VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286376 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-16373 | redhat_vex | firefox: Information disclosure in the Privacy component in Firefox for Android | known not affected: 12 | 2026-07-27T09:24:34+00:00 | Vulnerability · Source |
| CVE-2026-16372 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Content Processes component | known not affected: 23 | 2026-07-27T09:24:34+00:00 | Vulnerability · Source |
| CVE-2026-16370 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Networking component | known affected: 6 known not affected: 12 | 2026-07-27T09:24:33+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-07-27T09:10:44+00:00 | Vulnerability · Source |
| CVE-2026-16411 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 153 | known not affected: 23 | 2026-07-27T08:58:51+00:00 | Vulnerability · Source |
| CVE-2026-16367 | redhat_vex | firefox: thunderbird: Sandbox escape due to invalid pointer in the Disability Access APIs component | known not affected: 23 | 2026-07-27T08:58:47+00:00 | Vulnerability · Source |
| CVE-2026-16365 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Workers component | known not affected: 23 | 2026-07-27T08:58:37+00:00 | Vulnerability · Source |
| CVE-2026-14241 | redhat_vex | firefox: Memory safety bugs fixed in Firefox 152.0.4 | known not affected: 12 | 2026-07-27T08:58:33+00:00 | Vulnerability · Source |
| CVE-2026-16364 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | known not affected: 18 | 2026-07-27T08:57:59+00:00 | Vulnerability · Source |
| CVE-2026-64452 | redhat_vex | kernel: 6lowpan: fix NHC entry use-after-free on error path | known affected: 156 known not affected: 119 | 2026-07-27T08:23:42+00:00 | Vulnerability · Source |
| CVE-2026-64354 | redhat_vex | kernel: bpf: Validate BTF repeated field counts before expansion | known affected: 184 known not affected: 90 | 2026-07-27T08:23:40+00:00 | Vulnerability · Source |
| CVE-2026-64285 | redhat_vex | kernel: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest | known not affected: 275 | 2026-07-27T08:17:04+00:00 | Vulnerability · Source |
| CVE-2026-9689 | redhat_vex | keycloak: org.keycloak.protocol.oidc: HTTP Parameter Pollution in OIDC redirect URI allows response parameter duplication - #GHI-604 | known affected: 1 | 2026-07-27T08:11:44+00:00 | Vulnerability · Source |
| CVE-2026-64342 | redhat_vex | kernel: USB: iowarrior: fix use-after-free on disconnect | known affected: 274 known not affected: 1 | 2026-07-27T08:01:56+00:00 | Vulnerability · Source |
| CVE-2026-64459 | redhat_vex | kernel: tcp: restore RCU grace period in tcp_ao_destroy_sock | known not affected: 275 | 2026-07-27T07:52:57+00:00 | Vulnerability · Source |
| CVE-2026-64314 | redhat_vex | kernel: crypto: chacha20poly1305 - validate poly1305 template argument | known not affected: 274 | 2026-07-27T07:52:48+00:00 | Vulnerability · Source |
| CVE-2026-64424 | redhat_vex | kernel: netpoll: fix a use-after-free on shutdown path | known affected: 274 known not affected: 1 | 2026-07-27T07:48:12+00:00 | Vulnerability · Source |
| CVE-2026-64431 | redhat_vex | kernel: ntfs: avoid calling post_write_mst_fixup() for invalid index_block | known not affected: 274 | 2026-07-27T07:42:23+00:00 | Vulnerability · Source |
| CVE-2026-64433 | redhat_vex | kernel: Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete | known affected: 184 known not affected: 91 | 2026-07-27T07:42:13+00:00 | Vulnerability · Source |
| CVE-2026-64277 | redhat_vex | kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count | known affected: 232 known not affected: 42 | 2026-07-27T07:36:58+00:00 | Vulnerability · Source |
| CVE-2026-64349 | redhat_vex | kernel: usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() | known not affected: 275 | 2026-07-27T07:32:37+00:00 | Vulnerability · Source |
| CVE-2026-64395 | redhat_vex | kernel: ksmbd: require source read access for duplicate extents | known not affected: 274 | 2026-07-27T07:27:17+00:00 | Vulnerability · Source |
| CVE-2026-64485 | redhat_vex | kernel: ALSA: compress: Fix task creation error unwind | known affected: 184 known not affected: 90 | 2026-07-27T07:27:13+00:00 | Vulnerability · Source |
| CVE-2026-64325 | redhat_vex | kernel: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon | known affected: 184 known not affected: 91 | 2026-07-27T07:27:09+00:00 | Vulnerability · Source |
| CVE-2026-64373 | redhat_vex | kernel: cpufreq: Fix hotplug-suspend race during reboot | known affected: 246 known not affected: 28 | 2026-07-27T07:27:08+00:00 | Vulnerability · Source |
