VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292260 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-52969 | redhat_vex | kernel: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | known not affected: 274 | 2026-07-15T01:25:51+00:00 | Vulnerability · Source |
| CVE-2026-52910 | redhat_vex | kernel: bpf: Free reuseport cBPF prog after RCU grace period | known affected: 246 known not affected: 28 | 2026-07-15T01:12:54+00:00 | Vulnerability · Source |
| CVE-2026-6748 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component | fixed: 368 known affected: 8 | 2026-07-15T01:08:09+00:00 | Vulnerability · Source |
| CVE-2026-8389 | redhat_vex | firefox: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 12 | 2026-07-15T01:08:05+00:00 | Vulnerability · Source |
| CVE-2026-8388 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine: JIT component | fixed: 260 known affected: 8 | 2026-07-15T01:08:02+00:00 | Vulnerability · Source |
| CVE-2026-8947 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component | fixed: 260 known affected: 8 | 2026-07-15T01:07:59+00:00 | Vulnerability · Source |
| CVE-2026-8948 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Networking component | known not affected: 23 | 2026-07-15T01:07:56+00:00 | Vulnerability · Source |
| CVE-2026-8401 | redhat_vex | firefox: thunderbird: Sandbox escape in the Profile Backup component | fixed: 260 known affected: 8 | 2026-07-15T01:07:42+00:00 | Vulnerability · Source |
| CVE-2026-8975 | redhat_vex | firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 | fixed: 260 known affected: 8 | 2026-07-15T01:07:31+00:00 | Vulnerability · Source |
| CVE-2026-6749 | redhat_vex | firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component | fixed: 368 known affected: 8 | 2026-07-15T01:07:25+00:00 | Vulnerability · Source |
| CVE-2026-8391 | redhat_vex | firefox: thunderbird: Other issue in the JavaScript Engine component | fixed: 260 known affected: 8 | 2026-07-15T01:06:35+00:00 | Vulnerability · Source |
| CVE-2026-6752 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the WebRTC component | fixed: 368 known affected: 8 | 2026-07-15T01:06:22+00:00 | Vulnerability · Source |
| CVE-2026-59875 | microsoft_vex | node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records | known affected: 1 | 2026-07-15T01:01:52+00:00 | Vulnerability · Source |
| CVE-2026-13221 | microsoft_vex | Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk | fixed: 1 known affected: 1 | 2026-07-15T01:01:27+00:00 | Vulnerability · Source |
| CVE-2026-57432 | microsoft_vex | Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack | fixed: 1 known affected: 1 | 2026-07-15T01:01:20+00:00 | Vulnerability · Source |
| CVE-2024-22047 | redhat_vex | audited: race condition can lead to audit logs being incorrectly attributed to the wrong user | fixed: 2 known not affected: 1862 | 2026-07-15T00:08:17+00:00 | Vulnerability · Source |
| CVE-2026-60103 | redhat_vex | blender: Blender: Denial of Service and information disclosure via crafted .blend file | known not affected: 1 | 2026-07-15T00:07:46+00:00 | Vulnerability · Source |
| CVE-2026-56117 | redhat_vex | dhcpcd: dhcpcd: Local heap use-after-free vulnerability leads to denial of service. | known affected: 1 | 2026-07-14T22:10:45+00:00 | Vulnerability · Source |
| CVE-2026-56113 | redhat_vex | dhcpcd: dhcpcd: Denial of Service via crafted DHCPv6 RENEW reply | known affected: 1 | 2026-07-14T22:05:55+00:00 | Vulnerability · Source |
| CVE-2026-56114 | redhat_vex | dhcpcd: dhcpcd: Denial of Service due to stack out-of-bounds write via crafted DHCPv6 message | known affected: 1 | 2026-07-14T22:05:53+00:00 | Vulnerability · Source |
| CVE-2026-47099 | redhat_vex | telejson: TeleJSON: Arbitrary code execution via DOM-based cross-site scripting | known affected: 5 | 2026-07-14T22:05:52+00:00 | Vulnerability · Source |
| CVE-2026-56115 | redhat_vex | dhcpcd: dhcpcd: Denial of Service via crafted DHCPv6 ADVERTISE message | known affected: 1 | 2026-07-14T20:51:26+00:00 | Vulnerability · Source |
| CVE-2026-44546 | redhat_vex | daphne: daphne: Information disclosure via header injection due to parser differential | known affected: 8 | 2026-07-14T20:51:24+00:00 | Vulnerability · Source |
| CVE-2026-54516 | redhat_vex | jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties | known affected: 64 known not affected: 38 | 2026-07-14T20:51:23+00:00 | Vulnerability · Source |
| CVE-2026-54517 | redhat_vex | jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application | known affected: 89 known not affected: 13 | 2026-07-14T20:51:19+00:00 | Vulnerability · Source |
