VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-7589 | redhat_vex | openssh: OpenSSH pre-authentication async signal safety issue | known not affected: 41 | 2026-06-29T20:23:44+00:00 | Vulnerability · Source |
| CVE-2022-42919 | redhat_vex | python: local privilege escalation via the multiprocessing forkserver start method | fixed: 689 known not affected: 155 | 2026-06-29T20:23:35+00:00 | Vulnerability · Source |
| CVE-2022-37660 | redhat_vex | hostapd: Public Key Exchange (PKEX) Reuse Vulnerability in hostapd | known affected: 2 known not affected: 1 | 2026-06-29T20:23:25+00:00 | Vulnerability · Source |
| CVE-2021-47653 | redhat_vex | kernel: media: davinci: vpif: fix use-after-free on driver unbind | known not affected: 274 | 2026-06-29T20:23:07+00:00 | Vulnerability · Source |
| CVE-2021-47640 | redhat_vex | kernel: powerpc/kasan: Fix early region not updated correctly | known not affected: 274 | 2026-06-29T20:23:01+00:00 | Vulnerability · Source |
| CVE-2011-10007 | redhat_vex | perl-file-find-rule: File::Find::Rule Arbitrary Code Execution | fixed: 10 known affected: 2 | 2026-06-29T20:22:51+00:00 | Vulnerability · Source |
| CVE-2022-49909 | redhat_vex | kernel: Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() | known not affected: 274 | 2026-06-29T20:21:29+00:00 | Vulnerability · Source |
| CVE-2022-49846 | redhat_vex | kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() | fixed: 1634 known affected: 64 known not affected: 76 | 2026-06-29T20:21:23+00:00 | Vulnerability · Source |
| CVE-2022-49755 | redhat_vex | kernel: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | known not affected: 274 | 2026-06-29T20:20:31+00:00 | Vulnerability · Source |
| CVE-2022-49738 | redhat_vex | kernel: f2fs: fix to do sanity check on i_extra_isize in is_alive() | known not affected: 274 | 2026-06-29T20:20:25+00:00 | Vulnerability · Source |
| CVE-2022-49711 | redhat_vex | kernel: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() | known not affected: 274 | 2026-06-29T20:20:18+00:00 | Vulnerability · Source |
| CVE-2022-49685 | redhat_vex | kernel: iio: trigger: sysfs: fix use-after-free on remove | known not affected: 274 | 2026-06-29T20:20:12+00:00 | Vulnerability · Source |
| CVE-2022-49669 | redhat_vex | kernel: mptcp: fix race on unaccepted mptcp sockets | fixed: 286 known not affected: 156 | 2026-06-29T20:20:02+00:00 | Vulnerability · Source |
| CVE-2022-49551 | redhat_vex | kernel: usb: isp1760: Fix out-of-bounds array access | known not affected: 274 | 2026-06-29T20:18:55+00:00 | Vulnerability · Source |
| CVE-2022-49541 | redhat_vex | kernel: cifs: fix potential double free during failed mount | fixed: 642 known affected: 22 known not affected: 134 | 2026-06-29T20:18:49+00:00 | Vulnerability · Source |
| CVE-2022-49530 | redhat_vex | kernel: drm/amd/pm: fix double free in si_parse_power_table() | known not affected: 274 | 2026-06-29T20:18:47+00:00 | Vulnerability · Source |
| CVE-2022-49505 | redhat_vex | kernel: NFC: NULL out the dev->rfkill to prevent UAF | known not affected: 274 | 2026-06-29T20:18:36+00:00 | Vulnerability · Source |
| CVE-2022-49464 | redhat_vex | kernel: erofs: fix buffer copy overflow of ztailpacking feature | known not affected: 274 | 2026-06-29T20:18:23+00:00 | Vulnerability · Source |
| CVE-2022-49391 | redhat_vex | kernel: remoteproc: mtk_scp: Fix a potential double free | known not affected: 274 | 2026-06-29T20:18:17+00:00 | Vulnerability · Source |
| CVE-2022-49368 | redhat_vex | kernel: net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() | known not affected: 274 | 2026-06-29T20:18:13+00:00 | Vulnerability · Source |
| CVE-2022-49359 | redhat_vex | kernel: drm/panfrost: Job should reference MMU not file_priv | known not affected: 274 | 2026-06-29T20:17:58+00:00 | Vulnerability · Source |
| CVE-2022-49278 | redhat_vex | kernel: remoteproc: Fix count check in rproc_coredump_write() | known not affected: 274 | 2026-06-29T20:17:57+00:00 | Vulnerability · Source |
| CVE-2022-49258 | redhat_vex | kernel: crypto: ccree - Fix use after free in cc_cipher_exit() | known not affected: 274 | 2026-06-29T20:17:43+00:00 | Vulnerability · Source |
| CVE-2022-49186 | redhat_vex | kernel: clk: visconti: prevent array overflow in visconti_clk_register_gates() | known not affected: 274 | 2026-06-29T20:17:38+00:00 | Vulnerability · Source |
| CVE-2022-49059 | redhat_vex | kernel: nfc: nci: add flush_workqueue to prevent uaf | known not affected: 274 | 2026-06-29T20:17:30+00:00 | Vulnerability · Source |
