VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303573 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97995 | redhat_vex | kernel: virtio_console: do not free control-out buffers on remove | known affected: 248 known not affected: 28 | 2026-09-30T10:28:48+00:00 | Vulnerability · Source |
| CVE-2026-97994 | redhat_vex | kernel: vhost/vdpa: reject VRING_NUM larger than device max | known affected: 234 known not affected: 42 | 2026-09-30T10:28:46+00:00 | Vulnerability · Source |
| CVE-2026-93981 | redhat_vex | hono: hono/jsx: Cross-Site Scripting via Unescaped Strings | fixed: 9 known affected: 8 | 2026-09-30T10:26:15+00:00 | Vulnerability · Source |
| CVE-2026-97688 | redhat_vex | urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding | fixed: 11 known not affected: 14 | 2026-09-30T10:23:18+00:00 | Vulnerability · Source |
| CVE-2026-75886 | redhat_vex | openshift/console: openshift/console: Unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding | fixed: 16 known not affected: 2596 | 2026-09-30T10:19:41+00:00 | Vulnerability · Source |
| CVE-2026-55204 | redhat_vex | haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions | fixed: 138 known affected: 16 known not affected: 2602 | 2026-09-30T10:19:15+00:00 | Vulnerability · Source |
| CVE-2026-42151 | redhat_vex | github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API | fixed: 510 known affected: 49 known not affected: 5650 | 2026-09-30T10:19:09+00:00 | Vulnerability · Source |
| CVE-2026-30922 | redhat_vex | pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion | fixed: 1724 known affected: 26 known not affected: 2541 | 2026-09-30T10:15:53+00:00 | Vulnerability · Source |
| CVE-2026-97689 | redhat_vex | urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | fixed: 11 known not affected: 14 | 2026-09-30T10:12:20+00:00 | Vulnerability · Source |
| CVE-2026-97687 | redhat_vex | urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override | fixed: 11 known not affected: 14 | 2026-09-30T10:12:15+00:00 | Vulnerability · Source |
| CVE-2026-92948 | redhat_vex | vm2: vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test | known affected: 5 | 2026-09-30T10:12:09+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1897 known affected: 95 known not affected: 8869 | 2026-09-30T10:09:10+00:00 | Vulnerability · Source |
| CVE-2026-39820 | redhat_vex | net/mail: golang: Go net/mail: Denial of Service via crafted email inputs | fixed: 1439 known affected: 85 known not affected: 7831 | 2026-09-30T10:08:55+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-09-30T10:02:00+00:00 | Vulnerability · Source |
| CVE-2026-97992 | redhat_vex | kernel: vhost-vdpa: protect config_ctx from being freed under the config callback | known affected: 234 known not affected: 42 | 2026-09-30T09:49:43+00:00 | Vulnerability · Source |
| CVE-2026-97500 | redhat_vex | kernel: wifi: rtw89: phy: check length before parsing PHY status IE | known affected: 234 known not affected: 42 | 2026-09-30T09:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97499 | redhat_vex | kernel: coresight: perf: Retrieve path and source from event data | known not affected: 276 | 2026-09-30T09:49:22+00:00 | Vulnerability · Source |
| CVE-2026-93130 | redhat_vex | kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure | known affected: 185 known not affected: 91 | 2026-09-30T09:18:08+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known not affected: 1 | 2026-09-30T09:18:07+00:00 | Vulnerability · Source |
| CVE-2026-92524 | redhat_vex | kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() | known affected: 234 known not affected: 42 | 2026-09-30T09:18:06+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known not affected: 1 | 2026-09-30T09:14:48+00:00 | Vulnerability · Source |
| CVE-2026-97990 | redhat_vex | kernel: vdpa_sim_net: check TX pull result before RX copy | known affected: 185 known not affected: 91 | 2026-09-30T09:14:45+00:00 | Vulnerability · Source |
| CVE-2026-97498 | redhat_vex | kernel: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction | known affected: 14 known not affected: 262 | 2026-09-30T09:14:39+00:00 | Vulnerability · Source |
| CVE-2026-97497 | redhat_vex | kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id | known affected: 247 known not affected: 29 | 2026-09-30T09:14:35+00:00 | Vulnerability · Source |
| CVE-2026-90407 | redhat_vex | kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() | known affected: 234 known not affected: 42 | 2026-09-30T09:14:33+00:00 | Vulnerability · Source |
