VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282787 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-62299 | microsoft_vex | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record | fixed: 1 known affected: 1 | 2026-07-21T01:41:42+00:00 | Vulnerability · Source |
| CVE-2026-60081 | microsoft_vex | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | fixed: 1 known affected: 1 | 2026-07-21T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-15392 | microsoft_vex | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | fixed: 1 known affected: 1 | 2026-07-21T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-60082 | microsoft_vex | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | fixed: 1 known affected: 1 | 2026-07-21T01:41:17+00:00 | Vulnerability · Source |
| CVE-2026-15043 | microsoft_vex | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text | fixed: 1 known affected: 1 | 2026-07-21T01:41:10+00:00 | Vulnerability · Source |
| CVE-2026-57433 | microsoft_vex | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record | fixed: 1 known affected: 1 | 2026-07-21T01:41:02+00:00 | Vulnerability · Source |
| CVE-2026-48863 | microsoft_vex | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | fixed: 1 known affected: 1 | 2026-07-21T01:40:55+00:00 | Vulnerability · Source |
| CVE-2026-63827 | microsoft_vex | apparmor: fix use-after-free in rawdata dedup loop | known affected: 1 | 2026-07-21T01:39:47+00:00 | Vulnerability · Source |
| CVE-2026-63828 | microsoft_vex | apparmor: mediate the implicit connect of TCP fast open sendmsg | known affected: 1 | 2026-07-21T01:39:26+00:00 | Vulnerability · Source |
| CVE-2026-63801 | microsoft_vex | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | known affected: 1 | 2026-07-21T01:39:19+00:00 | Vulnerability · Source |
| CVE-2025-32415 | redhat_vex | libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables | fixed: 568 known affected: 5 known not affected: 18 | 2026-07-21T01:27:03+00:00 | Vulnerability · Source |
| CVE-2025-8058 | redhat_vex | glibc: Double free in glibc | fixed: 3064 known affected: 23 known not affected: 18 | 2026-07-21T01:26:51+00:00 | Vulnerability · Source |
| CVE-2025-24528 | redhat_vex | krb5: overflow when calculating ulog block size | fixed: 256 known affected: 9 known not affected: 14 | 2026-07-21T01:25:56+00:00 | Vulnerability · Source |
| CVE-2026-42770 | microsoft_vex | FFC-DH Peer Validation Uses Attacker-Supplied q | fixed: 1 known affected: 1 | 2026-07-21T01:05:50+00:00 | Vulnerability · Source |
| CVE-2026-42769 | microsoft_vex | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | fixed: 1 known affected: 1 known not affected: 4 | 2026-07-21T01:05:42+00:00 | Vulnerability · Source |
| CVE-2026-45447 | microsoft_vex | Heap Use-After-Free in the PKCS7_verify() Function | fixed: 2 known affected: 2 known not affected: 5 | 2026-07-21T01:05:35+00:00 | Vulnerability · Source |
| CVE-2026-64082 | microsoft_vex | riscv: Fix register corruption from uninitialized cregs on error | known affected: 1 | 2026-07-21T01:05:16+00:00 | Vulnerability · Source |
| CVE-2026-64146 | microsoft_vex | erofs: fix metabuf leak in inode xattr initialization | known affected: 1 | 2026-07-21T01:05:10+00:00 | Vulnerability · Source |
| CVE-2026-63974 | microsoft_vex | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | known affected: 1 | 2026-07-21T01:05:04+00:00 | Vulnerability · Source |
| CVE-2026-63978 | microsoft_vex | net/handshake: Drain pending requests at net namespace exit | known affected: 1 | 2026-07-21T01:04:58+00:00 | Vulnerability · Source |
| CVE-2026-63999 | microsoft_vex | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | known affected: 1 | 2026-07-21T01:04:52+00:00 | Vulnerability · Source |
| CVE-2026-64017 | microsoft_vex | blk-mq: pop cached request if it is usable | known affected: 1 | 2026-07-21T01:04:46+00:00 | Vulnerability · Source |
| CVE-2026-63979 | microsoft_vex | net/handshake: hand off the pinned file reference to accept_doit | known affected: 1 | 2026-07-21T01:04:40+00:00 | Vulnerability · Source |
| CVE-2026-64060 | microsoft_vex | netfs: Fix leak of request in netfs_write_begin() error handling | known affected: 1 | 2026-07-21T01:04:33+00:00 | Vulnerability · Source |
