VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296244 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-0465 | redhat_vex | kernel: out of bounds write in hid-multitouch.c may lead to escalation of privilege | fixed: 185 known affected: 16 known not affected: 169 | 2026-06-28T07:30:39+00:00 | Vulnerability · Source |
| CVE-2020-0431 | redhat_vex | kernel: possible out of bounds write in kbd_keycode of keyboard.c | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T07:30:38+00:00 | Vulnerability · Source |
| CVE-2020-0427 | redhat_vex | kernel: out-of-bounds reads in pinctrl subsystem. | fixed: 335 known not affected: 31 | 2026-06-28T07:30:37+00:00 | Vulnerability · Source |
| CVE-2019-9948 | redhat_vex | python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms | fixed: 874 known affected: 16 known not affected: 42 | 2026-06-28T07:30:36+00:00 | Vulnerability · Source |
| CVE-2026-33898 | redhat_vex | incus: Incus: Privilege escalation and unauthorized access due to improper authentication token validation in web UI | known not affected: 1 | 2026-06-28T07:30:34+00:00 | Vulnerability · Source |
| CVE-2026-33897 | redhat_vex | incus: pongo2: Incus: Arbitrary file read/write as root via pongo2 template chroot bypass | known not affected: 1 | 2026-06-28T07:30:34+00:00 | Vulnerability · Source |
| CVE-2026-33812 | redhat_vex | golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files | known affected: 45 | 2026-06-28T07:30:30+00:00 | Vulnerability · Source |
| CVE-2026-33809 | redhat_vex | golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file | fixed: 8 known affected: 35 | 2026-06-28T07:30:30+00:00 | Vulnerability · Source |
| CVE-2024-50201 | redhat_vex | kernel: drm/radeon: Fix encoder->possible_clones | fixed: 305 known affected: 112 | 2026-06-28T07:30:29+00:00 | Vulnerability · Source |
| CVE-2019-9755 | redhat_vex | ntfs-3g: heap-based buffer overflow leads to local root privilege escalation | fixed: 1600 known affected: 3 | 2026-06-28T07:30:27+00:00 | Vulnerability · Source |
| CVE-2019-9741 | redhat_vex | golang: CRLF injection in net/http | fixed: 93 known affected: 26 | 2026-06-28T07:30:27+00:00 | Vulnerability · Source |
| CVE-2026-33711 | redhat_vex | incus: Incus: Local privilege escalation or denial of service via predictable temporary file paths | known not affected: 1 | 2026-06-28T07:30:25+00:00 | Vulnerability · Source |
| CVE-2026-33721 | redhat_vex | MapServer: MapServer: Denial of Service via crafted Styled Layer Descriptor | known not affected: 1 | 2026-06-28T07:30:25+00:00 | Vulnerability · Source |
| CVE-2019-9640 | redhat_vex | php: Invalid read in exif_process_SOFn() | fixed: 1247 known affected: 88 | 2026-06-28T07:30:24+00:00 | Vulnerability · Source |
| CVE-2019-9639 | redhat_vex | php: Uninitialized read in exif_process_IFD_in_MAKERNOTE | fixed: 1247 known affected: 32 known not affected: 56 | 2026-06-28T07:30:23+00:00 | Vulnerability · Source |
| CVE-2019-9638 | redhat_vex | php: Uninitialized read in exif_process_IFD_in_MAKERNOTE | fixed: 1247 known affected: 58 known not affected: 30 | 2026-06-28T07:30:22+00:00 | Vulnerability · Source |
| CVE-2019-9636 | redhat_vex | python: Information Disclosure due to urlsplit improper NFKC normalization | fixed: 899 known affected: 1 known not affected: 42 | 2026-06-28T07:30:22+00:00 | Vulnerability · Source |
| CVE-2026-33601 | redhat_vex | pdns-recursor: insufficient validation of ZONEMD record | known not affected: 1 | 2026-06-28T07:30:22+00:00 | Vulnerability · Source |
| CVE-2026-33691 | redhat_vex | coreruleset: OWASP Core Rule Set: File upload bypass via whitespace padding in filenames | known not affected: 1 | 2026-06-28T07:30:21+00:00 | Vulnerability · Source |
| CVE-2026-33689 | redhat_vex | xrdp: xrdp: Denial of Service and Information Disclosure via Out-of-Bounds Read | known not affected: 1 | 2026-06-28T07:30:20+00:00 | Vulnerability · Source |
| CVE-2019-9511 | redhat_vex | HTTP/2: large amount of data requests leads to denial of service | fixed: 1600 known affected: 8 known not affected: 98 | 2026-06-28T07:30:19+00:00 | Vulnerability · Source |
| CVE-2019-9506 | redhat_vex | hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) | fixed: 900 known affected: 15 | 2026-06-28T07:30:18+00:00 | Vulnerability · Source |
| CVE-2019-9503 | redhat_vex | kernel: brcmfmac frame validation bypass | fixed: 489 known affected: 42 known not affected: 1 | 2026-06-28T07:30:18+00:00 | Vulnerability · Source |
