VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64356 | redhat_vex | kernel: xfs: fix memory leak in xfs_dqinode_metadir_create() | known affected: 184 known not affected: 90 | 2026-07-29T10:07:55+00:00 | Vulnerability · Source |
| CVE-2026-18207 | redhat_vex | keycloak-services: keycloak-services: Client policy source-group condition bypass via duplicate group name matching | known affected: 3 known not affected: 3 | 2026-07-29T10:03:10+00:00 | Vulnerability · Source |
| CVE-2026-64467 | redhat_vex | kernel: rust_binder: use a u64 stride when cleaning up the offsets array | known not affected: 274 | 2026-07-29T09:52:45+00:00 | Vulnerability · Source |
| CVE-2026-64538 | redhat_vex | kernel: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() | known affected: 201 known not affected: 76 | 2026-07-29T09:48:01+00:00 | Vulnerability · Source |
| CVE-2026-64303 | redhat_vex | kernel: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path | known affected: 184 known not affected: 90 | 2026-07-29T09:37:32+00:00 | Vulnerability · Source |
| CVE-2026-64311 | redhat_vex | kernel: crypto: loongson - Remove broken and unused loongson-rng | known not affected: 274 | 2026-07-29T09:27:30+00:00 | Vulnerability · Source |
| CVE-2026-5704 | redhat_vex | tar: tar: Hidden file injection via crafted archives | known affected: 9 | 2026-07-29T09:27:27+00:00 | Vulnerability · Source |
| CVE-2026-64345 | redhat_vex | kernel: usb: gadget: f_printer: take kref only for successful open | known not affected: 274 | 2026-07-29T09:17:43+00:00 | Vulnerability · Source |
| CVE-2026-64365 | redhat_vex | kernel: HID: letsketch: fix UAF on inrange_timer at driver unbind | known affected: 184 known not affected: 90 | 2026-07-29T08:52:38+00:00 | Vulnerability · Source |
| CVE-2026-64299 | redhat_vex | kernel: tracing: Prevent out-of-bounds read in glob matching | known affected: 246 known not affected: 28 | 2026-07-29T08:43:22+00:00 | Vulnerability · Source |
| CVE-2026-46152 | redhat_vex | kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result | fixed: 1607 known affected: 22 known not affected: 42 | 2026-07-29T08:43:15+00:00 | Vulnerability · Source |
| CVE-2026-64359 | redhat_vex | kernel: nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers | known not affected: 274 | 2026-07-29T08:38:35+00:00 | Vulnerability · Source |
| CVE-2026-64337 | redhat_vex | kernel: usb: mtu3: unmap request DMA on queue failure | known not affected: 274 | 2026-07-29T08:38:34+00:00 | Vulnerability · Source |
| CVE-2026-64403 | redhat_vex | kernel: Bluetooth: L2CAP: validate option length before reading conf opt value | known affected: 260 known not affected: 14 | 2026-07-29T08:38:33+00:00 | Vulnerability · Source |
| CVE-2026-64318 | redhat_vex | kernel: partitions: aix: bound the pp_count scan to the ppe array | known not affected: 274 | 2026-07-29T08:35:35+00:00 | Vulnerability · Source |
| CVE-2026-64409 | redhat_vex | kernel: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() | known not affected: 274 | 2026-07-29T08:28:29+00:00 | Vulnerability · Source |
| CVE-2026-64367 | redhat_vex | kernel: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow | known not affected: 274 | 2026-07-29T08:23:31+00:00 | Vulnerability · Source |
| CVE-2026-64352 | redhat_vex | kernel: bpf: Allow LPM map access from sleepable BPF programs | known affected: 232 known not affected: 42 | 2026-07-29T08:19:39+00:00 | Vulnerability · Source |
| CVE-2026-64482 | redhat_vex | kernel: ALSA: gus: check snd_ctl_new1() return value | known not affected: 274 | 2026-07-29T08:19:37+00:00 | Vulnerability · Source |
| CVE-2026-64502 | redhat_vex | kernel: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices | known not affected: 274 | 2026-07-29T08:15:01+00:00 | Vulnerability · Source |
| CVE-2026-64432 | redhat_vex | kernel: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns | known not affected: 274 | 2026-07-29T08:14:56+00:00 | Vulnerability · Source |
| CVE-2026-64493 | redhat_vex | kernel: iio: pressure: mpl115: fix runtime PM leak on read error | known not affected: 274 | 2026-07-29T08:14:56+00:00 | Vulnerability · Source |
| CVE-2026-64435 | redhat_vex | kernel: audit: Fix data races of skb_queue_len() readers on audit_queue | known affected: 246 known not affected: 28 | 2026-07-29T08:08:34+00:00 | Vulnerability · Source |
| CVE-2025-8263 | redhat_vex | prettier: prettier parseNestedCSS ReDoS | known affected: 168 | 2026-07-29T08:08:26+00:00 | Vulnerability · Source |
| CVE-2025-54798 | redhat_vex | tmp: tmp Symbolic Link Write Vulnerability | known affected: 132 known not affected: 5 | 2026-07-29T08:03:53+00:00 | Vulnerability · Source |
