VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64474 | microsoft_vex | vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | known affected: 1 | 2026-07-27T14:48:31+00:00 | Vulnerability · Source |
| CVE-2026-64368 | microsoft_vex | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | known affected: 1 | 2026-07-27T14:48:26+00:00 | Vulnerability · Source |
| CVE-2026-64273 | microsoft_vex | Input: iforce - bound the device-reported force-feedback effect index | known affected: 1 | 2026-07-27T14:48:24+00:00 | Vulnerability · Source |
| CVE-2026-64336 | microsoft_vex | USB: serial: keyspan_pda: fix information leak | known affected: 1 | 2026-07-27T14:48:20+00:00 | Vulnerability · Source |
| CVE-2026-64495 | microsoft_vex | iio: gyro: bmg160: bail out when bandwidth/filter is not in table | known affected: 1 | 2026-07-27T14:48:17+00:00 | Vulnerability · Source |
| CVE-2026-64411 | microsoft_vex | netfilter: ebtables: terminate table name before find_table_lock() | known affected: 1 | 2026-07-27T14:48:14+00:00 | Vulnerability · Source |
| CVE-2026-64469 | microsoft_vex | binder: fix UAF in binder_thread_release() | known affected: 1 | 2026-07-27T14:48:11+00:00 | Vulnerability · Source |
| CVE-2026-64326 | microsoft_vex | block: skip sync_blockdev() on surprise removal in bdev_mark_dead() | known affected: 1 | 2026-07-27T14:48:08+00:00 | Vulnerability · Source |
| CVE-2026-64482 | microsoft_vex | ALSA: gus: check snd_ctl_new1() return value | known affected: 1 | 2026-07-27T14:47:59+00:00 | Vulnerability · Source |
| CVE-2026-64405 | microsoft_vex | Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() | known affected: 1 | 2026-07-27T14:47:55+00:00 | Vulnerability · Source |
| CVE-2026-64324 | microsoft_vex | udf: validate free block extents against the partition length | known affected: 1 | 2026-07-27T14:47:53+00:00 | Vulnerability · Source |
| CVE-2026-64471 | microsoft_vex | Bluetooth: btusb: fix use-after-free on registration failure | known affected: 1 | 2026-07-27T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-64350 | microsoft_vex | usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() | known affected: 1 | 2026-07-27T14:47:47+00:00 | Vulnerability · Source |
| CVE-2026-64346 | microsoft_vex | usb: gadget: udc: Fix use-after-free in gadget_match_driver | known affected: 1 | 2026-07-27T14:47:43+00:00 | Vulnerability · Source |
| CVE-2026-64266 | microsoft_vex | fuse: re-lock request before returning from fuse_ref_folio() | known affected: 1 | 2026-07-27T14:47:41+00:00 | Vulnerability · Source |
| CVE-2026-64301 | microsoft_vex | regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() | known affected: 1 | 2026-07-27T14:47:37+00:00 | Vulnerability · Source |
| CVE-2026-64423 | microsoft_vex | ipv4: igmp: remove multicast group from hash table on device destruction | known affected: 1 | 2026-07-27T14:47:34+00:00 | Vulnerability · Source |
| CVE-2026-64407 | microsoft_vex | Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() | known affected: 1 | 2026-07-27T14:47:31+00:00 | Vulnerability · Source |
| CVE-2026-64383 | microsoft_vex | smb: client: fix double-free in SMB2_flush() replay | known affected: 1 | 2026-07-27T14:47:28+00:00 | Vulnerability · Source |
| CVE-2026-64381 | microsoft_vex | smb: client: Fix next buffer leak in receive_encrypted_standard() | known affected: 1 | 2026-07-27T14:47:25+00:00 | Vulnerability · Source |
| CVE-2026-64496 | microsoft_vex | iio: event: Fix event FIFO reset race | known affected: 1 | 2026-07-27T14:47:22+00:00 | Vulnerability · Source |
| CVE-2026-64355 | microsoft_vex | bpf: Reject fragmented frames in devmap | known affected: 1 | 2026-07-27T14:47:18+00:00 | Vulnerability · Source |
| CVE-2026-64478 | microsoft_vex | ALSA: usb-audio: avoid kobject path lookup in DualSense match | known affected: 1 | 2026-07-27T14:47:16+00:00 | Vulnerability · Source |
| CVE-2026-64470 | microsoft_vex | Bluetooth: btusb: fix use-after-free on marvell probe failure | known affected: 1 | 2026-07-27T14:47:12+00:00 | Vulnerability · Source |
| CVE-2026-64398 | microsoft_vex | ksmbd: add a permission check for FSCTL_SET_ZERO_DATA | known affected: 1 | 2026-07-27T14:47:06+00:00 | Vulnerability · Source |
