VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302983 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-97929 | redhat_vex | kernel: ALSA: usbusx2y: validate URB actual_length in interrupt callback | known not affected: 1 | 2026-09-29T20:08:19+00:00 | Vulnerability · Source |
| CVE-2026-102321 | redhat_vex | chromium-browser: chromium-browser: Type confusion in V8 | known not affected: 1 | 2026-09-29T20:08:14+00:00 | Vulnerability · Source |
| CVE-2026-97486 | redhat_vex | kernel: hpfs: handle set_blocksize failures | known not affected: 1 | 2026-09-29T20:08:14+00:00 | Vulnerability · Source |
| CVE-2026-97485 | redhat_vex | kernel: omfs: handle set_blocksize failures | known affected: 186 known not affected: 90 | 2026-09-29T20:08:13+00:00 | Vulnerability · Source |
| CVE-2026-97926 | redhat_vex | kernel: ufs: validate cylinder group metadata before caching it | known affected: 14 known not affected: 262 | 2026-09-29T19:58:21+00:00 | Vulnerability · Source |
| CVE-2026-15789 | redhat_vex | buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability | fixed: 46 known affected: 108 known not affected: 81 | 2026-09-29T19:58:19+00:00 | Vulnerability · Source |
| CVE-2026-97483 | redhat_vex | kernel: usb: core: hcd: fix possible deadlock in rh control transfers | known affected: 276 | 2026-09-29T19:50:30+00:00 | Vulnerability · Source |
| CVE-2026-97482 | redhat_vex | kernel: usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log | known not affected: 276 | 2026-09-29T19:49:09+00:00 | Vulnerability · Source |
| CVE-2026-87776 | redhat_vex | compression: compression: Denial of Service via memory leak on premature response close | fixed: 4 known affected: 75 known not affected: 47 | 2026-09-29T19:49:03+00:00 | Vulnerability · Source |
| CVE-2026-94184 | redhat_vex | fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) | known affected: 6 | 2026-09-29T19:49:03+00:00 | Vulnerability · Source |
| CVE-2026-97923 | redhat_vex | kernel: tracing: Free histogram the var ref when its initialization fails | known affected: 185 known not affected: 91 | 2026-09-29T19:44:27+00:00 | Vulnerability · Source |
| CVE-2026-97922 | redhat_vex | kernel: tracing: Free histogram var refs regardless of how often they are referenced | known affected: 185 known not affected: 91 | 2026-09-29T19:44:24+00:00 | Vulnerability · Source |
| CVE-2026-97481 | redhat_vex | kernel: serial: 8250: fix possible ISR soft lockup | known affected: 234 known not affected: 42 | 2026-09-29T19:44:18+00:00 | Vulnerability · Source |
| CVE-2026-97480 | redhat_vex | kernel: tty: serial: 8250: protect against NULL uart->port.dev in register | known affected: 185 known not affected: 91 | 2026-09-29T19:44:17+00:00 | Vulnerability · Source |
| CVE-2026-97925 | redhat_vex | kernel: tick/broadcast: Plug clockevents replacement race | known affected: 262 known not affected: 14 | 2026-09-29T19:41:52+00:00 | Vulnerability · Source |
| CVE-2026-97924 | redhat_vex | kernel: tracing/user_events: Don't destroy fields when event removal fails | known not affected: 276 | 2026-09-29T19:41:48+00:00 | Vulnerability · Source |
| CVE-2026-75569 | redhat_vex | mce-operator-bundle: All GitHub Actions pinned by mutable tag, not commit SHA | fixed: 6 | 2026-09-29T19:41:43+00:00 | Vulnerability · Source |
| CVE-2026-73269 | redhat_vex | cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates ClusterRoleBinding granting cluster-wide secrets access to namespace-local SA | fixed: 24 known not affected: 704 | 2026-09-29T19:41:39+00:00 | Vulnerability · Source |
| CVE-2026-73268 | redhat_vex | cluster-curator-controller: cluster-curator-controller: spec.install.overrideJob allows arbitrary Job spec injection | fixed: 24 known not affected: 704 | 2026-09-29T19:41:35+00:00 | Vulnerability · Source |
| CVE-2026-73267 | redhat_vex | clusterclaims-controller: ManagedCluster deletion keyed solely on ClusterClaim.Spec.Namespace with no local ownership check | fixed: 24 known not affected: 704 | 2026-09-29T19:41:29+00:00 | Vulnerability · Source |
| CVE-2026-73266 | redhat_vex | clusterclaims-controller: Confused deputy: tenant-controlled ClusterClaim labels propagated to ManagedCluster, enabling cross-tenant ManagedClusterSet join | fixed: 24 known not affected: 704 | 2026-09-29T19:41:25+00:00 | Vulnerability · Source |
| CVE-2026-66804 | redhat_vex | console: Authenticated SSRF via user-controlled towerHost in /ansibletower handler | fixed: 48 known not affected: 1752 | 2026-09-29T19:41:23+00:00 | Vulnerability · Source |
| CVE-2026-66795 | redhat_vex | managedcluster-import-controller: CSR auto-approver does not validate certificate Subject or signerName (spoke→hub cluster-admin) | fixed: 24 known not affected: 704 | 2026-09-29T19:41:11+00:00 | Vulnerability · Source |
| CVE-2026-66794 | redhat_vex | cluster-proxy-addon: cluster-proxy-addon: unauthenticated SSRF to arbitrary managed-cluster services via public Route | fixed: 24 known not affected: 704 | 2026-09-29T19:41:06+00:00 | Vulnerability · Source |
