VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293833 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-38008 | redhat_vex | kernel: Linux kernel: Denial of Service due to race condition in unaccepted memory handling | known affected: 226 known not affected: 48 | 2026-07-08T12:24:15+00:00 | Vulnerability · Source |
| CVE-2023-53853 | redhat_vex | kernel: netlink: annotate accesses to nlk->cb_running | known affected: 198 known not affected: 76 | 2026-07-08T12:24:12+00:00 | Vulnerability · Source |
| CVE-2025-38112 | redhat_vex | kernel: Linux kernel: Denial of Service due to TOCTOU in `sk_is_readable()` | known affected: 274 | 2026-07-08T12:24:05+00:00 | Vulnerability · Source |
| CVE-2025-38055 | redhat_vex | kernel: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq | known affected: 212 known not affected: 62 | 2026-07-08T12:24:00+00:00 | Vulnerability · Source |
| CVE-2023-53802 | redhat_vex | kernel: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function | known affected: 198 known not affected: 76 | 2026-07-08T12:23:58+00:00 | Vulnerability · Source |
| CVE-2025-38017 | redhat_vex | kernel: Linux kernel: Denial of Service via endless busy loop in eventpoll | known affected: 274 | 2026-07-08T12:23:48+00:00 | Vulnerability · Source |
| CVE-2023-54110 | redhat_vex | kernel: usb: rndis_host: Secure rndis_query check against int overflow | known affected: 198 known not affected: 76 | 2026-07-08T12:23:40+00:00 | Vulnerability · Source |
| CVE-2023-54179 | redhat_vex | kernel: scsi: qla2xxx: Array index may go out of bound | fixed: 399 known affected: 80 known not affected: 76 | 2026-07-08T12:23:37+00:00 | Vulnerability · Source |
| CVE-2025-38099 | redhat_vex | kernel: Linux kernel Bluetooth: Denial of Service via improper SCO voice setting | known affected: 274 | 2026-07-08T12:23:35+00:00 | Vulnerability · Source |
| CVE-2026-23192 | redhat_vex | kernel: linkwatch: use __dev_put() in callers to prevent UAF | known affected: 90 known not affected: 184 | 2026-07-08T12:23:22+00:00 | Vulnerability · Source |
| CVE-2025-40345 | redhat_vex | kernel: usb: storage: sddr55: Reject out-of-bound new_pba | known affected: 274 | 2026-07-08T12:23:20+00:00 | Vulnerability · Source |
| CVE-2025-68239 | redhat_vex | kernel: binfmt_misc: restore write access before closing files opened by open_exec() | known affected: 198 known not affected: 76 | 2026-07-08T12:23:19+00:00 | Vulnerability · Source |
| CVE-2026-23121 | redhat_vex | kernel: Linux kernel mISDN: Denial of Service via data race | known affected: 90 known not affected: 184 | 2026-07-08T12:23:17+00:00 | Vulnerability · Source |
| CVE-2025-38128 | redhat_vex | kernel: Linux kernel: Memory corruption in Bluetooth subsystem via malformed HCI_CMD_SYNC command | known affected: 212 known not affected: 62 | 2026-07-08T12:23:15+00:00 | Vulnerability · Source |
| CVE-2025-38100 | redhat_vex | kernel: Linux kernel: Local Denial of Service due to TIF_IO_BITMAP inconsistency | known affected: 226 known not affected: 48 | 2026-07-08T12:23:10+00:00 | Vulnerability · Source |
| CVE-2026-23208 | redhat_vex | kernel: ALSA: usb-audio: Prevent excessive number of frames | known affected: 274 | 2026-07-08T12:23:09+00:00 | Vulnerability · Source |
| CVE-2026-23124 | redhat_vex | kernel: Linux kernel: Data race in IPv6 neighbor discovery leads to limited availability | known affected: 90 known not affected: 184 | 2026-07-08T12:23:05+00:00 | Vulnerability · Source |
| CVE-2025-38140 | redhat_vex | kernel: Linux kernel: Local denial of service in device mapper | known affected: 226 known not affected: 48 | 2026-07-08T12:23:04+00:00 | Vulnerability · Source |
| CVE-2025-38113 | redhat_vex | kernel: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | known affected: 260 known not affected: 14 | 2026-07-08T12:23:01+00:00 | Vulnerability · Source |
| CVE-2025-38157 | redhat_vex | kernel: Linux kernel's ath9k_htc Wi-Fi driver: Denial of Service or information disclosure via malicious USB device input | known affected: 274 | 2026-07-08T12:22:57+00:00 | Vulnerability · Source |
| CVE-2025-38149 | redhat_vex | kernel: net: phy: clear phydev->devlink when the link is deleted | known affected: 226 known not affected: 48 | 2026-07-08T12:22:55+00:00 | Vulnerability · Source |
| CVE-2026-31508 | redhat_vex | kernel: net: openvswitch: Avoid releasing netdev before teardown completes | fixed: 841 known affected: 112 known not affected: 76 | 2026-07-08T12:22:48+00:00 | Vulnerability · Source |
| CVE-2026-23146 | redhat_vex | kernel: Linux kernel: Denial of Service in Bluetooth HCI UART driver via null pointer dereference | fixed: 612 known affected: 36 known not affected: 76 | 2026-07-08T12:22:23+00:00 | Vulnerability · Source |
| CVE-2026-46166 | redhat_vex | kernel: wifi: mac80211: use safe list iteration in radar detect work | fixed: 1224 known affected: 22 known not affected: 90 | 2026-07-08T12:22:06+00:00 | Vulnerability · Source |
