VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286443 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-4949 | redhat_vex | org.eclipse.jgit: XXE vulnerability in Eclipse JGit | fixed: 530 known affected: 10 known not affected: 365 | 2026-07-27T15:08:16+00:00 | Vulnerability · Source |
| CVE-2024-3884 | redhat_vex | undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded | fixed: 212 known affected: 4 known not affected: 510 under investigation: 14 | 2026-07-27T15:08:10+00:00 | Vulnerability · Source |
| CVE-2025-26696 | redhat_vex | thunderbird: Crafted email message incorrectly shown as being encrypted | fixed: 118 known affected: 8 | 2026-07-27T15:07:57+00:00 | Vulnerability · Source |
| CVE-2026-64380 | microsoft_vex | smb: client: harden POSIX SID length parsing | known affected: 1 | 2026-07-27T14:51:47+00:00 | Vulnerability · Source |
| CVE-2026-64512 | microsoft_vex | ACPI: CPPC: Suppress UBSAN warning caused by field misuse | known affected: 1 | 2026-07-27T14:51:42+00:00 | Vulnerability · Source |
| CVE-2026-64389 | microsoft_vex | ksmbd: validate NTLMv2 response before updating session key | known affected: 1 | 2026-07-27T14:51:36+00:00 | Vulnerability · Source |
| CVE-2026-64363 | microsoft_vex | HID: appleir: fix UAF on pending key_up_timer in remove() | known affected: 1 | 2026-07-27T14:51:32+00:00 | Vulnerability · Source |
| CVE-2026-64503 | microsoft_vex | iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error | known affected: 1 | 2026-07-27T14:51:29+00:00 | Vulnerability · Source |
| CVE-2026-64373 | microsoft_vex | cpufreq: Fix hotplug-suspend race during reboot | known affected: 1 | 2026-07-27T14:51:26+00:00 | Vulnerability · Source |
| CVE-2026-64269 | microsoft_vex | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | known affected: 1 | 2026-07-27T14:51:23+00:00 | Vulnerability · Source |
| CVE-2026-64392 | microsoft_vex | ksmbd: use opener credentials for delete-on-close | known affected: 1 | 2026-07-27T14:51:20+00:00 | Vulnerability · Source |
| CVE-2026-64371 | microsoft_vex | proc: protect ptrace_may_access() with exec_update_lock (part 1) | known affected: 1 | 2026-07-27T14:51:17+00:00 | Vulnerability · Source |
| CVE-2026-64434 | microsoft_vex | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref | known affected: 1 | 2026-07-27T14:51:14+00:00 | Vulnerability · Source |
| CVE-2026-64376 | microsoft_vex | firmware_loader: fix device reference leak in firmware_upload_register() | known affected: 1 | 2026-07-27T14:51:11+00:00 | Vulnerability · Source |
| CVE-2026-64483 | microsoft_vex | ALSA: firewire: isight: bound the sample count to the packet payload | known affected: 1 | 2026-07-27T14:51:08+00:00 | Vulnerability · Source |
| CVE-2026-64445 | microsoft_vex | staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() | known affected: 1 | 2026-07-27T14:51:05+00:00 | Vulnerability · Source |
| CVE-2026-64337 | microsoft_vex | usb: mtu3: unmap request DMA on queue failure | known affected: 1 | 2026-07-27T14:51:02+00:00 | Vulnerability · Source |
| CVE-2026-64390 | microsoft_vex | ksmbd: track the connection owning a byte-range lock | known affected: 1 | 2026-07-27T14:50:58+00:00 | Vulnerability · Source |
| CVE-2026-64406 | microsoft_vex | Bluetooth: fix UAF in bt_accept_dequeue() | known affected: 1 | 2026-07-27T14:50:55+00:00 | Vulnerability · Source |
| CVE-2026-64345 | microsoft_vex | usb: gadget: f_printer: take kref only for successful open | known affected: 1 | 2026-07-27T14:50:52+00:00 | Vulnerability · Source |
| CVE-2026-64487 | microsoft_vex | ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser | known affected: 1 | 2026-07-27T14:50:49+00:00 | Vulnerability · Source |
| CVE-2026-64397 | microsoft_vex | ksmbd: serialize QUERY_DIRECTORY requests per file | known affected: 1 | 2026-07-27T14:50:46+00:00 | Vulnerability · Source |
| CVE-2026-64304 | microsoft_vex | crypto: qat - validate RSA CRT component lengths | known affected: 1 | 2026-07-27T14:50:43+00:00 | Vulnerability · Source |
| CVE-2026-64361 | microsoft_vex | hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length | known affected: 1 | 2026-07-27T14:50:40+00:00 | Vulnerability · Source |
