VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303560 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97977 | redhat_vex | kernel: Bluetooth: btusb: Fix UAF of btusb_data by rx_work | known affected: 247 known not affected: 29 | 2026-09-30T06:26:16+00:00 | Vulnerability · Source |
| CVE-2026-97978 | redhat_vex | kernel: eth: ice: don't dereference pointers from TP_printk() | known affected: 234 known not affected: 42 | 2026-09-30T06:26:16+00:00 | Vulnerability · Source |
| CVE-2026-54873 | redhat_vex | openssl: openssl: Denial of Service via excessive QUIC packet buffer retention | known affected: 88 known not affected: 1 | 2026-09-30T06:26:16+00:00 | Vulnerability · Source |
| CVE-2026-97976 | redhat_vex | kernel: Bluetooth: btintel_pcie: validate packet_len before skb_put_data | known affected: 183 known not affected: 93 | 2026-09-30T06:12:45+00:00 | Vulnerability · Source |
| CVE-2026-84783 | redhat_vex | openssl: openssl: Denial of Service via race condition in certificate extension caching | fixed: 22 known affected: 86 known not affected: 1 | 2026-09-30T06:12:44+00:00 | Vulnerability · Source |
| CVE-2026-77301 | redhat_vex | adm-zip: adm-zip: Denial of Service via uncontrolled memory allocation | known affected: 26 | 2026-09-30T06:12:40+00:00 | Vulnerability · Source |
| CVE-2026-75805 | redhat_vex | openssl: openssl: Denial of Service via crafted CMP certificate revocation response | known affected: 88 known not affected: 1 | 2026-09-30T06:12:35+00:00 | Vulnerability · Source |
| CVE-2026-75931 | redhat_vex | fast-uri: fast-uri: Host confusion via skipped IDN canonicalization | fixed: 83 known affected: 72 known not affected: 1578 | 2026-09-30T06:12:33+00:00 | Vulnerability · Source |
| CVE-2026-35191 | redhat_vex | openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting | known affected: 87 known not affected: 1 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-42772 | redhat_vex | openssl: openssl: Denial of Service via inefficient QUIC stream reassembly | known affected: 88 known not affected: 1 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-72897 | redhat_vex | openssl: openssl: Denial of Service via out-of-bounds write during TLS context switch | known affected: 87 known not affected: 1 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-75899 | redhat_vex | fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding | fixed: 84 known affected: 54 known not affected: 1594 | 2026-09-30T06:12:28+00:00 | Vulnerability · Source |
| CVE-2026-46597 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs | fixed: 489 known affected: 141 known not affected: 15670 | 2026-09-30T06:06:12+00:00 | Vulnerability · Source |
| CVE-2026-97975 | redhat_vex | kernel: Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() | known affected: 197 known not affected: 79 | 2026-09-30T05:58:34+00:00 | Vulnerability · Source |
| CVE-2026-91769 | redhat_vex | php: php: Server impersonation via Common Name fallback in TLS verification | fixed: 57 known affected: 304 | 2026-09-30T05:53:52+00:00 | Vulnerability · Source |
| CVE-2026-97974 | redhat_vex | kernel: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() | known affected: 90 known not affected: 186 | 2026-09-30T05:51:29+00:00 | Vulnerability · Source |
| CVE-2026-102331 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in ANGLE | known not affected: 1 | 2026-09-30T05:51:29+00:00 | Vulnerability · Source |
| CVE-2026-97973 | redhat_vex | kernel: net: macb: destroy the phylink instance on the probe error path | known not affected: 276 | 2026-09-30T05:41:33+00:00 | Vulnerability · Source |
| CVE-2026-97972 | redhat_vex | kernel: net: macb: put the "mdio" child node reference on success | known not affected: 276 | 2026-09-30T05:34:54+00:00 | Vulnerability · Source |
| CVE-2026-97971 | redhat_vex | kernel: nstree: check listing permission before taking a namespace reference | known not affected: 276 | 2026-09-30T05:23:21+00:00 | Vulnerability · Source |
| CVE-2026-102252 | redhat_vex | github.com/google/osv-scalibr: osv-scalibr: Arbitrary file write via path traversal in VMDK extractor | known not affected: 1 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-97970 | redhat_vex | kernel: watchdog: msc313e: Avoid division by zero | known not affected: 276 | 2026-09-30T05:20:22+00:00 | Vulnerability · Source |
| CVE-2026-97969 | redhat_vex | kernel: watchdog: msc313e: Fix clock leak and spurious timer in settimeout() | known not affected: 276 | 2026-09-30T05:11:25+00:00 | Vulnerability · Source |
| CVE-2026-97968 | redhat_vex | kernel: hwmon: (corsair-cpro) Create debugfs entries after hwmon registration | known not affected: 276 | 2026-09-30T05:11:23+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 890 known affected: 332 known not affected: 321 | 2026-09-30T05:05:45+00:00 | Vulnerability · Source |