| CVE-2026-48961 | redhat_vex | perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field | known affected: 10 | 2026-06-29T19:33:07+00:00 | Vulnerability · Source |
| CVE-2026-48959 | redhat_vex | perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward | known affected: 10 | 2026-06-29T19:33:04+00:00 | Vulnerability · Source |
| CVE-2026-56445 | redhat_vex | pynetdicom: pynetdicom: Arbitrary file write via unsanitized DICOM datasets | known not affected: 1 | 2026-06-29T19:30:21+00:00 | Vulnerability · Source |
| CVE-2026-48774 | redhat_vex | proxysql: ProxySQL: Unauthorized write operations via insufficient SQL statement validation. | known not affected: 1 | 2026-06-29T18:44:38+00:00 | Vulnerability · Source |
| CVE-2026-56787 | redhat_vex | RTKLIB: RTKLIB: Denial of Service via crafted RTCM3 SSR messages | known not affected: 1 | 2026-06-29T16:49:15+00:00 | Vulnerability · Source |
| CVE-2026-53925 | redhat_vex | glances: Glances: Command injection allows arbitrary code execution | known not affected: 1 | 2026-06-29T16:45:24+00:00 | Vulnerability · Source |
| CVE-2026-46607 | redhat_vex | glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file | known not affected: 1 | 2026-06-29T16:45:21+00:00 | Vulnerability · Source |
| CVE-2026-12725 | microsoft_vex | Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies | fixed: 1 known affected: 1 | 2026-06-29T14:47:23+00:00 | Vulnerability · Source |
| CVE-2026-12969 | microsoft_vex | Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation | fixed: 1 known affected: 1 | 2026-06-29T14:47:16+00:00 | Vulnerability · Source |
| CVE-2026-13029 | redhat_vex | chromium-browser: chromium-browser: Use after free in Web Authentication | known not affected: 1 | 2026-06-29T14:46:30+00:00 | Vulnerability · Source |
| CVE-2026-53143 | microsoft_vex | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | fixed: 1 known affected: 1 | 2026-06-29T14:45:42+00:00 | Vulnerability · Source |
| CVE-2026-52926 | microsoft_vex | batman-adv: clear current gateway during teardown | fixed: 1 known affected: 1 | 2026-06-29T14:43:29+00:00 | Vulnerability · Source |
| CVE-2026-52916 | microsoft_vex | batman-adv: frag: disallow unicast fragment in fragment | fixed: 1 known affected: 1 | 2026-06-29T14:42:39+00:00 | Vulnerability · Source |
| CVE-2026-56410 | microsoft_vex | xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. | fixed: 1 known affected: 1 | 2026-06-29T14:42:15+00:00 | Vulnerability · Source |
| CVE-2026-56409 | microsoft_vex | xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. | fixed: 1 known affected: 1 | 2026-06-29T14:42:07+00:00 | Vulnerability · Source |
| CVE-2026-56411 | microsoft_vex | xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. | fixed: 1 known affected: 1 | 2026-06-29T14:41:59+00:00 | Vulnerability · Source |
| CVE-2026-49356 | microsoft_vex | Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core | known affected: 1 | 2026-06-29T14:40:53+00:00 | Vulnerability · Source |
| CVE-2026-50219 | microsoft_vex | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur, | fixed: 1 known affected: 1 known not affected: 2 | 2026-06-29T14:40:30+00:00 | Vulnerability · Source |
| CVE-2026-45186 | microsoft_vex | In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. | fixed: 1 known affected: 1 known not affected: 2 | 2026-06-29T14:40:22+00:00 | Vulnerability · Source |
| CVE-2026-41080 | microsoft_vex | libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. | fixed: 1 known affected: 3 known not affected: 4 | 2026-06-29T14:40:10+00:00 | Vulnerability · Source |
| CVE-2026-53655 | microsoft_vex | node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) | known affected: 1 | 2026-06-29T14:40:08+00:00 | Vulnerability · Source |
| CVE-2025-66382 | microsoft_vex | In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time. | fixed: 1 known affected: 7 | 2026-06-29T14:40:01+00:00 | Vulnerability · Source |
| CVE-2026-12246 | redhat_vex | nsd: Out of bounds stack write with crafted APL RR | known not affected: 1 | 2026-06-29T14:03:49+00:00 | Vulnerability · Source |
| CVE-2026-12245 | redhat_vex | NSD: Denial of DNS over TLS service by any DoT client | known not affected: 1 | 2026-06-29T14:03:34+00:00 | Vulnerability · Source |
| CVE-2026-12244 | redhat_vex | nsd: A specially crafted SVCB RR can cause a heap overflow of up to 65509 attacker controlled bytes. | known not affected: 1 | 2026-06-29T14:03:20+00:00 | Vulnerability · Source |