VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64422 | microsoft_vex | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | known affected: 1 | 2026-07-27T14:41:17+00:00 | Vulnerability · Source |
| CVE-2026-64364 | microsoft_vex | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | known affected: 1 | 2026-07-27T14:41:11+00:00 | Vulnerability · Source |
| CVE-2026-64275 | microsoft_vex | Input: elan_i2c - prevent division by zero and arithmetic underflow | known affected: 1 | 2026-07-27T14:41:09+00:00 | Vulnerability · Source |
| CVE-2026-64287 | microsoft_vex | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | known affected: 1 | 2026-07-27T14:41:03+00:00 | Vulnerability · Source |
| CVE-2026-64280 | microsoft_vex | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | known affected: 1 | 2026-07-27T14:41:01+00:00 | Vulnerability · Source |
| CVE-2026-64440 | microsoft_vex | staging: rtl8723bs: fix OOB write in HT_caps_handler() | known affected: 1 | 2026-07-27T14:40:55+00:00 | Vulnerability · Source |
| CVE-2026-64329 | microsoft_vex | usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove | known affected: 1 | 2026-07-27T14:40:54+00:00 | Vulnerability · Source |
| CVE-2026-64449 | microsoft_vex | staging: vme_user: bound slave read/write to the kern_buf size | known affected: 1 | 2026-07-27T14:40:47+00:00 | Vulnerability · Source |
| CVE-2026-64332 | microsoft_vex | USB: ulpi: fix memory leak on registration failure | known affected: 1 | 2026-07-27T14:40:46+00:00 | Vulnerability · Source |
| CVE-2026-64456 | microsoft_vex | hwrng: virtio: clamp device-reported used.len at copy_data() | known affected: 1 | 2026-07-27T14:40:39+00:00 | Vulnerability · Source |
| CVE-2026-64393 | microsoft_vex | ksmbd: run set info with opener credentials | known affected: 1 | 2026-07-27T14:40:38+00:00 | Vulnerability · Source |
| CVE-2026-64365 | microsoft_vex | HID: letsketch: fix UAF on inrange_timer at driver unbind | known affected: 1 | 2026-07-27T14:40:31+00:00 | Vulnerability · Source |
| CVE-2026-64342 | microsoft_vex | USB: iowarrior: fix use-after-free on disconnect | known affected: 1 | 2026-07-27T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-64370 | microsoft_vex | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | known affected: 1 | 2026-07-27T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-8092 | redhat_vex | firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 | fixed: 260 known affected: 8 | 2026-07-27T14:40:16+00:00 | Vulnerability · Source |
| CVE-2026-64508 | microsoft_vex | bpf: Support for hardening against JIT spraying | known affected: 1 | 2026-07-27T14:40:14+00:00 | Vulnerability · Source |
| CVE-2026-64359 | microsoft_vex | nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers | known affected: 1 | 2026-07-27T14:40:14+00:00 | Vulnerability · Source |
| CVE-2024-2616 | redhat_vex | Mozilla: Improve handling of out-of-memory conditions in ICU | fixed: 256 known affected: 4 | 2026-07-27T14:36:38+00:00 | Vulnerability · Source |
| CVE-2026-41901 | redhat_vex | thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass | known affected: 2 known not affected: 3 | 2026-07-27T14:07:00+00:00 | Vulnerability · Source |
| CVE-2019-17594 | redhat_vex | ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c | fixed: 52 known affected: 13 | 2026-07-27T13:55:45+00:00 | Vulnerability · Source |
| CVE-2019-17595 | redhat_vex | ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c | fixed: 52 known affected: 13 | 2026-07-27T13:55:42+00:00 | Vulnerability · Source |
| CVE-2023-42669 | redhat_vex | samba: "rpcecho" development server allows denial of service via sleep() call on AD DC | fixed: 2860 known affected: 94 | 2026-07-27T13:49:45+00:00 | Vulnerability · Source |
| CVE-2023-4091 | redhat_vex | samba: SMB clients can truncate files with read-only permissions | fixed: 2860 known affected: 94 | 2026-07-27T13:49:41+00:00 | Vulnerability · Source |
| CVE-2023-3961 | redhat_vex | samba: smbd allows client access to unix domain sockets on the file system as root | fixed: 2860 known affected: 35 known not affected: 59 | 2026-07-27T13:49:28+00:00 | Vulnerability · Source |
| CVE-2026-47086 | redhat_vex | cyrus-imapd: cyrus-imapd: Information disclosure via URLAUTH token bypass of Access Control Lists | known affected: 20 | 2026-07-27T13:09:55+00:00 | Vulnerability · Source |