| CVE-2026-52965 | redhat_vex | kernel: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure | known affected: 184 known not affected: 90 | 2026-07-14T20:35:59+00:00 | Vulnerability · Source |
| CVE-2026-52966 | redhat_vex | kernel: drm: Replace old pointer to new idr | known affected: 274 | 2026-07-14T20:35:55+00:00 | Vulnerability · Source |
| CVE-2026-53001 | redhat_vex | kernel: netfilter: xtables: restrict several matches to inet family | known affected: 274 | 2026-07-14T20:20:43+00:00 | Vulnerability · Source |
| CVE-2026-53004 | redhat_vex | kernel: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks | known affected: 274 | 2026-07-14T20:20:42+00:00 | Vulnerability · Source |
| CVE-2026-48038 | redhat_vex | joi: joi: Denial of Service via uncaught RangeError on deeply nested input through recursive link() schemas | known affected: 6 known not affected: 2 | 2026-07-14T20:10:44+00:00 | Vulnerability · Source |
| CVE-2026-15713 | redhat_vex | libsoup: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak | known affected: 16 | 2026-07-14T20:06:07+00:00 | Vulnerability · Source |
| CVE-2026-15714 | redhat_vex | libsoup: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string | known affected: 16 | 2026-07-14T20:06:06+00:00 | Vulnerability · Source |
| CVE-2026-15709 | redhat_vex | SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service | known affected: 16 | 2026-07-14T20:06:02+00:00 | Vulnerability · Source |
| CVE-2026-52747 | redhat_vex | ModSecurity: ModSecurity: Security rule bypass due to incorrect handling of line breaks in form data | known affected: 8 | 2026-07-14T20:05:57+00:00 | Vulnerability · Source |
| CVE-2026-15711 | redhat_vex | libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation | known affected: 16 | 2026-07-14T20:05:55+00:00 | Vulnerability · Source |
| CVE-2026-52761 | redhat_vex | ModSecurity: ModSecurity: Web Application Firewall rules bypass due to incorrect UTF-8 to Unicode transformation | known affected: 8 | 2026-07-14T19:56:03+00:00 | Vulnerability · Source |
| CVE-2026-52970 | redhat_vex | kernel: netfilter: nft_ct: fix missing expect put in obj eval | known affected: 184 known not affected: 90 | 2026-07-14T19:55:45+00:00 | Vulnerability · Source |
| CVE-2026-53042 | redhat_vex | kernel: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal | known affected: 76 known not affected: 198 | 2026-07-14T19:45:52+00:00 | Vulnerability · Source |
| CVE-2026-53037 | redhat_vex | kernel: HID: usbhid: fix deadlock in hid_post_reset() | known affected: 274 | 2026-07-14T19:45:47+00:00 | Vulnerability · Source |
| CVE-2026-53038 | redhat_vex | kernel: ima_fs: Correctly create securityfs files for unsupported hash algos | known affected: 76 known not affected: 198 | 2026-07-14T19:45:44+00:00 | Vulnerability · Source |
| CVE-2026-53032 | redhat_vex | kernel: bpf: Fix NULL deref in map_kptr_match_type for scalar regs | known affected: 184 known not affected: 90 | 2026-07-14T19:45:42+00:00 | Vulnerability · Source |
| CVE-2026-53007 | redhat_vex | kernel: ice: fix potential NULL pointer deref in error path of ice_set_ringparam() | known affected: 184 known not affected: 90 | 2026-07-14T19:30:41+00:00 | Vulnerability · Source |
| CVE-2026-53008 | redhat_vex | kernel: ice: fix race condition in TX timestamp ring cleanup | known affected: 184 known not affected: 90 | 2026-07-14T19:16:08+00:00 | Vulnerability · Source |
| CVE-2026-15712 | redhat_vex | SoupClientMessageIOHTTP2: libsoup3: libsoup: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL-termination assumption | known affected: 4 | 2026-07-14T19:06:41+00:00 | Vulnerability · Source |
| CVE-2026-52985 | redhat_vex | kernel: netdevsim: zero initialize struct iphdr in dummy sk_buff | known affected: 232 known not affected: 42 | 2026-07-14T18:08:10+00:00 | Vulnerability · Source |
| CVE-2026-52949 | redhat_vex | kernel: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure | known affected: 184 known not affected: 90 | 2026-07-14T18:08:07+00:00 | Vulnerability · Source |
| CVE-2026-52948 | redhat_vex | kernel: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl | known affected: 274 | 2026-07-14T18:08:02+00:00 | Vulnerability · Source |
| CVE-2026-52984 | redhat_vex | kernel: net/sched: netem: fix queue limit check to include reordered packets | known affected: 198 known not affected: 76 | 2026-07-14T18:08:02+00:00 | Vulnerability · Source |
| CVE-2026-53012 | redhat_vex | kernel: nexthop: fix IPv6 route referencing IPv4 nexthop | known affected: 184 known not affected: 90 | 2026-07-14T18:07:09+00:00 | Vulnerability · Source |
| CVE-2026-52961 | redhat_vex | kernel: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size | known affected: 232 known not affected: 42 | 2026-07-14T18:05:08+00:00 | Vulnerability · Source |