VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299384 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43228 | microsoft_vex | hfs: Replace BUG_ON with error handling for CNID count checks | known not affected: 1 | 2026-05-19T01:46:13+00:00 | Vulnerability · Source |
| CVE-2026-43213 | microsoft_vex | wifi: rtw89: pci: validate sequence number of TX release report | known affected: 2 known not affected: 1 | 2026-05-19T01:46:06+00:00 | Vulnerability · Source |
| CVE-2025-71272 | microsoft_vex | most: core: fix resource leak in most_register_interface error paths | known affected: 2 known not affected: 1 | 2026-05-19T01:46:01+00:00 | Vulnerability · Source |
| CVE-2026-43219 | microsoft_vex | net: cpsw_new: Fix potential unregister of netdev that has not been registered yet | known affected: 2 known not affected: 1 | 2026-05-19T01:45:55+00:00 | Vulnerability · Source |
| CVE-2026-43185 | microsoft_vex | ksmbd: fix signededness bug in smb_direct_prepare_negotiation() | known affected: 2 known not affected: 1 | 2026-05-19T01:45:49+00:00 | Vulnerability · Source |
| CVE-2026-43115 | microsoft_vex | srcu: Use irq_work to start GP in tiny SRCU | known affected: 2 known not affected: 1 | 2026-05-19T01:45:44+00:00 | Vulnerability · Source |
| CVE-2026-43126 | microsoft_vex | ALSA: mixer: oss: Add card disconnect checkpoints | known affected: 2 known not affected: 1 | 2026-05-19T01:45:38+00:00 | Vulnerability · Source |
| CVE-2026-43204 | microsoft_vex | ASoC: qcom: q6asm: drop DSP responses for closed data streams | known affected: 2 known not affected: 1 | 2026-05-19T01:45:32+00:00 | Vulnerability · Source |
| CVE-2026-6210 | microsoft_vex | Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash | known not affected: 1 | 2026-05-19T01:45:29+00:00 | Vulnerability · Source |
| CVE-2026-43176 | microsoft_vex | wifi: rtw89: pci: validate release report content before using for RTL8922DE | known not affected: 1 | 2026-05-19T01:45:24+00:00 | Vulnerability · Source |
| CVE-2026-40170 | microsoft_vex | ngtcp2 has a qlog transport parameter serialization stack buffer overflow | known not affected: 2 under investigation: 1 | 2026-05-19T01:44:38+00:00 | Vulnerability · Source |
| CVE-2025-8224 | microsoft_vex | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | known affected: 1 known not affected: 4 under investigation: 1 | 2026-05-19T01:42:54+00:00 | Vulnerability · Source |
| CVE-2026-43058 | microsoft_vex | media: vidtv: fix pass-by-value structs causing MSAN warnings | known not affected: 1 | 2026-05-19T01:42:25+00:00 | Vulnerability · Source |
| CVE-2026-31702 | microsoft_vex | f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() | known not affected: 1 | 2026-05-19T01:42:17+00:00 | Vulnerability · Source |
| CVE-2026-31704 | microsoft_vex | ksmbd: use check_add_overflow() to prevent u16 DACL size overflow | known not affected: 1 | 2026-05-19T01:42:08+00:00 | Vulnerability · Source |
| CVE-2026-31721 | microsoft_vex | usb: gadget: f_hid: move list and spinlock inits from bind to alloc | known not affected: 1 | 2026-05-19T01:41:59+00:00 | Vulnerability · Source |
| CVE-2026-31715 | microsoft_vex | f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() | known affected: 3 known not affected: 1 | 2026-05-19T01:41:52+00:00 | Vulnerability · Source |
| CVE-2026-31729 | microsoft_vex | usb: typec: ucsi: validate connector number in ucsi_notify_common() | known affected: 3 known not affected: 1 | 2026-05-19T01:41:45+00:00 | Vulnerability · Source |
| CVE-2026-31725 | microsoft_vex | usb: gadget: f_ecm: Fix net_device lifecycle with device_move | known affected: 3 known not affected: 1 | 2026-05-19T01:41:31+00:00 | Vulnerability · Source |
| CVE-2026-31722 | microsoft_vex | usb: gadget: f_rndis: Fix net_device lifecycle with device_move | known affected: 3 known not affected: 1 | 2026-05-19T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-31777 | microsoft_vex | ALSA: ctxfi: Check the error for index mapping | known affected: 3 known not affected: 1 | 2026-05-19T01:41:16+00:00 | Vulnerability · Source |
| CVE-2026-31724 | microsoft_vex | usb: gadget: f_eem: Fix net_device lifecycle with device_move | known affected: 3 known not affected: 1 | 2026-05-19T01:41:08+00:00 | Vulnerability · Source |
| CVE-2026-31723 | microsoft_vex | usb: gadget: f_subset: Fix net_device lifecycle with device_move | known affected: 3 known not affected: 1 | 2026-05-19T01:41:00+00:00 | Vulnerability · Source |
| CVE-2026-41604 | microsoft_vex | Apache Thrift: Swift Range crash in skip() | fixed: 1 known affected: 2 | 2026-05-19T01:40:12+00:00 | Vulnerability · Source |
