VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
221799 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-26740 | redhat_vex | giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension | fixed: 294 known affected: 3 known not affected: 240 | 2026-07-06T19:09:26+00:00 | Vulnerability · Source |
| CVE-2026-45852 | redhat_vex | kernel: RDMA/rxe: Fix double free in rxe_srq_from_init | fixed: 1256 known affected: 33 known not affected: 90 | 2026-07-06T19:04:14+00:00 | Vulnerability · Source |
| CVE-2026-43329 | redhat_vex | kernel: netfilter: flowtable: strictly check for maximum number of actions | fixed: 1980 known affected: 23 known not affected: 43 | 2026-07-06T19:04:05+00:00 | Vulnerability · Source |
| CVE-2026-53156 | redhat_vex | kernel: nvmem: core: fix use-after-free bugs in error paths | known affected: 184 known not affected: 90 | 2026-07-06T17:14:18+00:00 | Vulnerability · Source |
| CVE-2026-57204 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with missing stream length | known affected: 11 | 2026-07-06T16:47:31+00:00 | Vulnerability · Source |
| CVE-2026-50734 | redhat_vex | Apache ActiveMQ Client: Apache ActiveMQ: Apache ActiveMQ All: Apache ActiveMQ: Denial of Service via crafted WireFormatInfo frame | known affected: 90 known not affected: 31 | 2026-07-06T16:46:49+00:00 | Vulnerability · Source |
| CVE-2026-38969 | redhat_vex | webrick: rubygem-webrick: WEBrick: Request smuggling via re-parsing of Content-Length header | fixed: 4 known affected: 8 | 2026-07-06T16:32:04+00:00 | Vulnerability · Source |
| CVE-2026-53441 | redhat_vex | jenkins: Jenkins: Stored Cross-Site Scripting (XSS) via unescaped user-provided description | known affected: 1 | 2026-07-06T16:32:02+00:00 | Vulnerability · Source |
| CVE-2026-53129 | redhat_vex | kernel: fs/mbcache: cancel shrink work before destroying the cache | known affected: 246 known not affected: 28 | 2026-07-06T15:59:42+00:00 | Vulnerability · Source |
| CVE-2026-56132 | redhat_vex | expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow | fixed: 3 known affected: 22 under investigation: 8 | 2026-07-06T15:24:28+00:00 | Vulnerability · Source |
| CVE-2026-56412 | redhat_vex | libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections | known affected: 22 | 2026-07-06T15:24:24+00:00 | Vulnerability · Source |
| CVE-2026-50219 | redhat_vex | expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking | fixed: 3 known affected: 22 | 2026-07-06T15:24:21+00:00 | Vulnerability · Source |
| CVE-2025-54518 | redhat_vex | kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation | known affected: 261 known not affected: 16 | 2026-07-06T15:23:32+00:00 | Vulnerability · Source |
| CVE-2026-53140 | redhat_vex | kernel: drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups | known not affected: 274 | 2026-07-06T15:14:10+00:00 | Vulnerability · Source |
| CVE-2026-55180 | redhat_vex | pnpm: pacquet: pnpm and pacquet: Information disclosure of environment secrets via improper environment variable expansion | known affected: 4 | 2026-07-06T15:10:18+00:00 | Vulnerability · Source |
| CVE-2026-50573 | redhat_vex | pnpm: pnpm: Package integrity check bypass allows installation of malicious content | known affected: 4 | 2026-07-06T15:10:17+00:00 | Vulnerability · Source |
| CVE-2026-43133 | redhat_vex | kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation | known affected: 233 known not affected: 43 | 2026-07-06T15:09:18+00:00 | Vulnerability · Source |
| CVE-2026-50020 | redhat_vex | netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder | fixed: 2 known affected: 45 known not affected: 9 | 2026-07-06T15:07:45+00:00 | Vulnerability · Source |
| CVE-2026-50017 | redhat_vex | pnpm: pnpm: Information disclosure of authentication credentials via malicious .npmrc file | known affected: 4 | 2026-07-06T15:07:38+00:00 | Vulnerability · Source |
| CVE-2026-50014 | redhat_vex | pnpm: pnpm: Arbitrary Code Execution via Malicious Lockfile | known affected: 4 | 2026-07-06T15:07:36+00:00 | Vulnerability · Source |
| CVE-2026-55895 | redhat_vex | vim: Vim: Arbitrary code execution via Vimscript code injection in netrw plugin | known affected: 21 known not affected: 13 | 2026-07-06T15:07:32+00:00 | Vulnerability · Source |
| CVE-2026-14258 | microsoft_vex | Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling | fixed: 2 known affected: 2 | 2026-07-06T14:45:18+00:00 | Vulnerability · Source |
| CVE-2026-13595 | microsoft_vex | Util-linux: util-linux: heap use-after-free in libblkid nested partition probing | fixed: 2 known affected: 2 | 2026-07-06T14:44:04+00:00 | Vulnerability · Source |
| CVE-2026-11625 | microsoft_vex | Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes | fixed: 2 known affected: 2 | 2026-07-06T14:43:57+00:00 | Vulnerability · Source |