| CVE-2026-100666 | redhat_vex | io.netty/netty-codec-http: Netty: HTTP response desynchronization via HttpServerCodec | known affected: 46 known not affected: 7 | 2026-09-30T09:14:29+00:00 | Vulnerability · Source |
| CVE-2026-97991 | redhat_vex | kernel: vdpa_sim_blk: reject out-of-range sector starts | known affected: 234 known not affected: 42 | 2026-09-30T09:14:27+00:00 | Vulnerability · Source |
| CVE-2026-79921 | redhat_vex | github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via oversized AMQP payloads | fixed: 44 known affected: 4 known not affected: 51 | 2026-09-30T09:14:06+00:00 | Vulnerability · Source |
| CVE-2026-97989 | redhat_vex | kernel: vduse: validate virtqueue alignment | known affected: 183 known not affected: 93 | 2026-09-30T08:53:33+00:00 | Vulnerability · Source |
| CVE-2026-92494 | redhat_vex | kernel: ext4: fix buffer_head leak in ext4_init_orphan_info | known affected: 185 known not affected: 91 | 2026-09-30T08:53:32+00:00 | Vulnerability · Source |
| CVE-2026-54875 | redhat_vex | openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V | known affected: 87 known not affected: 1 | 2026-09-30T08:51:44+00:00 | Vulnerability · Source |
| CVE-2026-95320 | redhat_vex | chromium-browser: chromium: Address bar spoofing via missing authorization in Navigation | known not affected: 1 | 2026-09-30T08:51:08+00:00 | Vulnerability · Source |
| CVE-2026-102633 | redhat_vex | expat: expat: Denial of Service via integer overflow in expat_realloc | known affected: 44 known not affected: 1 | 2026-09-30T08:40:22+00:00 | Vulnerability · Source |
| CVE-2026-97988 | redhat_vex | kernel: vhost: invalidate vring access on IOTLB transitions | known affected: 276 | 2026-09-30T08:40:21+00:00 | Vulnerability · Source |
| CVE-2026-97987 | redhat_vex | kernel: virtio_input: reset device if input_register_device() fails | known affected: 262 known not affected: 14 | 2026-09-30T08:40:14+00:00 | Vulnerability · Source |
| CVE-2026-97986 | redhat_vex | kernel: virtio_input: stop callbacks before unregistering input device | known affected: 262 known not affected: 14 | 2026-09-30T08:40:11+00:00 | Vulnerability · Source |
| CVE-2026-97495 | redhat_vex | kernel: drm/amdkfd: Check bounds on allocate_doorbell | known affected: 247 known not affected: 29 | 2026-09-30T08:40:08+00:00 | Vulnerability · Source |
| CVE-2026-97494 | redhat_vex | kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw | known affected: 248 known not affected: 28 | 2026-09-30T08:40:00+00:00 | Vulnerability · Source |
| CVE-2026-95380 | redhat_vex | chromium-browser: chromium: type confusion in V8 | known not affected: 1 | 2026-09-30T08:38:45+00:00 | Vulnerability · Source |
| CVE-2026-89846 | redhat_vex | kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read | fixed: 762 known affected: 66 | 2026-09-30T08:38:17+00:00 | Vulnerability · Source |
| CVE-2026-68162 | redhat_vex | kernel: sctp: avoid auth_enable sysctl UAF during netns teardown | known affected: 185 known not affected: 90 | 2026-09-30T08:38:01+00:00 | Vulnerability · Source |
| CVE-2026-43133 | redhat_vex | kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation | fixed: 766 known affected: 23 known not affected: 43 | 2026-09-30T08:37:04+00:00 | Vulnerability · Source |
| CVE-2026-43114 | redhat_vex | kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | fixed: 1483 known affected: 99 known not affected: 91 | 2026-09-30T08:36:55+00:00 | Vulnerability · Source |
| CVE-2026-102582 | redhat_vex | moodle: Manual enrolment page accessible when plugin disabled | known not affected: 1 | 2026-09-30T08:20:32+00:00 | Vulnerability · Source |
| CVE-2026-102587 | redhat_vex | moodle: User list filters bypass profile field visibility | known not affected: 1 | 2026-09-30T08:20:27+00:00 | Vulnerability · Source |
| CVE-2026-102583 | redhat_vex | moodle: Incorrect capability check in AI generate image web service | known not affected: 1 | 2026-09-30T08:20:27+00:00 | Vulnerability · Source |
| CVE-2026-102580 | redhat_vex | moodle: Arbitrary class instantiation via report builder audience classname | known not affected: 1 | 2026-09-30T08:20:26+00:00 | Vulnerability · Source |
| CVE-2026-97985 | redhat_vex | kernel: af_unix: Update last skb marker in manage_oob() | known affected: 90 known not affected: 186 | 2026-09-30T08:20:26+00:00 | Vulnerability · Source |
| CVE-2026-97984 | redhat_vex | kernel: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU | known affected: 90 known not affected: 186 | 2026-09-30T08:20:25+00:00 | Vulnerability · Source |
| CVE-2026-102586 | redhat_vex | moodle: XSS via password reset link due to insufficient username escaping | known not affected: 1 | 2026-09-30T08:13:09+00:00 | Vulnerability · Source |