| CVE-2026-64412 | microsoft_vex | netfilter: ebtables: module names must be null-terminated | known affected: 1 | 2026-07-27T14:50:37+00:00 | Vulnerability · Source |
| CVE-2026-64446 | microsoft_vex | staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() | known affected: 1 | 2026-07-27T14:50:33+00:00 | Vulnerability · Source |
| CVE-2026-64387 | microsoft_vex | smb: client: fix query directory replay double-free | known affected: 1 | 2026-07-27T14:50:31+00:00 | Vulnerability · Source |
| CVE-2026-64279 | microsoft_vex | i2c: core: fix adapter deregistration race | known affected: 1 | 2026-07-27T14:50:26+00:00 | Vulnerability · Source |
| CVE-2026-64320 | microsoft_vex | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | known affected: 1 | 2026-07-27T14:50:24+00:00 | Vulnerability · Source |
| CVE-2026-64437 | microsoft_vex | ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL | known affected: 1 | 2026-07-27T14:50:20+00:00 | Vulnerability · Source |
| CVE-2026-64409 | microsoft_vex | Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() | known affected: 1 | 2026-07-27T14:50:18+00:00 | Vulnerability · Source |
| CVE-2026-64507 | microsoft_vex | x86/bugs: Enable IBPB flush on BPF JIT allocation | known affected: 1 | 2026-07-27T14:50:13+00:00 | Vulnerability · Source |
| CVE-2026-64306 | microsoft_vex | crypto: drbg - Fix returning success on failure in CTR_DRBG | known affected: 1 | 2026-07-27T14:50:11+00:00 | Vulnerability · Source |
| CVE-2026-64399 | microsoft_vex | ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE | known affected: 1 | 2026-07-27T14:50:07+00:00 | Vulnerability · Source |
| CVE-2026-64338 | microsoft_vex | USB: misc: uss720: unregister parport on probe failure | known affected: 1 | 2026-07-27T14:50:05+00:00 | Vulnerability · Source |
| CVE-2026-64504 | microsoft_vex | iio: accel: bmc150: clamp the device-reported FIFO frame count | known affected: 1 | 2026-07-27T14:49:53+00:00 | Vulnerability · Source |
| CVE-2026-64525 | microsoft_vex | xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit | known affected: 1 | 2026-07-27T14:49:52+00:00 | Vulnerability · Source |
| CVE-2026-64419 | microsoft_vex | mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() | known affected: 1 | 2026-07-27T14:49:47+00:00 | Vulnerability · Source |
| CVE-2026-64358 | microsoft_vex | media: mtk-jpeg: cancel workqueue on release for supported platforms only | known affected: 1 | 2026-07-27T14:49:46+00:00 | Vulnerability · Source |
| CVE-2026-64476 | microsoft_vex | vfio/pci: Latch disable_idle_d3 per device | known affected: 1 | 2026-07-27T14:49:41+00:00 | Vulnerability · Source |
| CVE-2026-64268 | microsoft_vex | RDMA/siw: bound Read Response placement to the RREAD length | known affected: 1 | 2026-07-27T14:49:39+00:00 | Vulnerability · Source |
| CVE-2026-64374 | microsoft_vex | sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | known affected: 1 | 2026-07-27T14:49:34+00:00 | Vulnerability · Source |
| CVE-2026-64348 | microsoft_vex | usb: free iso schedules on failed submit | known affected: 1 | 2026-07-27T14:49:33+00:00 | Vulnerability · Source |
| CVE-2026-64341 | microsoft_vex | USB: iowarrior: fix use-after-free on disconnect race | known affected: 1 | 2026-07-27T14:49:28+00:00 | Vulnerability · Source |
| CVE-2026-64340 | microsoft_vex | USB: legousbtower: fix use-after-free on disconnect race | known affected: 1 | 2026-07-27T14:49:27+00:00 | Vulnerability · Source |
| CVE-2026-64505 | microsoft_vex | usb: gadget: function: rndis: add length check for header | known affected: 1 | 2026-07-27T14:49:22+00:00 | Vulnerability · Source |
| CVE-2026-64408 | microsoft_vex | Bluetooth: bnep: pin L2CAP connection during netdev registration | known affected: 1 | 2026-07-27T14:49:21+00:00 | Vulnerability · Source |
| CVE-2026-64316 | microsoft_vex | crypto: caam - use print_hex_dump_devel to guard key hex dumps | known affected: 1 | 2026-07-27T14:49:16+00:00 | Vulnerability · Source |
| CVE-2026-64462 | microsoft_vex | PCI: altera: Fix resource leaks on probe failure | known affected: 1 | 2026-07-27T14:49:14+00:00 | Vulnerability · Source |
| CVE-2026-64425 | microsoft_vex | io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | known affected: 1 | 2026-07-27T14:49:09+00:00 | Vulnerability · Source |