| CVE-2026-42154 | redhat_vex | github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint | fixed: 290 known affected: 42 known not affected: 7185 | 2026-09-29T19:41:06+00:00 | Vulnerability · Source |
| CVE-2026-19130 | redhat_vex | provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedFrom labels bypasses authorization | fixed: 24 known not affected: 704 | 2026-09-29T19:41:06+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known affected: 1 | 2026-09-29T19:29:56+00:00 | Vulnerability · Source |
| CVE-2026-97921 | redhat_vex | kernel: tracing: Free histogram the field rejected for a bad modifier | known affected: 76 known not affected: 200 | 2026-09-29T19:29:51+00:00 | Vulnerability · Source |
| CVE-2026-97479 | redhat_vex | kernel: driver core: Avoid warning when removing a device while its supplier is unbinding | known affected: 248 known not affected: 28 | 2026-09-29T19:29:46+00:00 | Vulnerability · Source |
| CVE-2026-97477 | redhat_vex | kernel: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() | known affected: 234 known not affected: 42 | 2026-09-29T19:29:45+00:00 | Vulnerability · Source |
| CVE-2026-102830 | redhat_vex | jupyterlab: jupyterlite-core: JupyterLab: Arbitrary code execution via crafted language pack | known affected: 21 | 2026-09-29T19:27:35+00:00 | Vulnerability · Source |
| CVE-2026-102824 | redhat_vex | russh: russh: Cryptographic fallback bypass via missing public key validation | known affected: 1 | 2026-09-29T19:27:34+00:00 | Vulnerability · Source |
| CVE-2026-102821 | redhat_vex | russh: russh: Denial of Service via unbounded memory exhaustion during stalled key renegotiation | known affected: 1 | 2026-09-29T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known affected: 1 | 2026-09-29T19:27:27+00:00 | Vulnerability · Source |
| CVE-2026-97920 | redhat_vex | kernel: tracing: Keep the entry count when the histogram stats allocation fails | known affected: 76 known not affected: 200 | 2026-09-29T19:27:24+00:00 | Vulnerability · Source |
| CVE-2026-97919 | redhat_vex | kernel: tracing: Take the reference before publishing the named histogram trigger | known affected: 76 known not affected: 200 | 2026-09-29T19:27:19+00:00 | Vulnerability · Source |
| CVE-2026-97478 | redhat_vex | kernel: virt: acrn: Fix irqfd use-after-free during eventfd shutdown | known not affected: 276 | 2026-09-29T19:27:14+00:00 | Vulnerability · Source |
| CVE-2026-97476 | redhat_vex | kernel: rds: filter RDS_INFO_* getsockopt by caller's netns | known affected: 14 known not affected: 262 | 2026-09-29T19:27:14+00:00 | Vulnerability · Source |
| CVE-2026-95302 | redhat_vex | chromium-browser: chromium-browser: Information disclosure via improper authorization in WebAPKs | known not affected: 1 | 2026-09-29T19:27:13+00:00 | Vulnerability · Source |
| CVE-2026-88057 | redhat_vex | @angular/core: @angular/compiler: Angular: Arbitrary code execution via sanitization bypass in host bindings | known affected: 100 | 2026-09-29T19:27:11+00:00 | Vulnerability · Source |
| CVE-2026-102831 | redhat_vex | jupyterlab: JupyterLab: Cross-Site Scripting via malicious clipboard cell pasting | known affected: 21 | 2026-09-29T19:27:08+00:00 | Vulnerability · Source |
| CVE-2026-102823 | redhat_vex | russh: russh: State corruption via unverified SSH channel identifiers | known affected: 1 | 2026-09-29T19:27:07+00:00 | Vulnerability · Source |
| CVE-2026-95338 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via crafted PDF file | known not affected: 1 | 2026-09-29T19:27:04+00:00 | Vulnerability · Source |
| CVE-2026-79657 | redhat_vex | nltk: NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization | known affected: 9 known not affected: 5 | 2026-09-29T19:26:56+00:00 | Vulnerability · Source |
| CVE-2026-78683 | redhat_vex | nltk: NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization | known affected: 10 known not affected: 4 | 2026-09-29T19:26:52+00:00 | Vulnerability · Source |
| CVE-2026-75926 | redhat_vex | github.com/gohugoio/hugo: tailwindcss: Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant | known not affected: 1 | 2026-09-29T19:26:46+00:00 | Vulnerability · Source |
| CVE-2026-12345 | redhat_vex | python: python: Arbitrary file deletion via race condition during temporary directory cleanup | known affected: 144 | 2026-09-29T19:26:40+00:00 | Vulnerability · Source |
| CVE-2026-55193 | redhat_vex | FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway | fixed: 447 known affected: 12 | 2026-09-29T19:26:40+00:00 | Vulnerability · Source |
| CVE-2026-95278 | redhat_vex | chromium-browser: chromium-browser: system access restriction bypass via crafted HTML page | known not affected: 1 | 2026-09-29T19:02:00+00:00 | Vulnerability · Source |
| CVE-2026-95316 | redhat_vex | chromium-browser: chromium-browser: Unchecked return value in Performance | known not affected: 1 | 2026-09-29T19:01:59+00:00 | Vulnerability · Source |