VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
289218 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32281 | redhat_vex | crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation | fixed: 2063 known affected: 184 known not affected: 2076 | 2026-08-18T17:07:47+00:00 | Vulnerability · Source |
| CVE-2024-35915 | redhat_vex | kernel: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet | known not affected: 198 | 2026-08-18T17:07:42+00:00 | Vulnerability · Source |
| CVE-2024-35914 | redhat_vex | kernel: nfsd: Fix error cleanup path in nfsd_rename() | known affected: 42 known not affected: 156 | 2026-08-18T17:07:38+00:00 | Vulnerability · Source |
| CVE-2024-35898 | redhat_vex | kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() | fixed: 1093 known affected: 50 known not affected: 15 | 2026-08-18T17:07:31+00:00 | Vulnerability · Source |
| CVE-2024-35891 | redhat_vex | kernel: net: phy: micrel: Fix potential null pointer dereference | fixed: 305 known affected: 50 known not affected: 62 | 2026-08-18T17:07:25+00:00 | Vulnerability · Source |
| CVE-2024-35887 | redhat_vex | kernel: ax25: fix use-after-free bugs caused by ax25_ds_del_timer | known affected: 42 known not affected: 156 | 2026-08-18T17:07:21+00:00 | Vulnerability · Source |
| CVE-2024-35869 | redhat_vex | kernel: smb: client: guarantee refcounted children from parent session | fixed: 280 known affected: 36 known not affected: 84 | 2026-08-18T17:07:15+00:00 | Vulnerability · Source |
| CVE-2024-35855 | redhat_vex | kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update | fixed: 709 known affected: 50 known not affected: 30 | 2026-08-18T17:07:09+00:00 | Vulnerability · Source |
| CVE-2024-35785 | redhat_vex | kernel: tee: optee: Fix kernel panic caused by incorrect error handling | known not affected: 198 | 2026-08-18T17:07:05+00:00 | Vulnerability · Source |
| CVE-2024-27416 | redhat_vex | kernel: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST | known affected: 42 known not affected: 156 | 2026-08-18T17:06:55+00:00 | Vulnerability · Source |
| CVE-2024-27409 | redhat_vex | kernel: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup | known not affected: 198 | 2026-08-18T17:06:51+00:00 | Vulnerability · Source |
| CVE-2024-27399 | redhat_vex | kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout | fixed: 1033 known affected: 66 known not affected: 15 | 2026-08-18T17:06:35+00:00 | Vulnerability · Source |
| CVE-2024-27397 | redhat_vex | kernel: netfilter: nf_tables: use timestamp to check for set element timeout | fixed: 1093 known affected: 22 known not affected: 51 | 2026-08-18T17:06:29+00:00 | Vulnerability · Source |
| CVE-2024-27070 | redhat_vex | kernel: f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault | known not affected: 198 | 2026-08-18T17:06:24+00:00 | Vulnerability · Source |
| CVE-2023-52698 | redhat_vex | kernel: calipso: fix memory leak in netlbl_calipso_add_pass() | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-18T17:06:16+00:00 | Vulnerability · Source |
| CVE-2022-48686 | redhat_vex | kernel: nvme-tcp: fix UAF when detecting digest errors | fixed: 266 known affected: 48 known not affected: 150 | 2026-08-18T17:06:05+00:00 | Vulnerability · Source |
| CVE-2026-39835 | redhat_vex | golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate | fixed: 849 known affected: 86 known not affected: 1921 | 2026-08-18T17:05:34+00:00 | Vulnerability · Source |
| CVE-2026-39830 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses | fixed: 975 known affected: 115 known not affected: 1122 under investigation: 3 | 2026-08-18T17:05:30+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 263 known affected: 620 known not affected: 406 under investigation: 503 | 2026-08-18T17:05:16+00:00 | Vulnerability · Source |
| CVE-2026-27136 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass | fixed: 569 known affected: 258 known not affected: 3422 | 2026-08-18T17:05:03+00:00 | Vulnerability · Source |
| CVE-2026-14456 | redhat_vex | openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server | known affected: 13 known not affected: 6 | 2026-08-18T17:04:58+00:00 | Vulnerability · Source |
| CVE-2026-16221 | redhat_vex | fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency | known affected: 36 known not affected: 19 under investigation: 72 | 2026-08-18T17:04:58+00:00 | Vulnerability · Source |
| CVE-2026-6846 | redhat_vex | binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing | fixed: 3 known affected: 16 known not affected: 57 | 2026-08-18T17:04:53+00:00 | Vulnerability · Source |
| CVE-2026-4800 | redhat_vex | lodash: lodash: Arbitrary code execution via untrusted input in template imports | fixed: 976 known affected: 115 known not affected: 7794 under investigation: 1 | 2026-08-18T17:04:50+00:00 | Vulnerability · Source |
| CVE-2026-67214 | redhat_vex | nanoid: nanoid: Denial of Service via negative size input in non-secure module functions | fixed: 3 known affected: 1 known not affected: 6 | 2026-08-18T16:56:05+00:00 | Vulnerability · Source |
