VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53222 | redhat_vex | kernel: ptp: ocp: fix resource freeing order | known not affected: 274 | 2026-06-29T13:55:14+00:00 | Vulnerability · Source |
| CVE-2026-53204 | redhat_vex | kernel: firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe | known not affected: 274 | 2026-06-29T13:55:08+00:00 | Vulnerability · Source |
| CVE-2026-53155 | redhat_vex | kernel: mm/huge_memory: use correct flags for device private PMD entry | known not affected: 274 | 2026-06-29T13:54:59+00:00 | Vulnerability · Source |
| CVE-2026-12490 | redhat_vex | nsd: Bypass of client certificate verification with transfer over TLS | known not affected: 1 | 2026-06-29T13:50:06+00:00 | Vulnerability · Source |
| CVE-2026-54285 | redhat_vex | @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers | known not affected: 20 | 2026-06-29T12:34:11+00:00 | Vulnerability · Source |
| CVE-2026-22977 | redhat_vex | kernel: Kernel: Denial of Service in network socket error handling | known affected: 232 known not affected: 42 | 2026-06-29T12:34:07+00:00 | Vulnerability · Source |
| CVE-2026-50171 | redhat_vex | @angular/common: Angular @angular/common: Denial of Service via malformed digitsInfo parameter | known affected: 1 known not affected: 81 | 2026-06-29T12:01:57+00:00 | Vulnerability · Source |
| CVE-2026-53299 | redhat_vex | kernel: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() | known not affected: 274 | 2026-06-29T11:11:41+00:00 | Vulnerability · Source |
| CVE-2026-53301 | redhat_vex | kernel: reset: amlogic: t7: Fix null reset ops | known not affected: 274 | 2026-06-29T11:04:38+00:00 | Vulnerability · Source |
| CVE-2026-53317 | redhat_vex | kernel: wifi: mt76: mt7921: Place upper limit on station AID | known affected: 232 known not affected: 42 | 2026-06-29T10:08:15+00:00 | Vulnerability · Source |
| CVE-2026-53288 | redhat_vex | kernel: arm64: Reserve an extra page for early kernel mapping | known not affected: 274 | 2026-06-29T09:58:43+00:00 | Vulnerability · Source |
| CVE-2026-53312 | redhat_vex | kernel: iommu/riscv: Remove overflows on the invalidation path | known not affected: 274 | 2026-06-29T09:53:59+00:00 | Vulnerability · Source |
| CVE-2026-53298 | redhat_vex | kernel: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() | known not affected: 274 | 2026-06-29T09:50:50+00:00 | Vulnerability · Source |
| CVE-2026-53302 | redhat_vex | kernel: crypto: eip93 - fix hmac setkey algo selection | known not affected: 274 | 2026-06-29T09:48:26+00:00 | Vulnerability · Source |
| CVE-2026-53308 | redhat_vex | kernel: power: supply: max77705: Free allocated workqueue and fix removal order | known not affected: 274 | 2026-06-29T09:20:40+00:00 | Vulnerability · Source |
| CVE-2026-56766 | redhat_vex | hydra: Hydra: Remote Code Execution via NTLM Authentication Stack Buffer Overflow | known not affected: 1 | 2026-06-29T09:20:40+00:00 | Vulnerability · Source |
| CVE-2026-53320 | redhat_vex | kernel: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() | known not affected: 274 | 2026-06-29T08:48:42+00:00 | Vulnerability · Source |
| CVE-2026-57436 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via heap use-after-free | known affected: 17 | 2026-06-29T08:44:05+00:00 | Vulnerability · Source |
| CVE-2026-57434 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via NULL pointer dereference | known affected: 17 | 2026-06-29T08:44:02+00:00 | Vulnerability · Source |
| CVE-2026-57235 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service via out-of-bounds read | known affected: 17 | 2026-06-29T08:43:56+00:00 | Vulnerability · Source |
| CVE-2026-57435 | redhat_vex | nokogiri: rubygem-nokogiri: Nokogiri: Denial of Service due to use-after-free when replacing XML attribute values | known affected: 17 | 2026-06-29T08:39:40+00:00 | Vulnerability · Source |
| CVE-2026-53307 | redhat_vex | kernel: pinctrl: pinconf-generic: Fully validate 'pinmux' property | known not affected: 274 | 2026-06-29T08:39:30+00:00 | Vulnerability · Source |
| CVE-2026-53303 | redhat_vex | kernel: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() | known not affected: 274 | 2026-06-29T08:36:14+00:00 | Vulnerability · Source |
| CVE-2026-53319 | redhat_vex | kernel: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() | known not affected: 274 | 2026-06-29T08:36:13+00:00 | Vulnerability · Source |
