 known affected: 6 known not affected: 881 | 2026-07-21T09:57:08+00:00 | Vulnerability · Source |
| CVE-2026-25990 | redhat_vex | pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image | fixed: 128 known affected: 18 known not affected: 1559 | 2026-07-21T09:56:55+00:00 | Vulnerability · Source |
| CVE-2026-25960 | redhat_vex | vLLM: vLLM: Server-Side Request Forgery bypass via inconsistent URL parsing | fixed: 4 known affected: 13 known not affected: 410 | 2026-07-21T09:56:54+00:00 | Vulnerability · Source |
| CVE-2026-25048 | redhat_vex | xgrammar: xgrammar: Denial of Service via multi-level nested syntax | fixed: 9 known affected: 5 known not affected: 413 | 2026-07-21T09:56:46+00:00 | Vulnerability · Source |
| CVE-2026-24779 | redhat_vex | vLLM: vLLM: Server-Side Request Forgery allows internal network access | fixed: 17 known affected: 5 known not affected: 850 | 2026-07-21T09:56:40+00:00 | Vulnerability · Source |
| CVE-2026-23490 | redhat_vex | pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID | fixed: 1855 known affected: 25 known not affected: 6295 | 2026-07-21T09:56:33+00:00 | Vulnerability · Source |
| CVE-2026-22807 | redhat_vex | vLLM: vLLM: Arbitrary code execution via untrusted model loading | fixed: 17 known affected: 5 known not affected: 1083 | 2026-07-21T09:56:32+00:00 | Vulnerability · Source |
| CVE-2026-11816 | redhat_vex | keras: Keras: Arbitrary file write via path traversal in archive extraction utilities | fixed: 6 known affected: 4 known not affected: 202 | 2026-07-21T09:56:28+00:00 | Vulnerability · Source |
| CVE-2025-14929 | redhat_vex | transformers: code execution when processing a malicious X-CLIP model file | fixed: 38 known affected: 29 known not affected: 637 | 2026-07-21T09:56:17+00:00 | Vulnerability · Source |
| CVE-2025-14928 | redhat_vex | transformers: code execution when converting a malicious HuBERT model checkpoint | fixed: 40 known affected: 28 known not affected: 637 | 2026-07-21T09:56:15+00:00 | Vulnerability · Source |
| CVE-2025-14927 | redhat_vex | transformers: code execution when converting a malicious SEW-D model checkpoint | fixed: 42 known affected: 27 known not affected: 635 | 2026-07-21T09:56:11+00:00 | Vulnerability · Source |
| CVE-2025-14926 | redhat_vex | transformers: code execution when converting a malicious SEW model checkpoint | fixed: 42 known affected: 28 known not affected: 634 | 2026-07-21T09:56:08+00:00 | Vulnerability · Source |