| CVE-2026-72815 | redhat_vex | github.com/go-chi/chi/middleware: go-chi chi: IP spoofing via X-Forwarded-For header allows bypass of access controls | known affected: 28 known not affected: 15 | 2026-08-18T16:54:31+00:00 | Vulnerability · Source |
| CVE-2026-72233 | redhat_vex | kernel: batman-adv: bla: reacquire gw address after skb realloc | known not affected: 1 | 2026-08-18T16:54:26+00:00 | Vulnerability · Source |
| CVE-2026-72232 | redhat_vex | kernel: batman-adv: ensure minimal ethernet header on TX | known not affected: 1 | 2026-08-18T16:54:23+00:00 | Vulnerability · Source |
| CVE-2026-72229 | redhat_vex | kernel: batman-adv: clean untagged VLAN on netdev registration failure | known not affected: 1 | 2026-08-18T16:54:20+00:00 | Vulnerability · Source |
| CVE-2026-72228 | redhat_vex | kernel: batman-adv: frag: fix primary_if leak on failed linearization | known not affected: 274 | 2026-08-18T16:54:13+00:00 | Vulnerability · Source |
| CVE-2026-72227 | redhat_vex | kernel: batman-adv: mcast: avoid OOB read of num_dests header | known not affected: 274 | 2026-08-18T16:54:09+00:00 | Vulnerability · Source |
| CVE-2026-72226 | redhat_vex | kernel: batman-adv: tt: prevent TVLV OOB check overflow | known not affected: 274 | 2026-08-18T16:54:07+00:00 | Vulnerability · Source |
| CVE-2026-75924 | redhat_vex | managed-serviceaccount: managed-serviceaccount: Hub addon-manager ClusterRole grants cluster-wide Secret read/write and CSR approval | known affected: 2 | 2026-08-18T16:54:04+00:00 | Vulnerability · Source |
| CVE-2026-73624 | redhat_vex | gitpython: GitPython: Arbitrary File Overwrite via improper git option validation | known affected: 50 known not affected: 6 | 2026-08-18T16:53:56+00:00 | Vulnerability · Source |
| CVE-2026-6790 | redhat_vex | jetty: Jetty: Improper Host header validation can lead to request routing issues | known affected: 42 | 2026-08-18T16:39:14+00:00 | Vulnerability · Source |
| CVE-2026-71365 | redhat_vex | awx: webhook status callback SSRF leaks the Git PAT | known affected: 3 | 2026-08-18T16:39:01+00:00 | Vulnerability · Source |
| CVE-2026-55851 | redhat_vex | io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message | fixed: 4 known affected: 36 known not affected: 1 | 2026-08-18T16:38:56+00:00 | Vulnerability · Source |
| CVE-2026-53727 | redhat_vex | css_parser: css_parser: Arbitrary local file disclosure via Server-Side Request Forgery | known not affected: 5 | 2026-08-18T16:38:51+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2403 known affected: 160 known not affected: 12424 under investigation: 1 | 2026-08-18T16:38:39+00:00 | Vulnerability · Source |
| CVE-2026-33186 | redhat_vex | google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation | fixed: 2993 known affected: 381 known not affected: 35944 | 2026-08-18T16:38:36+00:00 | Vulnerability · Source |
| CVE-2026-31663 | redhat_vex | kernel: xfrm: hold dev ref until after transport_finish NF_HOOK | known affected: 260 known not affected: 14 | 2026-08-18T16:38:34+00:00 | Vulnerability · Source |
| CVE-2026-19484 | redhat_vex | fastify/busboy: fastify/busboy: Denial of Service via oversized multipart boundary | known not affected: 72 | 2026-08-18T16:38:25+00:00 | Vulnerability · Source |
| CVE-2025-61729 | redhat_vex | crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate | fixed: 7927 known affected: 431 known not affected: 4901 under investigation: 2 | 2026-08-18T16:38:18+00:00 | Vulnerability · Source |
| CVE-2026-12564 | redhat_vex | Automation-Controller: automation-controller: Kubernetes service account token exfiltration via HashiCorp Vault credential SSRF | known affected: 3 | 2026-08-18T16:38:18+00:00 | Vulnerability · Source |
| CVE-2026-72816 | redhat_vex | github.com/go-chi/chi: go-chi/chi: IP Spoofing via RealIP Middleware allows bypassing access controls | known affected: 38 known not affected: 5 | 2026-08-18T16:29:48+00:00 | Vulnerability · Source |
| CVE-2026-72471 | redhat_vex | kernel: fs/ntfs3: prevent potential lcn remains uninitialized | known not affected: 274 | 2026-08-18T16:29:38+00:00 | Vulnerability · Source |
| CVE-2026-72223 | redhat_vex | kernel: nvdimm/btt: Free arena sub-allocations on discover_arenas() error path | known affected: 260 known not affected: 14 | 2026-08-18T16:29:34+00:00 | Vulnerability · Source |
| CVE-2026-72219 | redhat_vex | kernel: lockd: Plug nlm_file leak when nlm_do_fopen() fails | known affected: 184 known not affected: 90 | 2026-08-18T16:29:29+00:00 | Vulnerability · Source |
| CVE-2026-72215 | redhat_vex | kernel: MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() | known not affected: 274 | 2026-08-18T16:29:22+00:00 | Vulnerability · Source |
| CVE-2026-72213 | redhat_vex | kernel: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch | known affected: 246 known not affected: 28 | 2026-08-18T16:29:13+00:00 | Vulnerability · Source |