| CVE-2026-49875 | redhat_vex | cxf: org.apache.cxf/cxf-core: Apache CXF: Information disclosure via out-of-band external entity resolution due to missing JAXP hardening | fixed: 2 known affected: 6 known not affected: 1 | 2026-07-27T12:46:59+00:00 | Vulnerability · Source |
| CVE-2026-54422 | redhat_vex | ironic-python-agent: ironic-python-agent: Credential extraction from bootc container deployment via /proc/1/root | known affected: 4 known not affected: 5 | 2026-07-27T12:42:12+00:00 | Vulnerability · Source |
| CVE-2026-8949 | redhat_vex | firefox: thunderbird: Integer overflow in the Widget: Win32 component | known not affected: 23 | 2026-07-27T12:29:02+00:00 | Vulnerability · Source |
| CVE-2026-65920 | redhat_vex | diffusers: Diffusers: Information disclosure via path traversal vulnerability | known affected: 16 | 2026-07-27T10:51:35+00:00 | Vulnerability · Source |
| CVE-2026-50264 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat | fixed: 1006 known affected: 14 | 2026-07-27T09:48:12+00:00 | Vulnerability · Source |
| CVE-2026-16807 | redhat_vex | chromium-browser: Google Chrome Codecs: Sandbox escape via crafted HTML page | known not affected: 1 | 2026-07-27T09:42:31+00:00 | Vulnerability · Source |
| CVE-2026-64331 | redhat_vex | kernel: usbip: vudc: fix NULL deref in vep_dequeue() | known not affected: 274 | 2026-07-27T09:34:49+00:00 | Vulnerability · Source |
| CVE-2026-64269 | redhat_vex | kernel: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | known not affected: 275 | 2026-07-27T09:34:44+00:00 | Vulnerability · Source |
| CVE-2026-16410 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 23 | 2026-07-27T09:34:41+00:00 | Vulnerability · Source |
| CVE-2026-16409 | redhat_vex | firefox: thunderbird: Invalid pointer in the Security: PSM component | known not affected: 23 | 2026-07-27T09:34:40+00:00 | Vulnerability · Source |
| CVE-2026-16408 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video: Playback component | known affected: 6 known not affected: 12 | 2026-07-27T09:34:39+00:00 | Vulnerability · Source |
| CVE-2026-16407 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Service Workers component | known not affected: 23 | 2026-07-27T09:34:34+00:00 | Vulnerability · Source |
| CVE-2026-16406 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking component | known affected: 6 known not affected: 12 | 2026-07-27T09:34:29+00:00 | Vulnerability · Source |
| CVE-2026-16404 | redhat_vex | firefox: Spoofing issue in Firefox for Android | known not affected: 12 | 2026-07-27T09:34:27+00:00 | Vulnerability · Source |
| CVE-2026-16403 | redhat_vex | firefox: thunderbird: Spoofing issue in the Address Bar component | known not affected: 23 | 2026-07-27T09:34:25+00:00 | Vulnerability · Source |
| CVE-2026-64309 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) | known affected: 184 known not affected: 90 | 2026-07-27T09:25:25+00:00 | Vulnerability · Source |
| CVE-2026-16401 | redhat_vex | firefox: thunderbird: Privilege escalation in the Data Loss Prevention component | known not affected: 18 | 2026-07-27T09:25:18+00:00 | Vulnerability · Source |
| CVE-2026-64477 | redhat_vex | kernel: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled | known affected: 184 known not affected: 90 | 2026-07-27T09:25:15+00:00 | Vulnerability · Source |
| CVE-2026-64363 | redhat_vex | kernel: HID: appleir: fix UAF on pending key_up_timer in remove() | known affected: 260 known not affected: 14 | 2026-07-27T09:25:12+00:00 | Vulnerability · Source |
| CVE-2026-16402 | redhat_vex | firefox: thunderbird: Integer overflow in the Graphics: ImageLib component | known not affected: 23 | 2026-07-27T09:25:11+00:00 | Vulnerability · Source |
| CVE-2026-16400 | redhat_vex | firefox: thunderbird: Information disclosure in the DOM: Security component | known not affected: 23 | 2026-07-27T09:25:09+00:00 | Vulnerability · Source |
| CVE-2026-16399 | redhat_vex | firefox: thunderbird: Site isolation issue in the DOM: Navigation component | known not affected: 20 | 2026-07-27T09:25:07+00:00 | Vulnerability · Source |
| CVE-2026-16398 | redhat_vex | firefox: thunderbird: Site isolation issue in the Graphics component | known not affected: 23 | 2026-07-27T09:25:05+00:00 | Vulnerability · Source |
| CVE-2026-16397 | redhat_vex | firefox: Clickjacking issue in the WebExtensions component in Firefox for Android | known not affected: 12 | 2026-07-27T09:25:02+00:00 | Vulnerability · Source |
| CVE-2026-16395 | redhat_vex | firefox: thunderbird: Integer overflow in the Audio/Video component | known not affected: 23 | 2026-07-27T09:25:01+00:00 | Vulnerability · Source |