| CVE-2026-64346 | redhat_vex | kernel: usb: gadget: udc: Fix use-after-free in gadget_match_driver | known affected: 184 known not affected: 90 | 2026-07-27T07:27:04+00:00 | Vulnerability · Source |
| CVE-2026-64378 | redhat_vex | kernel: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() | known affected: 232 known not affected: 28 under investigation: 14 | 2026-07-27T07:27:00+00:00 | Vulnerability · Source |
| CVE-2026-64362 | redhat_vex | kernel: HID: lg-g15: cancel pending work on remove to fix a use-after-free | known affected: 232 known not affected: 42 | 2026-07-27T07:26:59+00:00 | Vulnerability · Source |
| CVE-2026-64490 | redhat_vex | kernel: ALSA: virtio: Validate control metadata from the device | known affected: 184 known not affected: 90 | 2026-07-27T07:26:44+00:00 | Vulnerability · Source |
| CVE-2026-64442 | redhat_vex | kernel: staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() | known not affected: 274 | 2026-07-27T07:22:20+00:00 | Vulnerability · Source |
| CVE-2026-64350 | redhat_vex | kernel: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() | known not affected: 274 | 2026-07-27T07:22:16+00:00 | Vulnerability · Source |
| CVE-2026-64377 | redhat_vex | kernel: cpufreq: qcom-cpufreq-hw: Fix possible double free | known affected: 76 known not affected: 198 | 2026-07-27T07:22:08+00:00 | Vulnerability · Source |
| CVE-2026-65010 | redhat_vex | datasets: Datasets: Arbitrary file write via symlink following | known affected: 37 | 2026-07-27T07:22:02+00:00 | Vulnerability · Source |
| CVE-2026-64296 | redhat_vex | kernel: exfat: bound uniname advance in exfat_find_dir_entry() | known affected: 184 known not affected: 90 | 2026-07-27T07:21:57+00:00 | Vulnerability · Source |
| CVE-2026-65698 | redhat_vex | Void: Void: Sensitive file exfiltration via AI agent path traversal vulnerability | known affected: 104 known not affected: 1 | 2026-07-27T07:17:05+00:00 | Vulnerability · Source |
| CVE-2026-64437 | redhat_vex | kernel: ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL | known not affected: 275 | 2026-07-27T07:14:07+00:00 | Vulnerability · Source |
| CVE-2026-64406 | redhat_vex | kernel: Bluetooth: fix UAF in bt_accept_dequeue() | known affected: 90 known not affected: 185 | 2026-07-27T07:08:26+00:00 | Vulnerability · Source |
| CVE-2026-64393 | redhat_vex | kernel: ksmbd: run set info with opener credentials | known not affected: 275 | 2026-07-27T06:37:12+00:00 | Vulnerability · Source |
| CVE-2026-64479 | redhat_vex | kernel: ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() | known affected: 199 known not affected: 76 | 2026-07-27T06:32:37+00:00 | Vulnerability · Source |
| CVE-2026-64321 | redhat_vex | kernel: nvme: target: rdma: fix ndev refcount leak on queue connect | known affected: 184 known not affected: 91 | 2026-07-27T06:22:32+00:00 | Vulnerability · Source |
| CVE-2026-64397 | redhat_vex | kernel: ksmbd: serialize QUERY_DIRECTORY requests per file | known not affected: 275 | 2026-07-27T06:13:15+00:00 | Vulnerability · Source |
| CVE-2026-64261 | redhat_vex | kernel: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues | known not affected: 275 | 2026-07-27T06:08:53+00:00 | Vulnerability · Source |
| CVE-2026-64206 | redhat_vex | kernel: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | known affected: 232 known not affected: 42 | 2026-07-27T06:08:38+00:00 | Vulnerability · Source |
| CVE-2026-64191 | redhat_vex | kernel: i2c: stub: Reject I2C block transfers with invalid length | known affected: 260 known not affected: 14 | 2026-07-27T06:08:19+00:00 | Vulnerability · Source |
| CVE-2026-64351 | redhat_vex | kernel: net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() | known affected: 260 known not affected: 15 | 2026-07-27T06:02:43+00:00 | Vulnerability · Source |
| CVE-2026-64276 | redhat_vex | kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | known affected: 261 known not affected: 14 | 2026-07-27T06:02:38+00:00 | Vulnerability · Source |
| CVE-2024-48949 | redhat_vex | elliptic: Missing Validation in Elliptic's EDDSA Signature Verification | fixed: 750 known affected: 28 known not affected: 912 | 2026-07-27T04:49:23+00:00 | Vulnerability · Source |
| CVE-2026-25990 | redhat_vex | pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image | fixed: 128 known affected: 18 known not affected: 1559 | 2026-07-27T04:49:22+00:00 | Vulnerability · Source |
| CVE-2025-57809 | redhat_vex | xgrammar: XGrammar affected by Denial of Service by infinite recursion grammars | fixed: 12 known affected: 2 | 2026-07-27T04:49:21+00:00 | Vulnerability · Source |
| CVE-2024-21538 | redhat_vex | cross-spawn: regular expression denial of service | fixed: 139 known affected: 74 known not affected: 2799 | 2026-07-27T04:49:13+00:00 | Vulnerability · Source |