| CVE-2026-64449 | redhat_vex | kernel: staging: vme_user: bound slave read/write to the kern_buf size | known not affected: 274 | 2026-07-29T08:03:49+00:00 | Vulnerability · Source |
| CVE-2025-9308 | redhat_vex | yarn: yarnpkg regular expression denial of service | known affected: 34 | 2026-07-29T08:03:47+00:00 | Vulnerability · Source |
| CVE-2026-64328 | redhat_vex | kernel: usb: gadget: f_fs: Fix DMA fence leak | known not affected: 274 | 2026-07-29T08:03:39+00:00 | Vulnerability · Source |
| CVE-2026-64520 | redhat_vex | kernel: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies | known not affected: 274 | 2026-07-29T07:56:18+00:00 | Vulnerability · Source |
| CVE-2026-64259 | redhat_vex | kernel: fuse-uring: make a fuse_req on SQE commit only findable after memcpy | known not affected: 274 | 2026-07-29T07:43:55+00:00 | Vulnerability · Source |
| CVE-2026-64401 | redhat_vex | kernel: smb: client: resolve SWN tcon from live registrations | known not affected: 274 | 2026-07-29T07:33:34+00:00 | Vulnerability · Source |
| CVE-2026-64474 | redhat_vex | kernel: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | known affected: 184 known not affected: 90 | 2026-07-29T07:22:10+00:00 | Vulnerability · Source |
| CVE-2026-64499 | redhat_vex | kernel: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable | known not affected: 274 | 2026-07-29T07:17:12+00:00 | Vulnerability · Source |
| CVE-2026-64421 | redhat_vex | kernel: media: nxp: imx8-isi: Fix use-after-free on remove | known not affected: 274 | 2026-07-29T07:17:12+00:00 | Vulnerability · Source |
| CVE-2026-64222 | redhat_vex | kernel: octeontx2-pf: avoid double free of pool->stack on AQ init failure | known affected: 184 known not affected: 90 | 2026-07-29T07:03:35+00:00 | Vulnerability · Source |
| CVE-2026-64281 | redhat_vex | kernel: svcrdma: wake sq waiters when the transport closes | known affected: 90 known not affected: 184 | 2026-07-29T07:03:32+00:00 | Vulnerability · Source |
| CVE-2026-64366 | redhat_vex | kernel: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert | known affected: 184 known not affected: 90 | 2026-07-29T07:03:28+00:00 | Vulnerability · Source |
| CVE-2026-64440 | redhat_vex | kernel: staging: rtl8723bs: fix OOB write in HT_caps_handler() | known not affected: 274 | 2026-07-29T06:53:08+00:00 | Vulnerability · Source |
| CVE-2026-64533 | redhat_vex | kernel: fs/ntfs3: validate lcns_follow in log_replay conversion | known not affected: 274 | 2026-07-29T06:27:37+00:00 | Vulnerability · Source |
| CVE-2026-64550 | redhat_vex | kernel: net: qualcomm: rmnet: validate MAP frame length before ingress parsing | known not affected: 275 | 2026-07-29T06:27:33+00:00 | Vulnerability · Source |
| CVE-2026-64553 | redhat_vex | kernel: net: psample: fix info leak in PSAMPLE_ATTR_DATA | known affected: 260 known not affected: 14 | 2026-07-29T05:42:07+00:00 | Vulnerability · Source |
| CVE-2026-50135 | redhat_vex | github.com/gohugoio/hugo: Hugo: Information disclosure due to symlink confinement bypass | fixed: 3 | 2026-07-29T03:46:12+00:00 | Vulnerability · Source |
| CVE-2026-50134 | redhat_vex | github.com/gohugoio/hugo: Hugo: Security policy bypass via HTTP redirect manipulation | fixed: 3 | 2026-07-29T03:46:11+00:00 | Vulnerability · Source |
| CVE-2026-58404 | redhat_vex | github.com/gohugoio/hugo: Hugo: Server-Side Request Forgery (SSRF) via alternate IPv4 encodings | fixed: 3 | 2026-07-29T03:46:07+00:00 | Vulnerability · Source |
| CVE-2026-58403 | redhat_vex | github.com/gohugoio/hugo: Hugo: Information disclosure via symlink confinement bypass in virtual filesystem | fixed: 3 | 2026-07-29T03:46:04+00:00 | Vulnerability · Source |
| CVE-2026-58402 | redhat_vex | github.com/gohugoio/hugo: Hugo: Cross-site Scripting via unescaped code-fence language in default code block renderer | fixed: 3 | 2026-07-29T03:46:04+00:00 | Vulnerability · Source |
| CVE-2026-50133 | redhat_vex | github.com/gohugoio/hugo: Hugo: Cross-site Scripting via untrusted HTML content files | fixed: 3 | 2026-07-29T03:46:00+00:00 | Vulnerability · Source |
| CVE-2026-39243 | redhat_vex | decompress: Decompress: File disclosure and corruption via arbitrary hardlink creation | fixed: 3 known affected: 3 | 2026-07-29T03:46:00+00:00 | Vulnerability · Source |
| CVE-2026-57221 | redhat_vex | RabbitMQ: RabbitMQ: Information disclosure via authorization bypass in AMQP 0-9-1 operations | fixed: 6 known not affected: 5 | 2026-07-29T03:45:56+00:00 | Vulnerability · Source |
| CVE-2026-57218 | redhat_vex | rabbitmq-server: RabbitMQ: Information disclosure due to improper consumer reauthorization | fixed: 6 known not affected: 5 | 2026-07-29T03:45:54+00:00 | Vulnerability · Source |