VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292268 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-52937 | redhat_vex | kernel: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | known affected: 232 known not affected: 42 | 2026-07-08T19:35:43+00:00 | Vulnerability · Source |
| CVE-2026-52941 | redhat_vex | kernel: net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | known affected: 232 known not affected: 42 | 2026-07-08T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-52921 | redhat_vex | kernel: netfilter: ipset: stop hash:* range iteration at end | known affected: 274 | 2026-07-08T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-52940 | redhat_vex | kernel: tun: zero the whole vnet header in tun_put_user() | known affected: 90 known not affected: 184 | 2026-07-08T19:28:53+00:00 | Vulnerability · Source |
| CVE-2026-52939 | redhat_vex | kernel: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion | known affected: 14 known not affected: 260 | 2026-07-08T19:28:52+00:00 | Vulnerability · Source |
| CVE-2026-46295 | redhat_vex | kernel: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty | known affected: 90 known not affected: 184 | 2026-07-08T19:28:50+00:00 | Vulnerability · Source |
| CVE-2026-46294 | redhat_vex | kernel: dm: fix a buffer overflow in ioctl processing | known affected: 274 | 2026-07-08T19:28:49+00:00 | Vulnerability · Source |
| CVE-2026-40253 | redhat_vex | openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects | fixed: 473 known affected: 12 known not affected: 16 | 2026-07-08T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-12856 | redhat_vex | vscode-java: vscode: Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension | fixed: 4 known not affected: 61 | 2026-07-08T17:15:04+00:00 | Vulnerability · Source |
| CVE-2026-53251 | redhat_vex | kernel: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync | known affected: 184 known not affected: 90 | 2026-07-08T17:05:08+00:00 | Vulnerability · Source |
| CVE-2026-53258 | redhat_vex | kernel: wifi: fix leak if split 6 GHz scanning fails | known affected: 246 known not affected: 28 | 2026-07-08T16:55:13+00:00 | Vulnerability · Source |
| CVE-2026-53252 | redhat_vex | kernel: Bluetooth: fix memory leak in error path of hci_alloc_dev() | known affected: 198 known not affected: 76 | 2026-07-08T16:55:12+00:00 | Vulnerability · Source |
| CVE-2026-53255 | redhat_vex | kernel: Bluetooth: MGMT: validate advertising TLV before type checks | known affected: 260 known not affected: 14 | 2026-07-08T16:55:06+00:00 | Vulnerability · Source |
| CVE-2026-53257 | redhat_vex | kernel: wifi: cfg80211: enforce HE/EHT cap/oper consistency | known affected: 198 known not affected: 76 | 2026-07-08T16:55:01+00:00 | Vulnerability · Source |
| CVE-2026-46329 | redhat_vex | kernel: erofs: handle end of filesystem properly for file-backed mounts | known affected: 76 known not affected: 198 | 2026-07-08T16:25:36+00:00 | Vulnerability · Source |
| CVE-2026-52925 | redhat_vex | kernel: vrf: Fix a potential NPD when removing a port from a VRF | known affected: 232 known not affected: 42 | 2026-07-08T15:35:21+00:00 | Vulnerability · Source |
| CVE-2026-52928 | redhat_vex | kernel: af_unix: Reject SIOCATMARK on non-stream sockets | known affected: 90 known not affected: 184 | 2026-07-08T15:35:21+00:00 | Vulnerability · Source |
| CVE-2026-52930 | redhat_vex | kernel: ipc/shm: serialize orphan cleanup with shm_nattch updates | known affected: 274 | 2026-07-08T15:35:10+00:00 | Vulnerability · Source |
| CVE-2026-44405 | redhat_vex | paramiko: Paramiko: Data integrity could be compromised due to SHA-1 algorithm use | known affected: 46 known not affected: 1 under investigation: 10 | 2026-07-08T15:30:20+00:00 | Vulnerability · Source |
| CVE-2025-59303 | redhat_vex | haproxy: HAProxy Kubernetes Ingress Controller: Secret Leak via Config Snippets | known affected: 10 known not affected: 7 | 2026-07-08T15:25:32+00:00 | Vulnerability · Source |
| CVE-2026-46283 | redhat_vex | kernel: tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() | known affected: 90 known not affected: 184 | 2026-07-08T15:20:56+00:00 | Vulnerability · Source |
| CVE-2026-46279 | redhat_vex | kernel: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization | known affected: 90 known not affected: 184 | 2026-07-08T15:09:05+00:00 | Vulnerability · Source |
| CVE-2026-46313 | redhat_vex | kernel: media: intel/ipu6: fix error pointer dereference | known affected: 76 known not affected: 198 | 2026-07-08T15:09:02+00:00 | Vulnerability · Source |
| CVE-2025-53859 | redhat_vex | nginx: NGINX ngx_mail_smtp_module vulnerability | fixed: 4 known affected: 76 | 2026-07-08T15:09:00+00:00 | Vulnerability · Source |