| CVE-2026-64312 | microsoft_vex | crypto: pcrypt - restore callback for non-parallel fallback | known affected: 1 | 2026-07-27T14:47:03+00:00 | Vulnerability · Source |
| CVE-2026-64500 | microsoft_vex | iio: adc: lpc32xx: Initialize completion before requesting IRQ | known affected: 1 | 2026-07-27T14:47:00+00:00 | Vulnerability · Source |
| CVE-2026-64317 | microsoft_vex | isofs: bound Rock Ridge symlink components to the SL record | known affected: 1 | 2026-07-27T14:46:56+00:00 | Vulnerability · Source |
| CVE-2026-64454 | microsoft_vex | usb: dwc3: run gadget disconnect from sleepable suspend context | known affected: 1 | 2026-07-27T14:46:54+00:00 | Vulnerability · Source |
| CVE-2026-64299 | microsoft_vex | tracing: Prevent out-of-bounds read in glob matching | known affected: 1 | 2026-07-27T14:46:50+00:00 | Vulnerability · Source |
| CVE-2026-64510 | microsoft_vex | ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup | known affected: 1 | 2026-07-27T14:46:48+00:00 | Vulnerability · Source |
| CVE-2026-64318 | microsoft_vex | partitions: aix: bound the pp_count scan to the ppe array | known affected: 1 | 2026-07-27T14:46:44+00:00 | Vulnerability · Source |
| CVE-2026-64484 | microsoft_vex | ALSA: es1938: check snd_ctl_new1() return value | known affected: 1 | 2026-07-27T14:46:41+00:00 | Vulnerability · Source |
| CVE-2026-64444 | microsoft_vex | staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop | known affected: 1 | 2026-07-27T14:46:38+00:00 | Vulnerability · Source |
| CVE-2026-64323 | microsoft_vex | udf: validate VAT header length against the VAT inode size | known affected: 1 | 2026-07-27T14:46:35+00:00 | Vulnerability · Source |
| CVE-2026-64463 | microsoft_vex | usb: typec: tcpci_rt1711h: unregister TCPCI port with devres | known affected: 1 | 2026-07-27T14:46:29+00:00 | Vulnerability · Source |
| CVE-2026-64430 | microsoft_vex | NTB: epf: Avoid calling pci_irq_vector() from hardirq context | known affected: 1 | 2026-07-27T14:46:24+00:00 | Vulnerability · Source |
| CVE-2026-66373 | microsoft_vex | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243. | known affected: 1 | 2026-07-27T14:46:23+00:00 | Vulnerability · Source |
| CVE-2026-64429 | microsoft_vex | gpio: eic-sprd: use raw_spinlock_t in the irq startup path | known affected: 1 | 2026-07-27T14:45:22+00:00 | Vulnerability · Source |
| CVE-2026-64455 | microsoft_vex | USB: chaoskey: Fix slab-use-after-free in chaoskey_release() | known affected: 1 | 2026-07-27T14:45:16+00:00 | Vulnerability · Source |
| CVE-2026-64382 | microsoft_vex | smb: client: fix double-free in SMB2_open() replay | known affected: 1 | 2026-07-27T14:45:10+00:00 | Vulnerability · Source |
| CVE-2026-64298 | microsoft_vex | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | known affected: 1 | 2026-07-27T14:45:03+00:00 | Vulnerability · Source |
| CVE-2026-64433 | microsoft_vex | Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete | known affected: 1 | 2026-07-27T14:44:57+00:00 | Vulnerability · Source |
| CVE-2026-64227 | microsoft_vex | ACPI: driver: Check ACPI_COMPANION() against NULL during probe | known affected: 1 | 2026-07-27T14:44:55+00:00 | Vulnerability · Source |
| CVE-2026-64396 | microsoft_vex | ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation | known affected: 1 | 2026-07-27T14:44:51+00:00 | Vulnerability · Source |
| CVE-2026-64530 | microsoft_vex | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | known affected: 1 | 2026-07-27T14:44:44+00:00 | Vulnerability · Source |
| CVE-2026-64330 | microsoft_vex | usb: typec: tcpm: Validate SVID index in svdm_consume_modes() | known affected: 1 | 2026-07-27T14:44:44+00:00 | Vulnerability · Source |
| CVE-2026-64334 | microsoft_vex | USB: serial: digi_acceleport: fix hard lockup on disconnect | known affected: 1 | 2026-07-27T14:44:36+00:00 | Vulnerability · Source |
| CVE-2026-64313 | microsoft_vex | crypto: ecc - Fix carry overflow in vli multiplication | known affected: 1 | 2026-07-27T14:44:28+00:00 | Vulnerability · Source |
| CVE-2026-64529 | microsoft_vex | crypto: qat - remove unused character device and IOCTLs | known affected: 1 | 2026-07-27T14:44:27+00:00 | Vulnerability · Source |