VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292286 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-50076 | redhat_vex | kernel: vt: prevent kernel-infoleak in con_font_get() | fixed: 305 known affected: 150 known not affected: 48 | 2026-07-23T16:24:44+00:00 | Vulnerability · Source |
| CVE-2026-50243 | microsoft_vex | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL | fixed: 1 known affected: 1 | 2026-07-23T14:45:12+00:00 | Vulnerability · Source |
| CVE-2026-41637 | microsoft_vex | Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries | fixed: 1 known affected: 1 | 2026-07-23T14:45:04+00:00 | Vulnerability · Source |
| CVE-2026-50252 | microsoft_vex | Possible cache poisoning attack by mapping source port population per thread | fixed: 1 known affected: 1 | 2026-07-23T14:44:57+00:00 | Vulnerability · Source |
| CVE-2026-50251 | microsoft_vex | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush | fixed: 1 known affected: 1 | 2026-07-23T14:44:49+00:00 | Vulnerability · Source |
| CVE-2026-55991 | microsoft_vex | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 | fixed: 1 known affected: 1 | 2026-07-23T14:44:41+00:00 | Vulnerability · Source |
| CVE-2026-55990 | microsoft_vex | Packet of death for a DNSCrypt misconfigured Unbound | fixed: 1 known affected: 1 | 2026-07-23T14:44:34+00:00 | Vulnerability · Source |
| CVE-2026-50046 | microsoft_vex | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out | fixed: 1 known affected: 1 | 2026-07-23T14:44:26+00:00 | Vulnerability · Source |
| CVE-2026-14586 | microsoft_vex | Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments | fixed: 1 known affected: 1 | 2026-07-23T14:44:19+00:00 | Vulnerability · Source |
| CVE-2026-42955 | microsoft_vex | Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records | fixed: 1 known affected: 1 | 2026-07-23T14:44:11+00:00 | Vulnerability · Source |
| CVE-2026-46582 | microsoft_vex | A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path | fixed: 1 known affected: 1 | 2026-07-23T14:44:03+00:00 | Vulnerability · Source |
| CVE-2026-54478 | microsoft_vex | DNS Cookie bypass when combined with proxy-protocol use | fixed: 1 known affected: 1 | 2026-07-23T14:43:56+00:00 | Vulnerability · Source |
| CVE-2026-56444 | microsoft_vex | Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration | fixed: 1 known affected: 1 | 2026-07-23T14:43:48+00:00 | Vulnerability · Source |
| CVE-2026-32665 | microsoft_vex | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass | fixed: 1 known affected: 1 | 2026-07-23T14:43:41+00:00 | Vulnerability · Source |
| CVE-2026-40691 | microsoft_vex | Packet of death for DNSCrypt over TCP | fixed: 1 known affected: 1 | 2026-07-23T14:43:33+00:00 | Vulnerability · Source |
| CVE-2026-55717 | microsoft_vex | 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash | fixed: 1 known affected: 1 | 2026-07-23T14:43:26+00:00 | Vulnerability · Source |
| CVE-2026-44621 | microsoft_vex | Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated | fixed: 1 known affected: 1 | 2026-07-23T14:43:18+00:00 | Vulnerability · Source |
| CVE-2026-56416 | microsoft_vex | Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name | fixed: 1 known affected: 1 | 2026-07-23T14:43:11+00:00 | Vulnerability · Source |
| CVE-2026-52863 | microsoft_vex | Memory corruption could lead to crash and denial of service | fixed: 1 known affected: 1 | 2026-07-23T14:43:03+00:00 | Vulnerability · Source |
| CVE-2026-55708 | microsoft_vex | Privacy/configuration issue when adding local data in views through 'unbound-control' | fixed: 1 known affected: 1 | 2026-07-23T14:42:55+00:00 | Vulnerability · Source |
| CVE-2026-44690 | microsoft_vex | Cross-zone wildcard cache poisoning via RRSIG.labels manipulation | fixed: 1 known affected: 1 | 2026-07-23T14:42:48+00:00 | Vulnerability · Source |
| CVE-2026-50248 | microsoft_vex | BOGUS configured primary hostname accepted for XFR in auth/rpz zones | fixed: 1 known affected: 1 | 2026-07-23T14:42:40+00:00 | Vulnerability · Source |
| CVE-2026-50045 | microsoft_vex | 'max-global-quota' reset by DNSSEC validation restarts | fixed: 1 known affected: 1 | 2026-07-23T14:42:33+00:00 | Vulnerability · Source |
| CVE-2026-44687 | microsoft_vex | Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN | fixed: 1 known affected: 1 | 2026-07-23T14:42:25+00:00 | Vulnerability · Source |
