VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294036 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-49867 | redhat_vex | kernel: net: wwan: iosm: fix memory leak in ipc_wwan_dellink | known affected: 108 known not affected: 166 | 2026-06-29T21:29:09+00:00 | Vulnerability · Source |
| CVE-2022-49869 | redhat_vex | kernel: bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() | known affected: 76 known not affected: 198 | 2026-06-29T21:29:07+00:00 | Vulnerability · Source |
| CVE-2022-49866 | redhat_vex | kernel: net: wwan: mhi: fix memory leak in mhi_mbim_dellink | known affected: 108 known not affected: 166 | 2026-06-29T21:29:02+00:00 | Vulnerability · Source |
| CVE-2022-49865 | redhat_vex | kernel: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network | known affected: 198 known not affected: 76 | 2026-06-29T21:29:00+00:00 | Vulnerability · Source |
| CVE-2022-49863 | redhat_vex | kernel: can: af_can: fix NULL pointer dereference in can_rx_register() | known affected: 198 known not affected: 76 | 2026-06-29T21:28:58+00:00 | Vulnerability · Source |
| CVE-2022-49861 | redhat_vex | kernel: dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() | known not affected: 274 | 2026-06-29T21:28:55+00:00 | Vulnerability · Source |
| CVE-2022-49862 | redhat_vex | kernel: tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header | fixed: 321 known affected: 80 known not affected: 76 | 2026-06-29T21:28:55+00:00 | Vulnerability · Source |
| CVE-2022-49860 | redhat_vex | kernel: dmaengine: ti: k3-udma-glue: fix memory leak when register device fail | fixed: 280 known affected: 22 known not affected: 174 | 2026-06-29T21:28:51+00:00 | Vulnerability · Source |
| CVE-2022-49857 | redhat_vex | kernel: net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() | known not affected: 274 | 2026-06-29T21:28:45+00:00 | Vulnerability · Source |
| CVE-2025-41249 | redhat_vex | org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability | fixed: 6 known affected: 11 known not affected: 87 | 2026-06-29T21:28:42+00:00 | Vulnerability · Source |
| CVE-2025-66287 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-29T21:27:03+00:00 | Vulnerability · Source |
| CVE-2025-32913 | redhat_vex | libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header | fixed: 309 known affected: 3 known not affected: 4 | 2026-06-29T21:26:53+00:00 | Vulnerability · Source |
| CVE-2025-32911 | redhat_vex | libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value | fixed: 309 known affected: 3 known not affected: 4 | 2026-06-29T21:26:50+00:00 | Vulnerability · Source |
| CVE-2025-32908 | redhat_vex | libsoup: Denial of service on libsoup through HTTP/2 server | fixed: 18 known affected: 3 known not affected: 9 | 2026-06-29T21:26:48+00:00 | Vulnerability · Source |
| CVE-2025-32906 | redhat_vex | libsoup: Out of bounds reads in soup_headers_parse_request() | fixed: 327 known affected: 3 | 2026-06-29T21:26:44+00:00 | Vulnerability · Source |
| CVE-2025-26601 | redhat_vex | xorg: xwayland: Use-after-free in SyncInitTrigger() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:40+00:00 | Vulnerability · Source |
| CVE-2025-26600 | redhat_vex | xorg: xwayland: Use-after-free in PlayReleasedEvents() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:35+00:00 | Vulnerability · Source |
| CVE-2025-26599 | redhat_vex | xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:33+00:00 | Vulnerability · Source |
| CVE-2025-26598 | redhat_vex | xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:29+00:00 | Vulnerability · Source |
| CVE-2025-26597 | redhat_vex | xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:26+00:00 | Vulnerability · Source |
| CVE-2025-26596 | redhat_vex | xorg: xwayland: Heap overflow in XkbWriteKeySyms() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:21+00:00 | Vulnerability · Source |
| CVE-2025-26595 | redhat_vex | Xorg: xwayland: Buffer overflow in XkbVModMaskText() | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:19+00:00 | Vulnerability · Source |
| CVE-2025-26594 | redhat_vex | X.Org: Xwayland: Use-after-free of the root cursor | fixed: 600 known affected: 9 known not affected: 11 | 2026-06-29T21:26:14+00:00 | Vulnerability · Source |
| CVE-2025-14523 | redhat_vex | libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) | fixed: 349 known affected: 3 | 2026-06-29T21:26:10+00:00 | Vulnerability · Source |
| CVE-2025-13947 | redhat_vex | webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop | fixed: 482 known affected: 9 | 2026-06-29T21:26:06+00:00 | Vulnerability · Source |
