VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282994 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64055 | redhat_vex | kernel: net: ethernet: cortina: Carry over frag counter | known not affected: 275 | 2026-07-21T08:04:28+00:00 | Vulnerability · Source |
| CVE-2026-63847 | redhat_vex | kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring | known not affected: 274 | 2026-07-21T08:04:25+00:00 | Vulnerability · Source |
| CVE-2026-64164 | redhat_vex | kernel: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() | known not affected: 274 | 2026-07-21T08:04:25+00:00 | Vulnerability · Source |
| CVE-2026-15812 | redhat_vex | kronosnet: kronosnet: access control list bypass via link ID spoofing on unencrypted dynamic links | known affected: 42 | 2026-07-21T08:04:20+00:00 | Vulnerability · Source |
| CVE-2026-53370 | redhat_vex | kernel: perf/x86/intel: Improve validation and configuration of ACR masks | known affected: 76 known not affected: 198 | 2026-07-21T08:04:19+00:00 | Vulnerability · Source |
| CVE-2026-53369 | redhat_vex | kernel: udf: reject descriptors with oversized CRC length | known affected: 274 | 2026-07-21T08:04:18+00:00 | Vulnerability · Source |
| CVE-2026-6733 | redhat_vex | undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. | fixed: 243 known affected: 46 | 2026-07-21T08:04:08+00:00 | Vulnerability · Source |
| CVE-2024-45336 | redhat_vex | golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect | fixed: 341 known affected: 527 known not affected: 438 | 2026-07-21T08:04:05+00:00 | Vulnerability · Source |
| CVE-2024-39330 | redhat_vex | python-django: Potential directory-traversal in django.core.files.storage.Storage.save() | fixed: 14 known affected: 20 known not affected: 3729 | 2026-07-21T08:04:05+00:00 | Vulnerability · Source |
| CVE-2026-11525 | redhat_vex | undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header | fixed: 239 known affected: 47 | 2026-07-21T08:04:03+00:00 | Vulnerability · Source |
| CVE-2026-64085 | redhat_vex | kernel: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer | known affected: 200 known not affected: 75 | 2026-07-21T08:03:57+00:00 | Vulnerability · Source |
| CVE-2026-64166 | redhat_vex | kernel: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration | known not affected: 274 | 2026-07-21T08:03:56+00:00 | Vulnerability · Source |
| CVE-2026-64086 | redhat_vex | kernel: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer | known not affected: 274 | 2026-07-21T08:03:55+00:00 | Vulnerability · Source |
| CVE-2026-64154 | redhat_vex | kernel: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() | known affected: 76 known not affected: 198 | 2026-07-21T08:03:49+00:00 | Vulnerability · Source |
| CVE-2023-5752 | redhat_vex | pip: Mercurial configuration injectable in repo revision when installing via pip | fixed: 8 known affected: 5 known not affected: 296 | 2026-07-21T08:03:49+00:00 | Vulnerability · Source |
| CVE-2026-64129 | redhat_vex | kernel: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page | known not affected: 274 | 2026-07-21T08:03:46+00:00 | Vulnerability · Source |
| CVE-2023-4693 | redhat_vex | grub2: out-of-bounds read at fs/ntfs.c | fixed: 81 known affected: 22 | 2026-07-21T08:03:46+00:00 | Vulnerability · Source |
| CVE-2026-53401 | redhat_vex | kernel: fbdev: omap2: fix use-after-free in omapfb_mmap | known not affected: 275 | 2026-07-21T08:03:43+00:00 | Vulnerability · Source |
| CVE-2025-7339 | redhat_vex | on-headers: on-headers vulnerable to http response header manipulation | fixed: 88 known affected: 100 known not affected: 14 | 2026-07-21T08:03:40+00:00 | Vulnerability · Source |
| CVE-2023-2431 | redhat_vex | kubernetes: Bypass of seccomp profile enforcement | fixed: 1 known affected: 13 known not affected: 60 | 2026-07-21T08:03:36+00:00 | Vulnerability · Source |
| CVE-2026-53403 | redhat_vex | kernel: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | known affected: 232 known not affected: 42 | 2026-07-21T08:03:36+00:00 | Vulnerability · Source |
| CVE-2025-15281 | redhat_vex | glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory | fixed: 2043 known affected: 22 known not affected: 1007 | 2026-07-21T08:03:31+00:00 | Vulnerability · Source |
| CVE-2026-64179 | redhat_vex | kernel: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() | known affected: 232 known not affected: 43 | 2026-07-21T08:03:28+00:00 | Vulnerability · Source |
| CVE-2026-15811 | redhat_vex | kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes | known affected: 42 | 2026-07-21T08:03:27+00:00 | Vulnerability · Source |
| CVE-2026-64186 | redhat_vex | kernel: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs | known affected: 184 known not affected: 90 | 2026-07-21T08:03:25+00:00 | Vulnerability · Source |
