VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286444 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64440 | microsoft_vex | staging: rtl8723bs: fix OOB write in HT_caps_handler() | known affected: 1 | 2026-07-27T14:40:55+00:00 | Vulnerability · Source |
| CVE-2026-64329 | microsoft_vex | usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove | known affected: 1 | 2026-07-27T14:40:54+00:00 | Vulnerability · Source |
| CVE-2026-64449 | microsoft_vex | staging: vme_user: bound slave read/write to the kern_buf size | known affected: 1 | 2026-07-27T14:40:47+00:00 | Vulnerability · Source |
| CVE-2026-64332 | microsoft_vex | USB: ulpi: fix memory leak on registration failure | known affected: 1 | 2026-07-27T14:40:46+00:00 | Vulnerability · Source |
| CVE-2026-64456 | microsoft_vex | hwrng: virtio: clamp device-reported used.len at copy_data() | known affected: 1 | 2026-07-27T14:40:39+00:00 | Vulnerability · Source |
| CVE-2026-64393 | microsoft_vex | ksmbd: run set info with opener credentials | known affected: 1 | 2026-07-27T14:40:38+00:00 | Vulnerability · Source |
| CVE-2026-64365 | microsoft_vex | HID: letsketch: fix UAF on inrange_timer at driver unbind | known affected: 1 | 2026-07-27T14:40:31+00:00 | Vulnerability · Source |
| CVE-2026-64513 | microsoft_vex | KVM: x86: Unconditionally recompute CR8 intercept on PPR update | known affected: 1 | 2026-07-27T14:40:30+00:00 | Vulnerability · Source |
| CVE-2026-64342 | microsoft_vex | USB: iowarrior: fix use-after-free on disconnect | known affected: 1 | 2026-07-27T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-64370 | microsoft_vex | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | known affected: 1 | 2026-07-27T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-8092 | redhat_vex | firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 | fixed: 260 known affected: 8 | 2026-07-27T14:40:16+00:00 | Vulnerability · Source |
| CVE-2026-64508 | microsoft_vex | bpf: Support for hardening against JIT spraying | known affected: 1 | 2026-07-27T14:40:14+00:00 | Vulnerability · Source |
| CVE-2026-64359 | microsoft_vex | nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers | known affected: 1 | 2026-07-27T14:40:14+00:00 | Vulnerability · Source |
| CVE-2026-0603 | redhat_vex | org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection | fixed: 59 known affected: 5 known not affected: 331 | 2026-07-27T14:37:59+00:00 | Vulnerability · Source |
| CVE-2025-55163 | redhat_vex | netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability | fixed: 476 known affected: 31 known not affected: 577 | 2026-07-27T14:37:46+00:00 | Vulnerability · Source |
| CVE-2025-48913 | redhat_vex | org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability | fixed: 313 known not affected: 319 | 2026-07-27T14:37:37+00:00 | Vulnerability · Source |
| CVE-2025-12543 | redhat_vex | undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF | fixed: 204 known affected: 5 known not affected: 513 | 2026-07-27T14:37:23+00:00 | Vulnerability · Source |
| CVE-2025-9784 | redhat_vex | undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability | fixed: 204 known affected: 5 known not affected: 516 | 2026-07-27T14:37:15+00:00 | Vulnerability · Source |
| CVE-2024-2616 | redhat_vex | Mozilla: Improve handling of out-of-memory conditions in ICU | fixed: 256 known affected: 4 | 2026-07-27T14:36:38+00:00 | Vulnerability · Source |
| CVE-2026-41901 | redhat_vex | thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass | known affected: 2 known not affected: 3 | 2026-07-27T14:07:00+00:00 | Vulnerability · Source |
| CVE-2019-17594 | redhat_vex | ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c | fixed: 52 known affected: 13 | 2026-07-27T13:55:45+00:00 | Vulnerability · Source |
| CVE-2019-17595 | redhat_vex | ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c | fixed: 52 known affected: 13 | 2026-07-27T13:55:42+00:00 | Vulnerability · Source |
| CVE-2026-44186 | redhat_vex | httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server | fixed: 239 known affected: 15 | 2026-07-27T13:53:18+00:00 | Vulnerability · Source |
| CVE-2023-42669 | redhat_vex | samba: "rpcecho" development server allows denial of service via sleep() call on AD DC | fixed: 2860 known affected: 94 | 2026-07-27T13:49:45+00:00 | Vulnerability · Source |
| CVE-2023-4091 | redhat_vex | samba: SMB clients can truncate files with read-only permissions | fixed: 2860 known affected: 94 | 2026-07-27T13:49:41+00:00 | Vulnerability · Source |
| CVE-2023-3961 | redhat_vex | samba: smbd allows client access to unix domain sockets on the file system as root | fixed: 2860 known affected: 35 known not affected: 59 | 2026-07-27T13:49:28+00:00 | Vulnerability · Source |