| CVE-2025-13609 | redhat_vex | keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration | fixed: 163 known not affected: 1 | 2026-06-29T21:26:04+00:00 | Vulnerability · Source |
| CVE-2025-13502 | redhat_vex | webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS | fixed: 482 known affected: 9 | 2026-06-29T21:26:00+00:00 | Vulnerability · Source |
| CVE-2025-11021 | redhat_vex | libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library | fixed: 309 known affected: 3 | 2026-06-29T21:25:47+00:00 | Vulnerability · Source |
| CVE-2025-9900 | redhat_vex | libtiff: Libtiff Write-What-Where | fixed: 507 known affected: 4 known not affected: 78 | 2026-06-29T21:25:39+00:00 | Vulnerability · Source |
| CVE-2025-8067 | redhat_vex | udisks: Out-of-bounds read in UDisks Daemon | fixed: 685 known affected: 4 | 2026-06-29T21:25:18+00:00 | Vulnerability · Source |
| CVE-2025-3891 | redhat_vex | mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled | fixed: 173 known affected: 2 known not affected: 2 | 2026-06-29T21:25:11+00:00 | Vulnerability · Source |
| CVE-2025-3155 | redhat_vex | yelp: Arbitrary file read | fixed: 342 known affected: 10 | 2026-06-29T21:25:08+00:00 | Vulnerability · Source |
| CVE-2024-12084 | redhat_vex | rsync: Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling | fixed: 15 known not affected: 12 | 2026-06-29T21:25:00+00:00 | Vulnerability · Source |
| CVE-2023-32256 | redhat_vex | kernel: ksmbd race issue from smb2 close and logoff with multichannel | known not affected: 274 | 2026-06-29T21:24:54+00:00 | Vulnerability · Source |
| CVE-2023-25652 | redhat_vex | git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents | fixed: 456 known affected: 13 | 2026-06-29T21:22:37+00:00 | Vulnerability · Source |
| CVE-2024-8926 | redhat_vex | php: PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) | known not affected: 299 | 2026-06-29T21:22:30+00:00 | Vulnerability · Source |
| CVE-2024-43499 | redhat_vex | dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component | fixed: 119 known affected: 10 known not affected: 80 | 2026-06-29T21:22:29+00:00 | Vulnerability · Source |
| CVE-2024-43498 | redhat_vex | dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component | fixed: 119 known affected: 10 known not affected: 80 | 2026-06-29T21:22:19+00:00 | Vulnerability · Source |
| CVE-2024-43402 | redhat_vex | rust: Rust standard library did not properly escape arguments when invoking batch files on Windows using the Command API | known not affected: 51 | 2026-06-29T21:22:16+00:00 | Vulnerability · Source |
| CVE-2024-42415 | redhat_vex | libgsf: Compound Document Binary File Sector Allocation Table integer overflow vulnerability | known not affected: 14 | 2026-06-29T21:22:10+00:00 | Vulnerability · Source |
| CVE-2024-36474 | redhat_vex | libgsf: Compound Document Binary File Directory integer overflow vulnerability | known not affected: 14 | 2026-06-29T21:22:08+00:00 | Vulnerability · Source |
| CVE-2024-21896 | redhat_vex | nodejs: path traversal by monkey-patching buffer internals | fixed: 62 known not affected: 40 | 2026-06-29T21:22:02+00:00 | Vulnerability · Source |
| CVE-2024-11148 | redhat_vex | httpd: OpenBSD httpd(8) null dereference | known not affected: 42 | 2026-06-29T21:21:56+00:00 | Vulnerability · Source |
| CVE-2023-6516 | redhat_vex | bind9: Specific recursive query patterns may lead to an out-of-memory condition | fixed: 580 known not affected: 47 | 2026-06-29T21:21:52+00:00 | Vulnerability · Source |
| CVE-2025-23083 | redhat_vex | nodejs: Node.js Worker Thread Exposure via Diagnostics Channel | fixed: 179 known affected: 7 known not affected: 20 | 2026-06-29T21:21:45+00:00 | Vulnerability · Source |
| CVE-2022-49856 | redhat_vex | kernel: net: tun: call napi_schedule_prep() to ensure we own a napi | known affected: 42 known not affected: 232 | 2026-06-29T21:19:24+00:00 | Vulnerability · Source |
| CVE-2022-49854 | redhat_vex | kernel: mctp: Fix an error handling path in mctp_init() | known not affected: 274 | 2026-06-29T21:19:20+00:00 | Vulnerability · Source |
| CVE-2022-49853 | redhat_vex | kernel: net: macvlan: fix memory leaks of macvlan_common_newlink | fixed: 441 known affected: 80 known not affected: 76 | 2026-06-29T21:19:19+00:00 | Vulnerability · Source |
| CVE-2022-49850 | redhat_vex | kernel: nilfs2: fix deadlock in nilfs_count_free_blocks() | known not affected: 274 | 2026-06-29T21:19:14+00:00 | Vulnerability · Source |
| CVE-2022-49849 | redhat_vex | kernel: btrfs: fix match incorrectly in dev_args_match_device | known affected: 42 known not affected: 232 | 2026-06-29T21:19:13+00:00 | Vulnerability · Source |