| CVE-2026-97967 | redhat_vex | kernel: hwmon: (corsair-cpro) Remove debugfs entries when probe fails | known not affected: 276 | 2026-09-30T05:01:12+00:00 | Vulnerability · Source |
| CVE-2026-103111 | redhat_vex | pcre2: pcre2: Out-of-bounds write via crafted regular expression | known affected: 117 | 2026-09-30T05:01:12+00:00 | Vulnerability · Source |
| CVE-2026-97965 | redhat_vex | kernel: vxlan: initialize _md in vxlan_xmit_one() | known affected: 185 known not affected: 91 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |
| CVE-2026-102875 | redhat_vex | vlc: vlc: arbitrary code execution via path traversal in skin archives | known not affected: 1 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |
| CVE-2026-97966 | redhat_vex | kernel: octeontx2-pf: reset HTB scheduler topology before freeing queues | known affected: 183 known not affected: 93 | 2026-09-30T04:36:50+00:00 | Vulnerability · Source |
| CVE-2026-97964 | redhat_vex | kernel: ppp_synctty: ensure a writeable skb header | known affected: 185 known not affected: 91 | 2026-09-30T04:21:55+00:00 | Vulnerability · Source |
| CVE-2026-97948 | redhat_vex | kernel: powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver | known affected: 183 known not affected: 93 | 2026-09-30T04:21:33+00:00 | Vulnerability · Source |
| CVE-2026-97947 | redhat_vex | kernel: x86/amd_node: Fix potential NULL pointer dereference | known affected: 183 known not affected: 93 | 2026-09-30T04:21:32+00:00 | Vulnerability · Source |
| CVE-2026-97944 | redhat_vex | kernel: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() | known affected: 14 known not affected: 262 | 2026-09-30T04:21:28+00:00 | Vulnerability · Source |
| CVE-2026-97928 | redhat_vex | kernel: drm/amdgpu: skip the VMID 0 flush for VRAM | known affected: 197 known not affected: 79 | 2026-09-30T04:21:27+00:00 | Vulnerability · Source |
| CVE-2026-97473 | redhat_vex | kernel: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() | known affected: 183 known not affected: 93 | 2026-09-30T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-97950 | redhat_vex | kernel: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry | known affected: 276 | 2026-09-30T04:21:20+00:00 | Vulnerability · Source |
| CVE-2026-97949 | redhat_vex | kernel: configfs: unhash the dentry before dropping the item in rmdir | known affected: 276 | 2026-09-30T04:21:16+00:00 | Vulnerability · Source |
| CVE-2026-97946 | redhat_vex | kernel: x86/amd_node: Fix PCI device reference counting in amd_smn_init() | known affected: 183 known not affected: 93 | 2026-09-30T04:21:13+00:00 | Vulnerability · Source |
| CVE-2026-97945 | redhat_vex | kernel: x86/mm: Fix user-space data loss with MADV_FREE and THP | known affected: 197 known not affected: 79 | 2026-09-30T04:21:11+00:00 | Vulnerability · Source |
| CVE-2026-97486 | redhat_vex | kernel: hpfs: handle set_blocksize failures | known not affected: 276 | 2026-09-30T04:21:10+00:00 | Vulnerability · Source |
| CVE-2026-97929 | redhat_vex | kernel: ALSA: usbusx2y: validate URB actual_length in interrupt callback | known affected: 276 | 2026-09-30T04:21:07+00:00 | Vulnerability · Source |
| CVE-2026-97485 | redhat_vex | kernel: omfs: handle set_blocksize failures | known not affected: 276 | 2026-09-30T04:21:05+00:00 | Vulnerability · Source |
| CVE-2026-103046 | redhat_vex | WikiLambda: MediaWiki: WikiLambda: Stored cross-site scripting via unsafe string replacements in WikifunctionsFragmentRenderer | known not affected: 1 | 2026-09-30T04:21:03+00:00 | Vulnerability · Source |
| CVE-2026-97963 | redhat_vex | kernel: net: stmmac: initialize ptp_lock at probe time | known affected: 234 known not affected: 42 | 2026-09-30T04:21:01+00:00 | Vulnerability · Source |
| CVE-2026-97915 | redhat_vex | kernel: accel/ivpu: Limit firmware log name prints to field size | known affected: 76 known not affected: 200 | 2026-09-30T04:21:00+00:00 | Vulnerability · Source |
| CVE-2026-97914 | redhat_vex | kernel: accel: ethosu: Fix ethosu_job_open() return value | known not affected: 276 | 2026-09-30T04:20:55+00:00 | Vulnerability · Source |
| CVE-2026-97913 | redhat_vex | kernel: accel: ethosu: Ensure cmd stream ends with a stop op | known not affected: 276 | 2026-09-30T04:20:53+00:00 | Vulnerability · Source |
| CVE-2026-97912 | redhat_vex | kernel: accel: ethosu: Ensure SRAM size is 0 on mapping failure | known not affected: 276 | 2026-09-30T04:20:52+00:00 | Vulnerability · Source |
| CVE-2026-97472 | redhat_vex | kernel: ipv6: addrconf: fix temp address generation after prefix deprecation | known affected: 276 | 2026-09-30T04:20:50+00:00 | Vulnerability · Source |