| CVE-2026-64107 | redhat_vex | kernel: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() | known affected: 76 known not affected: 198 | 2026-07-21T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-64165 | redhat_vex | kernel: ARM: integrator: Fix early initialization | known not affected: 274 | 2026-07-21T08:03:19+00:00 | Vulnerability · Source |
| CVE-2026-63806 | redhat_vex | kernel: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | known not affected: 274 | 2026-07-21T08:03:15+00:00 | Vulnerability · Source |
| CVE-2026-64044 | redhat_vex | kernel: ovpn: respect peer refcount in CMD_NEW_PEER error path | known not affected: 275 | 2026-07-21T08:03:13+00:00 | Vulnerability · Source |
| CVE-2021-3981 | redhat_vex | grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content | fixed: 41 known affected: 22 known not affected: 16 | 2026-07-21T08:03:09+00:00 | Vulnerability · Source |
| CVE-2026-64180 | redhat_vex | kernel: mm/memory_hotplug: fix memory block reference leak on remove | known affected: 15 known not affected: 260 | 2026-07-21T08:03:05+00:00 | Vulnerability · Source |
| CVE-2026-64087 | redhat_vex | kernel: hwmon: (pmbus/adm1266) reject implausible blackbox record_count | known affected: 76 known not affected: 198 | 2026-07-21T08:03:04+00:00 | Vulnerability · Source |
| CVE-2026-53389 | redhat_vex | kernel: net/tcp-ao: fix use-after-free of key in del_async path | known not affected: 275 | 2026-07-21T08:02:59+00:00 | Vulnerability · Source |
| CVE-2026-53390 | redhat_vex | kernel: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() | known not affected: 275 | 2026-07-21T08:02:56+00:00 | Vulnerability · Source |
| CVE-2026-64175 | redhat_vex | kernel: wifi: iwlwifi: mld: stop TX during firmware restart | known affected: 184 known not affected: 91 | 2026-07-21T08:02:51+00:00 | Vulnerability · Source |
| CVE-2026-64072 | redhat_vex | kernel: nvme: fix bio leak on mapping failure | known affected: 77 known not affected: 198 | 2026-07-21T08:02:49+00:00 | Vulnerability · Source |
| CVE-2026-53385 | redhat_vex | kernel: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | known affected: 184 known not affected: 90 | 2026-07-21T08:02:48+00:00 | Vulnerability · Source |
| CVE-2026-63828 | redhat_vex | kernel: apparmor: mediate the implicit connect of TCP fast open sendmsg | known not affected: 274 | 2026-07-21T08:02:44+00:00 | Vulnerability · Source |
| CVE-2026-28378 | redhat_vex | grafana: Grafana: Unauthorized public dashboard deletion across organizations | known not affected: 28 | 2026-07-21T08:02:43+00:00 | Vulnerability · Source |
| CVE-2026-53376 | redhat_vex | kernel: drm/amdkfd: Add upper bound check for num_of_nodes | known not affected: 1 | 2026-07-21T08:02:37+00:00 | Vulnerability · Source |
| CVE-2026-53379 | redhat_vex | kernel: media: i2c: ov8856: free control handler on error in ov8856_init_controls() | known not affected: 1 | 2026-07-21T08:02:37+00:00 | Vulnerability · Source |
| CVE-2025-68458 | redhat_vex | webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior | fixed: 234 known affected: 127 known not affected: 40 | 2026-07-21T08:02:35+00:00 | Vulnerability · Source |
| CVE-2024-53861 | redhat_vex | pyjwt: Issuer field partial matches allowed in pyjwt | known not affected: 134 | 2026-07-21T08:02:32+00:00 | Vulnerability · Source |
| CVE-2025-5889 | redhat_vex | brace-expansion: juliangruber brace-expansion index.js expand redos | fixed: 497 known affected: 143 known not affected: 94 | 2026-07-21T08:02:27+00:00 | Vulnerability · Source |
| CVE-2026-63821 | redhat_vex | kernel: wifi: rtw88: usb: fix memory leaks on USB write failures | known not affected: 1 | 2026-07-21T08:02:24+00:00 | Vulnerability · Source |
| CVE-2024-51744 | redhat_vex | golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt | fixed: 272 known affected: 293 known not affected: 321 | 2026-07-21T08:02:24+00:00 | Vulnerability · Source |
| CVE-2026-63818 | redhat_vex | kernel: f2fs: validate orphan inode entry count | known not affected: 1 | 2026-07-21T08:02:15+00:00 | Vulnerability · Source |
| CVE-2026-64182 | redhat_vex | kernel: drivers/base/memory: fix memory block reference leak in poison accounting | known affected: 198 known not affected: 76 | 2026-07-21T08:02:09+00:00 | Vulnerability · Source |
| CVE-2026-53374 | redhat_vex | kernel: drm/amdgpu: zero-initialize GART table on allocation | known not affected: 274 | 2026-07-21T08:02:07+00:00 | Vulnerability · Source |
| CVE-2026-63815 | redhat_vex | kernel: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes | known not affected: 274 | 2026-07-21T08:02:06+00:00 | Vulnerability · Source |