| CVE-2023-22054 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33600 | redhat_vex | pdns-recursor: NULL pointer dereference in RPZ transfer | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33658 | redhat_vex | rails: activestorage: Active Storage: Denial of Service via HTTP Range header processing | known not affected: 2 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33597 | redhat_vex | dnsdist: insufficient input validation of internal webserver | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33642 | redhat_vex | kitty: Kitty: Arbitrary Code Execution via Integer Wrapping in Escape Sequence Handling | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33594 | redhat_vex | dnsdist: outgoing DoH excessive memory allocation | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33602 | redhat_vex | dnsdist: off-by-one access when processing crafted UDP responses | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33609 | redhat_vex | PowerDNS: PowerDNS: Information disclosure via incomplete LDAP query escaping | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2026-33595 | redhat_vex | dnsdist: DoQ/DoH3 excessive memory allocation | known not affected: 1 | 2026-06-28T07:30:17+00:00 | Vulnerability · Source |
| CVE-2019-9451 | redhat_vex | kernel: out of bounds write due to missing bounds check in touchscreen driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:16+00:00 | Vulnerability · Source |
| CVE-2019-9450 | redhat_vex | kernel: memory corruption due to race condition in FingerTipS touchscreen driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:16+00:00 | Vulnerability · Source |
| CVE-2019-9447 | redhat_vex | kernel: use after free due to improper locking in FingerTipS touchscreen driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:15+00:00 | Vulnerability · Source |
| CVE-2019-9449 | redhat_vex | kernel: out of bounds read due to missing bounds check in FingerTipS touchscreen driver leads to local information disclosure | known not affected: 104 | 2026-06-28T07:30:15+00:00 | Vulnerability · Source |
| CVE-2019-9446 | redhat_vex | kernel: out of bounds write due to improper input validation in FingerTipS touchscreen driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:14+00:00 | Vulnerability · Source |
| CVE-2019-9444 | redhat_vex | kernel: kernel pointer leak in sync debug fs driver leads to local information disclosure | known not affected: 104 | 2026-06-28T07:30:14+00:00 | Vulnerability · Source |
| CVE-2019-9445 | redhat_vex | kernel: out of bounds read due to missing bounds check in F2FS driver leads to local information disclosure | known not affected: 104 | 2026-06-28T07:30:14+00:00 | Vulnerability · Source |
| CVE-2019-9441 | redhat_vex | kernel: out of bounds write due to improper input validation in mnh driver leads to privilege escalation | known not affected: 104 | 2026-06-28T07:30:13+00:00 | Vulnerability · Source |
| CVE-2019-9443 | redhat_vex | kernel: out of bounds write due to permission bypass in vl53L0 driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:13+00:00 | Vulnerability · Source |
| CVE-2019-9442 | redhat_vex | kernel: memory corruption due to use after free in mnh driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:13+00:00 | Vulnerability · Source |
| CVE-2019-9426 | redhat_vex | kernel: out of bounds write due to missing bounds check in Bluetooth leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:12+00:00 | Vulnerability · Source |
| CVE-2019-9276 | redhat_vex | kernel: out of bounds write due to use after free in synaptics_dsx_htc touchscreen driver leads to privilege escalation | known not affected: 104 | 2026-06-28T07:30:11+00:00 | Vulnerability · Source |
| CVE-2019-9275 | redhat_vex | kernel: use after free due to improper locking in mnh driver leads to privilege escalation | known not affected: 104 | 2026-06-28T07:30:11+00:00 | Vulnerability · Source |
| CVE-2019-9274 | redhat_vex | kernel: out of bounds write due to missing bounds check in mnh driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:10+00:00 | Vulnerability · Source |
| CVE-2019-9273 | redhat_vex | kernel: use after free due to improper locking in synaptics_dsx_htc touchscreen driver leads to local privilege escalation | known not affected: 104 | 2026-06-28T07:30:10+00:00 | Vulnerability · Source |
| CVE-2026-33533 | redhat_vex | Glances: Glances: Information disclosure via improper Cross-Origin Resource Sharing (CORS) configuration | known not affected: 1 | 2026-06-28T07:30:09+00:00 | Vulnerability · Source |
| CVE-2026-33515 | redhat_vex | Squid: Squid: Information disclosure via improper input validation in ICP traffic | known affected: 17 | 2026-06-28T07:30:08+00:00 | Vulnerability · Source |
| CVE-2026-33516 | redhat_vex | xrdp: xrdp: Denial of Service and Information Disclosure via specially crafted RDP message | known not affected: 1 | 2026-06-28T07:30:08+00:00 | Vulnerability · Source |