| CVE-2026-46302 | redhat_vex | kernel: selinux: allow multiple opens of /sys/fs/selinux/policy | known affected: 274 | 2026-07-08T15:08:57+00:00 | Vulnerability · Source |
| CVE-2026-46298 | redhat_vex | kernel: pseries/papr-hvpipe: Fix race with interrupt handler | known affected: 184 known not affected: 90 | 2026-07-08T15:08:56+00:00 | Vulnerability · Source |
| CVE-2025-71315 | redhat_vex | kernel: drm/vkms: Convert to DRM's vblank timer | known affected: 232 known not affected: 42 | 2026-07-08T15:08:52+00:00 | Vulnerability · Source |
| CVE-2025-12817 | redhat_vex | postgresql: CREATE STATISTICS does not check for schema CREATE privilege | fixed: 2933 known affected: 46 known not affected: 3 | 2026-07-08T15:08:31+00:00 | Vulnerability · Source |
| CVE-2026-46315 | redhat_vex | kernel: io_uring/waitid: clear waitid info before copying it to userspace | known affected: 184 known not affected: 90 | 2026-07-08T15:08:30+00:00 | Vulnerability · Source |
| CVE-2026-46312 | redhat_vex | kernel: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap | known affected: 124 known not affected: 150 | 2026-07-08T15:08:29+00:00 | Vulnerability · Source |
| CVE-2025-54500 | redhat_vex | nginx: HTTP/2 Vulnerability | known not affected: 77 | 2026-07-08T15:08:28+00:00 | Vulnerability · Source |
| CVE-2026-46309 | redhat_vex | kernel: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise | known affected: 184 known not affected: 90 | 2026-07-08T15:06:02+00:00 | Vulnerability · Source |
| CVE-2026-32226 | redhat_vex | dotnet: .NET Framework: Denial of Service via race condition | known not affected: 133 | 2026-07-08T15:04:03+00:00 | Vulnerability · Source |
| CVE-2026-50229 | redhat_vex | tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example | fixed: 2 known affected: 78 known not affected: 3 | 2026-07-08T14:58:37+00:00 | Vulnerability · Source |
| CVE-2025-59464 | redhat_vex | nodejs: Nodejs memory leak | fixed: 16 known affected: 6 known not affected: 68 | 2026-07-08T14:58:33+00:00 | Vulnerability · Source |
| CVE-2025-59466 | redhat_vex | nodejs: Nodejs denial of service | fixed: 456 | 2026-07-08T14:58:29+00:00 | Vulnerability · Source |
| CVE-2026-21636 | redhat_vex | nodejs: Nodejs network segmentation bypass | fixed: 16 known not affected: 74 | 2026-07-08T14:58:28+00:00 | Vulnerability · Source |
| CVE-2026-21637 | redhat_vex | nodejs: Nodejs denial of service | fixed: 567 | 2026-07-08T14:58:17+00:00 | Vulnerability · Source |
| CVE-2025-68972 | redhat_vex | gnupg: GnuPG: Signature bypass via form feed character in signed messages | fixed: 3 known affected: 15 | 2026-07-08T14:58:14+00:00 | Vulnerability · Source |
| CVE-2026-55955 | redhat_vex | tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor | fixed: 4 known affected: 78 known not affected: 2 | 2026-07-08T14:58:11+00:00 | Vulnerability · Source |
| CVE-2026-53148 | redhat_vex | kernel: thunderbolt: Clamp XDomain response data copy to allocation size | known not affected: 274 | 2026-07-08T14:54:57+00:00 | Vulnerability · Source |
| CVE-2025-64503 | redhat_vex | cups: cups-filters: cups-filters: Out-of-bounds write via crafted PDF MediaBox | fixed: 4 known affected: 14 | 2026-07-08T14:52:57+00:00 | Vulnerability · Source |
| CVE-2025-11230 | redhat_vex | haproxy: denial of service vulnerability in HAProxy mjson library | fixed: 98 known affected: 9 known not affected: 17 | 2026-07-08T14:52:02+00:00 | Vulnerability · Source |
| CVE-2025-12818 | redhat_vex | postgresql: libpq: libpq undersizes allocations, via integer wraparound | fixed: 3265 known affected: 11 known not affected: 40 | 2026-07-08T14:47:53+00:00 | Vulnerability · Source |
| CVE-2026-53362 | microsoft_vex | ipv6: account for fraggap on the paged allocation path | fixed: 1 known affected: 1 | 2026-07-08T14:47:02+00:00 | Vulnerability · Source |
| CVE-2026-53361 | microsoft_vex | af_unix: Set gc_in_progress to true in unix_gc(). | fixed: 1 known affected: 1 | 2026-07-08T14:46:54+00:00 | Vulnerability · Source |
| CVE-2025-13699 | redhat_vex | mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation | fixed: 2284 known not affected: 19 | 2026-07-08T14:46:39+00:00 | Vulnerability · Source |
| CVE-2026-53325 | microsoft_vex | agp/amd64: Fix broken error propagation in agp_amd64_probe() | fixed: 1 known affected: 1 | 2026-07-08T14:43:54+00:00 | Vulnerability · Source |
| CVE-2026-52909 | microsoft_vex | ip6_vti: set netns_immutable on the fallback device. | fixed: 1 known affected: 1 | 2026-07-08T14:43:42+00:00 | Vulnerability · Source |
| CVE-2025-58186 | redhat_vex | golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http | fixed: 8 known affected: 73 known not affected: 50 under investigation: 1395 | 2026-07-08T14:43:00+00:00 | Vulnerability · Source |