| CVE-2026-42246 | microsoft_vex | net-imap vulnerable to STARTTLS stripping via invalid response timing | known not affected: 1 | 2026-05-19T01:40:10+00:00 | Vulnerability · Source |
| CVE-2026-42256 | microsoft_vex | net-imap: Denial of service via high iteration count for `SCRAM-*` authentication | known not affected: 1 | 2026-05-19T01:40:04+00:00 | Vulnerability · Source |
| CVE-2026-42258 | microsoft_vex | net-imap: Command Injection via unvalidated Symbol inputs | known not affected: 1 | 2026-05-19T01:39:56+00:00 | Vulnerability · Source |
| CVE-2026-42257 | microsoft_vex | net-imap: Command Injection via "raw" arguments to multiple commands | known not affected: 1 | 2026-05-19T01:39:48+00:00 | Vulnerability · Source |
| CVE-2026-37459 | microsoft_vex | An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. | fixed: 1 known affected: 1 | 2026-05-19T01:39:27+00:00 | Vulnerability · Source |
| CVE-2026-37458 | microsoft_vex | Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message. | fixed: 1 known affected: 1 | 2026-05-19T01:39:20+00:00 | Vulnerability · Source |
| CVE-2026-43421 | microsoft_vex | usb: gadget: f_ncm: Fix net_device lifecycle with device_move | known not affected: 1 under investigation: 2 | 2026-05-19T01:39:13+00:00 | Vulnerability · Source |
| CVE-2026-43353 | microsoft_vex | i3c: mipi-i3c-hci: Fix race in DMA ring dequeue | known affected: 1 known not affected: 1 under investigation: 1 | 2026-05-19T01:39:05+00:00 | Vulnerability · Source |
| CVE-2026-43310 | microsoft_vex | media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC | known affected: 2 known not affected: 1 | 2026-05-19T01:38:58+00:00 | Vulnerability · Source |
| CVE-2026-43317 | microsoft_vex | most: core: fix leak on early registration failure | known not affected: 1 under investigation: 2 | 2026-05-19T01:38:48+00:00 | Vulnerability · Source |
| CVE-2026-6473 | microsoft_vex | PostgreSQL server undersizes allocations, via integer wraparound | fixed: 1 known affected: 1 known not affected: 1 | 2026-05-19T01:02:09+00:00 | Vulnerability · Source |
| CVE-2026-6477 | microsoft_vex | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | fixed: 1 known affected: 1 known not affected: 1 | 2026-05-19T01:02:03+00:00 | Vulnerability · Source |
| CVE-2025-0665 | microsoft_vex | eventfd double close | fixed: 1 known affected: 1 known not affected: 7 | 2026-05-19T01:01:31+00:00 | Vulnerability · Source |
| CVE-2026-8741 | redhat_vex | EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition | known not affected: 1 | 2026-05-18T19:59:07+00:00 | Vulnerability · Source |
| CVE-2026-8744 | redhat_vex | Open5GS NRF context.c ogs_sbi_nf_service_add denial of service | known not affected: 1 | 2026-05-18T19:59:05+00:00 | Vulnerability · Source |
| CVE-2026-8743 | redhat_vex | Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization | known not affected: 1 | 2026-05-18T19:59:04+00:00 | Vulnerability · Source |
| CVE-2026-8736 | redhat_vex | Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal | known not affected: 1 | 2026-05-18T19:59:02+00:00 | Vulnerability · Source |
| CVE-2026-8735 | redhat_vex | Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserialization | known not affected: 1 | 2026-05-18T19:59:02+00:00 | Vulnerability · Source |
| CVE-2026-8730 | redhat_vex | Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service | known not affected: 1 | 2026-05-18T19:59:01+00:00 | Vulnerability · Source |
| CVE-2026-8729 | redhat_vex | Open5GS NRF message.c denial of service | known not affected: 1 | 2026-05-18T19:59:01+00:00 | Vulnerability · Source |
| CVE-2025-67031 | redhat_vex | CVE-2025-67031 | known not affected: 1 | 2026-05-18T19:59:00+00:00 | Vulnerability · Source |
| CVE-2026-8728 | redhat_vex | Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service | known not affected: 1 | 2026-05-18T19:59:00+00:00 | Vulnerability · Source |
| CVE-2026-8724 | redhat_vex | Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection | known not affected: 1 | 2026-05-18T19:58:59+00:00 | Vulnerability · Source |
| CVE-2026-8656 | redhat_vex | CVE-2026-8656 | known not affected: 1 | 2026-05-18T19:58:58+00:00 | Vulnerability · Source |
| CVE-2026-45316 | redhat_vex | Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access) | known not affected: 1 | 2026-05-18T19:58:57+00:00 | Vulnerability · Source |
| CVE-2026-46474 | redhat_vex | Trog::TOTP versions before 1.006 for Perl generate secrets using rand | known not affected: 1 | 2026-05-18T19:58:57+00:00 | Vulnerability · Source |