| CVE-2026-58058 | microsoft_vex | Nmap - Integer Underflow in IPv6 Extension Header Parsing | fixed: 2 known affected: 2 | 2026-07-06T14:43:46+00:00 | Vulnerability · Source |
| CVE-2026-58051 | microsoft_vex | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup | known affected: 3 known not affected: 1 | 2026-07-06T14:43:39+00:00 | Vulnerability · Source |
| CVE-2026-3196 | microsoft_vex | Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation | fixed: 2 known affected: 4 | 2026-07-06T14:43:33+00:00 | Vulnerability · Source |
| CVE-2025-15661 | microsoft_vex | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c | fixed: 2 known affected: 4 known not affected: 1 | 2026-07-06T14:43:01+00:00 | Vulnerability · Source |
| CVE-2026-55199 | microsoft_vex | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler | fixed: 2 known affected: 4 known not affected: 1 | 2026-07-06T14:42:54+00:00 | Vulnerability · Source |
| CVE-2026-56116 | microsoft_vex | dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling | fixed: 3 known affected: 3 | 2026-07-06T14:42:40+00:00 | Vulnerability · Source |
| CVE-2026-11623 | microsoft_vex | tmux image.c image_free use after free | fixed: 2 known affected: 2 | 2026-07-06T14:42:19+00:00 | Vulnerability · Source |
| CVE-2026-10028 | microsoft_vex | Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain | fixed: 2 known affected: 2 | 2026-07-06T14:42:05+00:00 | Vulnerability · Source |
| CVE-2026-39835 | microsoft_vex | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh | fixed: 16 known affected: 21 known not affected: 2 | 2026-07-06T14:41:50+00:00 | Vulnerability · Source |
| CVE-2026-39828 | microsoft_vex | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh | fixed: 10 known affected: 17 known not affected: 2 | 2026-07-06T14:41:43+00:00 | Vulnerability · Source |
| CVE-2026-25680 | microsoft_vex | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | fixed: 35 known affected: 44 known not affected: 2 | 2026-07-06T14:41:36+00:00 | Vulnerability · Source |
| CVE-2026-42502 | microsoft_vex | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | fixed: 35 known affected: 44 known not affected: 2 | 2026-07-06T14:41:22+00:00 | Vulnerability · Source |
| CVE-2026-45803 | microsoft_vex | gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection | fixed: 2 known affected: 4 | 2026-07-06T14:41:11+00:00 | Vulnerability · Source |
| CVE-2026-41889 | microsoft_vex | pgx: SQL Injection via placeholder confusion with dollar quoted string literals | fixed: 3 known affected: 6 | 2026-07-06T14:41:00+00:00 | Vulnerability · Source |
| CVE-2025-58160 | microsoft_vex | Tracing logging user input may result in poisoning logs with ANSI escape sequences | fixed: 12 known affected: 30 | 2026-07-06T14:40:43+00:00 | Vulnerability · Source |
| CVE-2025-46327 | microsoft_vex | Go Snowflake Driver has race condition when checking access to Easy Logging configuration file | fixed: 1 known affected: 13 | 2026-07-06T14:40:35+00:00 | Vulnerability · Source |
| CVE-2025-29923 | microsoft_vex | go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment | fixed: 3 known affected: 10 | 2026-07-06T14:40:27+00:00 | Vulnerability · Source |
| CVE-2023-1386 | microsoft_vex | Qemu: 9pfs: suid/sgid bits not dropped on file write | known affected: 13 | 2026-07-06T14:40:19+00:00 | Vulnerability · Source |
| CVE-2026-53092 | redhat_vex | kernel: bpf: Fix linked reg delta tracking when src_reg == dst_reg | known affected: 184 known not affected: 90 | 2026-07-06T14:23:12+00:00 | Vulnerability · Source |
| CVE-2026-53090 | redhat_vex | kernel: bpf: Fix ld_{abs,ind} failure path analysis in subprogs | known affected: 232 known not affected: 42 | 2026-07-06T14:23:10+00:00 | Vulnerability · Source |
| CVE-2026-53085 | redhat_vex | kernel: bpf: fix mm lifecycle in open-coded task_vma iterator | known affected: 184 known not affected: 90 | 2026-07-06T14:23:03+00:00 | Vulnerability · Source |
| CVE-2026-53081 | redhat_vex | kernel: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars | known affected: 184 known not affected: 90 | 2026-07-06T14:22:59+00:00 | Vulnerability · Source |
| CVE-2026-53033 | redhat_vex | kernel: bpf, sockmap: Take state lock for af_unix iter | known affected: 184 known not affected: 90 | 2026-07-06T14:22:58+00:00 | Vulnerability · Source |
| CVE-2026-52955 | redhat_vex | kernel: libceph: Fix potential out-of-bounds access in crush_decode() | known affected: 260 known not affected: 14 | 2026-07-06T14:22:49+00:00 | Vulnerability · Source |
| CVE-2026-14757 | redhat_vex | radare2: Radare2: Integer overflow allows local impact | known not affected: 1 | 2026-07-06T14:21:59+00:00 | Vulnerability · Source |
| CVE-2026-31236 | redhat_vex | llm: llm CLI tool: Arbitrary code execution via code injection in --functions argument | known not affected: 1 | 2026-07-06T14:21:59+00:00 | Vulnerability · Source |