| CVE-2026-23270 | redhat_vex | kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation | fixed: 2538 known affected: 36 known not affected: 28 | 2026-07-08T12:19:54+00:00 | Vulnerability · Source |
| CVE-2026-23127 | redhat_vex | kernel: Linux kernel: Privilege escalation or denial of service in perf subsystem | known affected: 14 known not affected: 260 | 2026-07-08T12:19:45+00:00 | Vulnerability · Source |
| CVE-2023-54271 | redhat_vex | kernel: Linux kernel: Denial of Service via NULL pointer dereference in blk-cgroup | fixed: 280 known affected: 84 known not affected: 112 | 2026-07-08T12:19:44+00:00 | Vulnerability · Source |
| CVE-2023-54226 | redhat_vex | kernel: af_unix: Fix data races around sk->sk_shutdown | known affected: 198 known not affected: 76 | 2026-07-08T12:19:43+00:00 | Vulnerability · Source |
| CVE-2025-68312 | redhat_vex | kernel: usbnet: Prevents free active kevent | known affected: 198 known not affected: 76 | 2026-07-08T12:19:40+00:00 | Vulnerability · Source |
| CVE-2026-31786 | redhat_vex | kernel: Buffer overflow in drivers/xen/sys-hypervisor.c | fixed: 762 known affected: 64 | 2026-07-08T12:18:56+00:00 | Vulnerability · Source |
| CVE-2026-13122 | redhat_vex | openvpn: From CVEorg collector | known not affected: 1 | 2026-07-08T11:39:19+00:00 | Vulnerability · Source |
| CVE-2026-13698 | redhat_vex | openvpn: From CVEorg collector | known not affected: 1 | 2026-07-08T11:39:09+00:00 | Vulnerability · Source |
| CVE-2026-46155 | redhat_vex | kernel: smb/client: fix out-of-bounds read in smb2_compound_op() | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-08T11:39:00+00:00 | Vulnerability · Source |
| CVE-2026-46259 | redhat_vex | kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() | fixed: 762 known affected: 64 | 2026-07-08T11:39:00+00:00 | Vulnerability · Source |
| CVE-2026-43276 | redhat_vex | kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-08T11:38:55+00:00 | Vulnerability · Source |
| CVE-2026-43341 | redhat_vex | kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill | fixed: 616 known not affected: 198 | 2026-07-08T11:38:55+00:00 | Vulnerability · Source |
| CVE-2026-40047 | redhat_vex | camel-docling: Apache Camel Docling: CLI argument injection and path traversal | known affected: 2 | 2026-07-08T11:29:24+00:00 | Vulnerability · Source |
| CVE-2026-15041 | redhat_vex | 389-ds-base: 389-ds-base: Non-constant-time comparison in PBKDF2-SHA256 password verification | known affected: 29 known not affected: 4 | 2026-07-08T11:06:55+00:00 | Vulnerability · Source |
| CVE-2026-59710 | redhat_vex | showdown: Showdown: Stored Cross-Site Scripting via unescaped table header ID attributes in markdown | known affected: 26 | 2026-07-08T11:01:35+00:00 | Vulnerability · Source |
| CVE-2026-56139 | redhat_vex | org.apache.camel/camel-undertow: Apache Camel Undertow: Information disclosure via error messages containing sensitive data | known affected: 2 | 2026-07-08T08:26:45+00:00 | Vulnerability · Source |
| CVE-2026-54264 | redhat_vex | @angular/service-worker: @angular/service-worker: Information Disclosure via unstripped sensitive headers on cross-origin redirects | known not affected: 1 | 2026-07-08T08:16:47+00:00 | Vulnerability · Source |
| CVE-2026-50184 | redhat_vex | @angular/service-worker: @angular/service-worker: Security flaw leads to session leaks and cached private data | known not affected: 1 | 2026-07-08T08:16:40+00:00 | Vulnerability · Source |
| CVE-2026-49232 | redhat_vex | rust-routinator: Routinator: Denial of Service via malicious HTTP or RTR connections | known not affected: 1 | 2026-07-08T08:10:57+00:00 | Vulnerability · Source |
| CVE-2026-49234 | redhat_vex | rust-routinator: Routinator: Denial of Service via crafted non-UTF-8 string | known not affected: 1 | 2026-07-08T08:10:53+00:00 | Vulnerability · Source |
| CVE-2026-49235 | redhat_vex | rust-routinator: Routinator: Denial of Service via crafted Document Type Definition in RRDP | known not affected: 1 | 2026-07-08T08:10:21+00:00 | Vulnerability · Source |
| CVE-2026-49233 | redhat_vex | rust-routinator: Routinator: Information disclosure via rsync URI path traversal | known not affected: 1 | 2026-07-08T08:10:19+00:00 | Vulnerability · Source |
| CVE-2026-49342 | redhat_vex | yard: YARD: Information disclosure via path traversal in static cache lookup | known not affected: 10 | 2026-07-08T07:57:39+00:00 | Vulnerability · Source |
| CVE-2026-59711 | redhat_vex | showdown: Showdown: Cross-site scripting via unescaped metadata title allows arbitrary code execution | known affected: 26 under investigation: 4 | 2026-07-08T07:40:51+00:00 | Vulnerability · Source |
| CVE-2026-55699 | redhat_vex | pnpm: pnpm: Denial of Service due to improper handling of malicious package manifest bin keys | known affected: 4 | 2026-07-08T07:36:35+00:00 | Vulnerability · Source |
| CVE-2026-54786 | redhat_vex | Wasmtime: Wasmtime: Leak in WASIp1 `fd_renumber` implementation | known affected: 3 | 2026-07-08T07:30:20+00:00 | Vulnerability · Source |