| CVE-2026-64076 | microsoft_vex | netfilter: bridge: eb_tables: close module init race | known affected: 1 | 2026-07-21T01:04:27+00:00 | Vulnerability · Source |
| CVE-2026-64112 | microsoft_vex | rbd: eliminate a race in lock_dwork draining on unmap | known affected: 1 | 2026-07-21T01:04:19+00:00 | Vulnerability · Source |
| CVE-2026-63882 | microsoft_vex | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | known affected: 1 | 2026-07-21T01:04:12+00:00 | Vulnerability · Source |
| CVE-2026-64154 | microsoft_vex | drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() | known affected: 1 | 2026-07-21T01:04:06+00:00 | Vulnerability · Source |
| CVE-2026-64111 | microsoft_vex | lsm: hold cred_guard_mutex for lsm_set_self_attr() | known affected: 1 | 2026-07-21T01:04:00+00:00 | Vulnerability · Source |
| CVE-2026-63879 | microsoft_vex | drm/amdgpu: fix amdgpu_hmm_range_get_pages | known affected: 1 | 2026-07-21T01:03:54+00:00 | Vulnerability · Source |
| CVE-2026-63963 | microsoft_vex | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | known affected: 1 | 2026-07-21T01:03:48+00:00 | Vulnerability · Source |
| CVE-2025-58190 | redhat_vex | golang.org/x/net/html: Infinite parsing loop in golang.org/x/net | fixed: 36 known affected: 326 known not affected: 189 under investigation: 1 | 2026-07-21T01:03:42+00:00 | Vulnerability · Source |
| CVE-2026-63961 | microsoft_vex | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | known affected: 1 | 2026-07-21T01:03:41+00:00 | Vulnerability · Source |
| CVE-2026-63881 | microsoft_vex | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | known affected: 1 | 2026-07-21T01:03:35+00:00 | Vulnerability · Source |
| CVE-2026-63960 | microsoft_vex | usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | known affected: 1 | 2026-07-21T01:03:29+00:00 | Vulnerability · Source |
| CVE-2026-63964 | microsoft_vex | usb: typec: ucsi: ccg: reject firmware images without a ':' record header | known affected: 1 | 2026-07-21T01:03:23+00:00 | Vulnerability · Source |
| CVE-2026-63983 | microsoft_vex | net/sched: fix packet loop on netem when duplicate is on | known affected: 1 | 2026-07-21T01:03:15+00:00 | Vulnerability · Source |
| CVE-2026-64077 | microsoft_vex | netfilter: ebtables: move to two-stage removal scheme | known affected: 1 | 2026-07-21T01:03:09+00:00 | Vulnerability · Source |
| CVE-2026-63940 | microsoft_vex | KVM: SEV: Ignore Port I/O requests of length '0' | known affected: 1 | 2026-07-21T01:03:02+00:00 | Vulnerability · Source |
| CVE-2026-64078 | microsoft_vex | netfilter: x_tables: add and use xtables_unregister_table_exit | known affected: 1 | 2026-07-21T01:02:56+00:00 | Vulnerability · Source |
| CVE-2026-64097 | microsoft_vex | drm/amd/display: Validate GPIO pin LUT table size before iterating | known affected: 1 | 2026-07-21T01:02:50+00:00 | Vulnerability · Source |
| CVE-2024-56171 | redhat_vex | libxml2: Use-After-Free in libxml2 | fixed: 617 known affected: 5 known not affected: 3737 | 2026-07-21T01:02:47+00:00 | Vulnerability · Source |
| CVE-2026-63954 | microsoft_vex | hpfs: fix a crash if hpfs_map_dnode_bitmap fails | known affected: 1 | 2026-07-21T01:02:44+00:00 | Vulnerability · Source |
| CVE-2026-64117 | microsoft_vex | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 1 | 2026-07-21T01:02:37+00:00 | Vulnerability · Source |
| CVE-2026-63958 | microsoft_vex | usb: typec: ucsi: validate connector number in ucsi_connector_change() | known affected: 1 | 2026-07-21T01:02:31+00:00 | Vulnerability · Source |
| CVE-2026-63962 | microsoft_vex | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | known affected: 1 | 2026-07-21T01:02:25+00:00 | Vulnerability · Source |
| CVE-2026-64015 | microsoft_vex | security/keys: fix missed RCU read section on lookup | known affected: 1 | 2026-07-21T01:02:19+00:00 | Vulnerability · Source |
| CVE-2026-64070 | microsoft_vex | powerpc/hv-gpci: fix preempt count leak in sysfs show paths | known affected: 1 | 2026-07-21T01:02:13+00:00 | Vulnerability · Source |
| CVE-2026-63959 | microsoft_vex | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | known affected: 1 | 2026-07-21T01:02:06+00:00 | Vulnerability · Source |
| CVE-2026-64138 | microsoft_vex | ksmbd: validate SID in parent security descriptor during ACL inheritance | known affected: 1 | 2026-07-21T01:02:00+00:00 | Vulnerability · Source |