| CVE-2026-41696 | redhat_vex | org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation | known affected: 2 | 2026-06-29T07:12:29+00:00 | Vulnerability · Source |
| CVE-2026-41852 | redhat_vex | spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation | known affected: 15 | 2026-06-29T07:00:39+00:00 | Vulnerability · Source |
| CVE-2026-44598 | redhat_vex | shiro: org.apache.shiro/shiro-jakarta-ee: Apache Shiro: Server-Side Request Forgery via forged shiroSavedRequest cookie | known affected: 1 | 2026-06-29T05:57:19+00:00 | Vulnerability · Source |
| CVE-2026-13038 | redhat_vex | chromium-browser: chromium-browser: Use after free in Autofill | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13024 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in Navigation | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13025 | redhat_vex | chromium-browser: chromium-browser: Insufficient validation of untrusted input in DevTools | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13031 | redhat_vex | chromium-browser: chromium-browser: Use after free in Blink | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13033 | redhat_vex | chromium-browser: chromium-browser: Out of bounds read in Blink>InterestGroups | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13032 | redhat_vex | chromium-browser: chromium-browser: Use after free in WebGL | known not affected: 1 | 2026-06-29T05:42:43+00:00 | Vulnerability · Source |
| CVE-2026-13027 | redhat_vex | chromium-browser: chromium-browser: Use after free in FileSystem | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13282 | redhat_vex | chromium-browser: chromium-browser: Use after free in Payments | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13283 | redhat_vex | chromium-browser: chromium-browser: Use after free in AdFilter | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13281 | redhat_vex | chromium-browser: chromium-browser: Integer overflow in Mojo | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-13026 | redhat_vex | chromium-browser: chromium-browser: Use after free in Digital Credentials | known not affected: 1 | 2026-06-29T05:37:44+00:00 | Vulnerability · Source |
| CVE-2026-12772 | redhat_vex | litellm: BerriAI litellm: Session expiration leading to denial of service | known affected: 6 | 2026-06-29T05:07:46+00:00 | Vulnerability · Source |
| CVE-2026-53632 | redhat_vex | launch-editor: launch-editor: Credential compromise via NTLMv2 password hash leak through UNC path access | known affected: 1 known not affected: 42 | 2026-06-29T05:02:55+00:00 | Vulnerability · Source |
| CVE-2025-71379 | redhat_vex | vllm: vLLM: Denial of Service via regular expression denial of service (ReDoS) vulnerabilities | known not affected: 26 | 2026-06-29T05:02:50+00:00 | Vulnerability · Source |
| CVE-2026-54282 | redhat_vex | starlette: Starlette: Information disclosure due to improper HTTP request path validation | known affected: 5 known not affected: 68 | 2026-06-29T04:50:54+00:00 | Vulnerability · Source |
| CVE-2026-54233 | redhat_vex | vllm: vLLM: Denial of Service via excessive memory allocation in audio transcription | known affected: 21 known not affected: 5 | 2026-06-29T04:44:09+00:00 | Vulnerability · Source |
| CVE-2026-44022 | redhat_vex | docling: Docling: Information disclosure via path traversal in LaTeX backend | known affected: 1 | 2026-06-29T04:39:04+00:00 | Vulnerability · Source |
| CVE-2026-41048 | suse_vex | SUSE CVE CVE-2026-41048 | No product status | 2026-06-29T01:22:09+00:00 | Vulnerability · Source |
| CVE-2026-41049 | suse_vex | SUSE CVE CVE-2026-41049 | No product status | 2026-06-29T01:22:08+00:00 | Vulnerability · Source |
| CVE-2026-52929 | microsoft_vex | sctp: stream: fully roll back denied add-stream state | fixed: 1 known affected: 1 | 2026-06-28T14:49:48+00:00 | Vulnerability · Source |
| CVE-2026-52917 | microsoft_vex | sctp: diag: reject stale associations in dump_one path | fixed: 1 known affected: 1 | 2026-06-28T14:47:47+00:00 | Vulnerability · Source |
| CVE-2026-53212 | microsoft_vex | netfilter: nft_tunnel: fix use-after-free on object destroy | fixed: 1 known affected: 1 | 2026-06-28T14:47:14+00:00 | Vulnerability · Source |
| CVE-2026-53190 | microsoft_vex | drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() | fixed: 1 known affected: 1 | 2026-06-28T14:44:03+00:00 | Vulnerability · Source |