| CVE-2026-10723 | redhat_vex | bind: bind9: Incorrect acceptance of NSEC3 records | known affected: 82 known not affected: 5 | 2026-07-27T13:27:02+00:00 | Vulnerability · Source |
| CVE-2026-11721 | redhat_vex | bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards | known affected: 82 known not affected: 5 | 2026-07-27T13:26:57+00:00 | Vulnerability · Source |
| CVE-2026-12617 | redhat_vex | bind: bind9: Record ordering based unexpected exit with CNAME or DNAME | known affected: 82 known not affected: 5 | 2026-07-27T13:22:22+00:00 | Vulnerability · Source |
| CVE-2026-13204 | redhat_vex | bind: bind9: Unexpected exit with NSEC and NSEC3 both present | known affected: 82 known not affected: 5 | 2026-07-27T13:22:12+00:00 | Vulnerability · Source |
| CVE-2025-15467 | redhat_vex | openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing | fixed: 307 known not affected: 218 | 2026-07-27T13:17:51+00:00 | Vulnerability · Source |
| CVE-2025-48431 | redhat_vex | Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests | fixed: 18 known affected: 20 known not affected: 595 | 2026-07-27T13:17:44+00:00 | Vulnerability · Source |
| CVE-2026-13321 | redhat_vex | bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | known affected: 82 known not affected: 5 | 2026-07-27T13:14:57+00:00 | Vulnerability · Source |
| CVE-2026-33211 | redhat_vex | Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver | fixed: 32 known affected: 27 known not affected: 457 | 2026-07-27T13:14:42+00:00 | Vulnerability · Source |
| CVE-2026-47086 | redhat_vex | cyrus-imapd: cyrus-imapd: Information disclosure via URLAUTH token bypass of Access Control Lists | known affected: 20 | 2026-07-27T13:09:55+00:00 | Vulnerability · Source |
| CVE-2026-41602 | redhat_vex | github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation | fixed: 48 known affected: 12 known not affected: 646 | 2026-07-27T13:09:24+00:00 | Vulnerability · Source |
| CVE-2026-41604 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability | fixed: 36 known affected: 14 known not affected: 438 | 2026-07-27T13:09:16+00:00 | Vulnerability · Source |
| CVE-2026-41603 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation | fixed: 36 known affected: 14 known not affected: 438 | 2026-07-27T13:09:14+00:00 | Vulnerability · Source |
| CVE-2026-4878 | redhat_vex | libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() | fixed: 363 known affected: 7 known not affected: 3 under investigation: 1 | 2026-07-27T13:09:01+00:00 | Vulnerability · Source |
| CVE-2026-9804 | redhat_vex | kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read | fixed: 14 known affected: 1 known not affected: 174 | 2026-07-27T13:08:57+00:00 | Vulnerability · Source |
| CVE-2026-7374 | redhat_vex | kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability | fixed: 23 known not affected: 258 | 2026-07-27T13:08:45+00:00 | Vulnerability · Source |
| CVE-2026-41607 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability | fixed: 36 known affected: 14 known not affected: 438 | 2026-07-27T13:08:30+00:00 | Vulnerability · Source |
| CVE-2026-49875 | redhat_vex | cxf: org.apache.cxf/cxf-core: Apache CXF: Information disclosure via out-of-band external entity resolution due to missing JAXP hardening | fixed: 2 known affected: 6 known not affected: 1 | 2026-07-27T12:46:59+00:00 | Vulnerability · Source |
| CVE-2026-54422 | redhat_vex | ironic-python-agent: ironic-python-agent: Credential extraction from bootc container deployment via /proc/1/root | known affected: 4 known not affected: 5 | 2026-07-27T12:42:12+00:00 | Vulnerability · Source |
| CVE-2026-8949 | redhat_vex | firefox: thunderbird: Integer overflow in the Widget: Win32 component | known not affected: 23 | 2026-07-27T12:29:02+00:00 | Vulnerability · Source |
| CVE-2026-57452 | redhat_vex | vim: Vim: Out-of-bounds Read with libsodium-encrypted Files | fixed: 4 known affected: 19 known not affected: 14 | 2026-07-27T11:22:45+00:00 | Vulnerability · Source |
| CVE-2026-53366 | redhat_vex | kernel: ipv4: account for fraggap on the paged allocation path | fixed: 616 known affected: 108 known not affected: 90 | 2026-07-27T11:17:54+00:00 | Vulnerability · Source |
| CVE-2026-17527 | redhat_vex | virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated ClusterRole grants create on datavolumes/source, allowing unauthorized PVC clone | known affected: 2 | 2026-07-27T11:01:34+00:00 | Vulnerability · Source |
| CVE-2026-65920 | redhat_vex | diffusers: Diffusers: Information disclosure via path traversal vulnerability | known affected: 16 | 2026-07-27T10:51:35+00:00 | Vulnerability · Source |
| CVE-2026-65903 | redhat_vex | dompurify: DOMPurify: Security bypass allows injection of malicious content | known affected: 45 known not affected: 1 under investigation: 48 | 2026-07-27T10:17:09+00:00 | Vulnerability · Source |