VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64397 | redhat_vex | kernel: ksmbd: serialize QUERY_DIRECTORY requests per file | known not affected: 275 | 2026-07-27T06:13:15+00:00 | Vulnerability · Source |
| CVE-2026-64261 | redhat_vex | kernel: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues | known not affected: 275 | 2026-07-27T06:08:53+00:00 | Vulnerability · Source |
| CVE-2026-64206 | redhat_vex | kernel: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | known affected: 232 known not affected: 42 | 2026-07-27T06:08:38+00:00 | Vulnerability · Source |
| CVE-2026-64191 | redhat_vex | kernel: i2c: stub: Reject I2C block transfers with invalid length | known affected: 260 known not affected: 14 | 2026-07-27T06:08:19+00:00 | Vulnerability · Source |
| CVE-2026-64351 | redhat_vex | kernel: net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() | known affected: 260 known not affected: 15 | 2026-07-27T06:02:43+00:00 | Vulnerability · Source |
| CVE-2026-64276 | redhat_vex | kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | known affected: 261 known not affected: 14 | 2026-07-27T06:02:38+00:00 | Vulnerability · Source |
| CVE-2024-48949 | redhat_vex | elliptic: Missing Validation in Elliptic's EDDSA Signature Verification | fixed: 750 known affected: 28 known not affected: 912 | 2026-07-27T04:49:23+00:00 | Vulnerability · Source |
| CVE-2026-25990 | redhat_vex | pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image | fixed: 128 known affected: 18 known not affected: 1559 | 2026-07-27T04:49:22+00:00 | Vulnerability · Source |
| CVE-2025-57809 | redhat_vex | xgrammar: XGrammar affected by Denial of Service by infinite recursion grammars | fixed: 12 known affected: 2 | 2026-07-27T04:49:21+00:00 | Vulnerability · Source |
| CVE-2024-21538 | redhat_vex | cross-spawn: regular expression denial of service | fixed: 139 known affected: 74 known not affected: 2799 | 2026-07-27T04:49:13+00:00 | Vulnerability · Source |
| CVE-2026-4046 | redhat_vex | glibc: glibc: Denial of Service via iconv() function with specific character sets | fixed: 3045 known affected: 22 known not affected: 2 under investigation: 1 | 2026-07-27T04:49:10+00:00 | Vulnerability · Source |
| CVE-2026-41636 | redhat_vex | apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion | fixed: 20 known affected: 17 known not affected: 253 | 2026-07-27T04:49:07+00:00 | Vulnerability · Source |
| CVE-2024-12085 | redhat_vex | rsync: Info Leak via Uninitialized Stack Contents | fixed: 293 known not affected: 1782 | 2026-07-27T04:49:00+00:00 | Vulnerability · Source |
| CVE-2026-0861 | redhat_vex | glibc: Integer overflow in memalign leads to heap corruption | fixed: 1026 known affected: 1 known not affected: 1243 | 2026-07-27T04:48:52+00:00 | Vulnerability · Source |
| CVE-2026-33219 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via unbounded memory use in WebSockets | fixed: 12 known not affected: 52 | 2026-07-27T04:48:49+00:00 | Vulnerability · Source |
| CVE-2026-27889 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame | fixed: 12 known not affected: 52 | 2026-07-27T04:48:13+00:00 | Vulnerability · Source |
| CVE-2026-34040 | redhat_vex | Moby: Moby: Authorization bypass vulnerability | fixed: 16 known affected: 5 known not affected: 77 | 2026-07-27T04:48:10+00:00 | Vulnerability · Source |
| CVE-2026-22795 | redhat_vex | openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:56+00:00 | Vulnerability · Source |
| CVE-2026-23490 | redhat_vex | pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID | fixed: 1855 known affected: 25 known not affected: 6295 | 2026-07-27T04:47:55+00:00 | Vulnerability · Source |
| CVE-2025-66199 | redhat_vex | openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression | fixed: 107 known affected: 1 known not affected: 62 | 2026-07-27T04:47:52+00:00 | Vulnerability · Source |
| CVE-2025-69420 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed TimeStamp Response | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:50+00:00 | Vulnerability · Source |
| CVE-2025-68160 | redhat_vex | openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:48+00:00 | Vulnerability · Source |
| CVE-2025-15468 | redhat_vex | openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:46+00:00 | Vulnerability · Source |
| CVE-2025-69418 | redhat_vex | openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:47:43+00:00 | Vulnerability · Source |