| CVE-2026-55973 | microsoft_vex | 'dns-error-reporting: yes' leads to stack buffer overflow | fixed: 1 known affected: 1 | 2026-07-23T14:42:18+00:00 | Vulnerability · Source |
| CVE-2026-6040 | redhat_vex | libreoffice: LibreOffice: Heap use-after-free allows arbitrary code execution via malformed ODF number format | known affected: 133 known not affected: 537 | 2026-07-23T08:51:43+00:00 | Vulnerability · Source |
| CVE-2026-52584 | redhat_vex | libjxl: libjxl: Information disclosure via Buffer Overflow in DecodeImageAPNG function | known affected: 8 | 2026-07-23T07:08:29+00:00 | Vulnerability · Source |
| CVE-2026-12770 | redhat_vex | litellm: BerriAI litellm: Improper authorization vulnerability in Admin Key Handler | known not affected: 6 | 2026-07-23T05:41:00+00:00 | Vulnerability · Source |
| CVE-2026-50269 | redhat_vex | aiohttp: AIOHTTP: CRLF injection in multipart headers | known affected: 109 known not affected: 1 | 2026-07-23T05:35:59+00:00 | Vulnerability · Source |
| CVE-2026-53540 | redhat_vex | python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory | known affected: 50 known not affected: 2 | 2026-07-23T05:35:56+00:00 | Vulnerability · Source |
| CVE-2026-26740 | redhat_vex | giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension | fixed: 3136 known affected: 3 known not affected: 27 | 2026-07-23T03:07:56+00:00 | Vulnerability · Source |
| CVE-2026-57963 | redhat_vex | thunderbird: Chat UI manipulation by injection | known not affected: 11 | 2026-07-23T03:01:09+00:00 | Vulnerability · Source |
| CVE-2020-1760 | suse_vex | SUSE CVE CVE-2020-1760 | known not affected: 625 recommended: 1133 | 2026-07-23T02:46:43+00:00 | Vulnerability · Source |
| CVE-2020-2601 | suse_vex | SUSE CVE CVE-2020-2601 | known affected: 554 recommended: 780 | 2026-07-23T02:46:41+00:00 | Vulnerability · Source |
| CVE-2020-2760 | suse_vex | SUSE CVE CVE-2020-2760 | known affected: 47 known not affected: 48 recommended: 420 | 2026-07-23T02:46:39+00:00 | Vulnerability · Source |
| CVE-2020-3900 | suse_vex | SUSE CVE CVE-2020-3900 | known affected: 45 known not affected: 90 recommended: 1018 | 2026-07-23T02:46:37+00:00 | Vulnerability · Source |
| CVE-2020-4044 | suse_vex | SUSE CVE CVE-2020-4044 | known affected: 394 recommended: 256 | 2026-07-23T02:46:36+00:00 | Vulnerability · Source |
| CVE-2020-6797 | suse_vex | SUSE CVE CVE-2020-6797 | known affected: 20 recommended: 398 | 2026-07-23T02:46:33+00:00 | Vulnerability · Source |
| CVE-2020-6831 | suse_vex | SUSE CVE CVE-2020-6831 | known affected: 21 recommended: 393 | 2026-07-23T02:46:30+00:00 | Vulnerability · Source |
| CVE-2020-6923 | suse_vex | SUSE CVE CVE-2020-6923 | known affected: 47 known not affected: 26 recommended: 137 | 2026-07-23T02:46:29+00:00 | Vulnerability · Source |
| CVE-2020-8562 | suse_vex | SUSE CVE CVE-2020-8562 | recommended: 3 | 2026-07-23T02:46:27+00:00 | Vulnerability · Source |
| CVE-2020-8698 | suse_vex | SUSE CVE CVE-2020-8698 | known affected: 8 recommended: 100 | 2026-07-23T02:46:23+00:00 | Vulnerability · Source |
| CVE-2020-8992 | suse_vex | SUSE CVE CVE-2020-8992 | known affected: 324 known not affected: 141 recommended: 1442 | 2026-07-23T02:46:21+00:00 | Vulnerability · Source |
| CVE-2020-9488 | suse_vex | SUSE CVE CVE-2020-9488 | known not affected: 172 recommended: 96 | 2026-07-23T02:46:20+00:00 | Vulnerability · Source |
| CVE-2020-10663 | suse_vex | SUSE CVE CVE-2020-10663 | known affected: 389 known not affected: 151 recommended: 832 | 2026-07-23T02:46:14+00:00 | Vulnerability · Source |
| CVE-2020-10703 | suse_vex | SUSE CVE CVE-2020-10703 | known not affected: 299 recommended: 599 | 2026-07-23T02:46:10+00:00 | Vulnerability · Source |
| CVE-2020-10708 | suse_vex | SUSE CVE CVE-2020-10708 | known not affected: 215 | 2026-07-23T02:46:09+00:00 | Vulnerability · Source |
| CVE-2020-10760 | suse_vex | SUSE CVE CVE-2020-10760 | known affected: 675 known not affected: 822 recommended: 3070 | 2026-07-23T02:46:05+00:00 | Vulnerability · Source |
| CVE-2020-10761 | suse_vex | SUSE CVE CVE-2020-10761 | known affected: 394 known not affected: 716 recommended: 1328 | 2026-07-23T02:46:03+00:00 | Vulnerability · Source |
| CVE-2020-11739 | suse_vex | SUSE CVE CVE-2020-11739 | known affected: 400 known not affected: 73 recommended: 495 | 2026-07-23T02:45:59+00:00 | Vulnerability · Source |