| CVE-2026-4437 | redhat_vex | glibc: glibc: Incorrect DNS response parsing via crafted DNS server response | fixed: 2028 known affected: 237 known not affected: 2 under investigation: 1 | 2026-07-27T04:47:41+00:00 | Vulnerability · Source |
| CVE-2025-15281 | redhat_vex | glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory | fixed: 2043 known affected: 22 known not affected: 1007 | 2026-07-27T04:47:04+00:00 | Vulnerability · Source |
| CVE-2026-45445 | redhat_vex | openssl: AES-OCB IV Ignored on EVP_Cipher() Path | fixed: 104 known affected: 1 known not affected: 52 | 2026-07-27T04:46:09+00:00 | Vulnerability · Source |
| CVE-2024-45296 | redhat_vex | path-to-regexp: Backtracking regular expressions cause ReDoS | fixed: 869 known affected: 39 known not affected: 2095 | 2026-07-27T04:45:29+00:00 | Vulnerability · Source |
| CVE-2025-68664 | redhat_vex | langchain-core: LangChain: Arbitrary code execution via serialization injection | fixed: 18 known not affected: 254 | 2026-07-27T04:45:23+00:00 | Vulnerability · Source |
| CVE-2024-11831 | redhat_vex | npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript | fixed: 1160 known affected: 130 known not affected: 1593 | 2026-07-27T04:44:58+00:00 | Vulnerability · Source |
| CVE-2026-40938 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands | fixed: 65 known affected: 27 known not affected: 205 | 2026-07-27T04:44:53+00:00 | Vulnerability · Source |
| CVE-2026-10732 | redhat_vex | decompress: Decompress: Arbitrary file write leading to remote code execution via crafted ZIP archive (Zip Slip) | known affected: 5 known not affected: 17 | 2026-07-27T04:44:50+00:00 | Vulnerability · Source |
| CVE-2026-40192 | redhat_vex | Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing | fixed: 150 known affected: 25 known not affected: 1573 | 2026-07-27T04:44:39+00:00 | Vulnerability · Source |
| CVE-2026-9798 | redhat_vex | keycloak: Keycloak: Brute-force protection bypass in CIBA flow | known affected: 1 | 2026-07-27T04:44:27+00:00 | Vulnerability · Source |
| CVE-2024-24784 | redhat_vex | golang: net/mail: comments in display names are incorrectly handled | fixed: 1678 known affected: 56 known not affected: 714 | 2026-07-27T04:44:27+00:00 | Vulnerability · Source |
| CVE-2026-60190 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:23+00:00 | Vulnerability · Source |
| CVE-2026-60315 | redhat_vex | mysql: X Plugin unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:23+00:00 | Vulnerability · Source |
| CVE-2026-61096 | redhat_vex | mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:22+00:00 | Vulnerability · Source |
| CVE-2026-61081 | redhat_vex | mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:22+00:00 | Vulnerability · Source |
| CVE-2026-47012 | redhat_vex | mysql: Optimizer unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:21+00:00 | Vulnerability · Source |
| CVE-2026-60177 | redhat_vex | mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:20+00:00 | Vulnerability · Source |
| CVE-2026-61094 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:20+00:00 | Vulnerability · Source |
| CVE-2026-60747 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Jul 2026) | known affected: 32 known not affected: 9 | 2026-07-27T04:44:18+00:00 | Vulnerability · Source |
| CVE-2026-60195 | redhat_vex | mysql: JSON Duality unspecified vulnerability (CPU Jul 2026) | known not affected: 41 | 2026-07-27T04:44:18+00:00 | Vulnerability · Source |
| CVE-2025-11143 | redhat_vex | org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing | fixed: 2 known affected: 33 known not affected: 2 | 2026-07-27T04:44:16+00:00 | Vulnerability · Source |
| CVE-2026-22796 | redhat_vex | openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:15+00:00 | Vulnerability · Source |
| CVE-2025-15469 | redhat_vex | openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:14+00:00 | Vulnerability · Source |
| CVE-2025-69421 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-27T04:44:13+00:00 | Vulnerability · Source |
| CVE-2024-47068 | redhat_vex | rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | fixed: 9 known affected: 6 known not affected: 118 | 2026-07-27T04:34:15+00:00 | Vulnerability · Source |
| CVE-2026-33413 | redhat_vex | etcd: etcd: Authorization bypass allows information disclosure and denial of service | fixed: 16 known affected: 5 known not affected: 56 | 2026-07-27T04:34:12+00:00 | Vulnerability · Source |