VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283001 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64145 | redhat_vex | kernel: wifi: wilc1000: fix dma_buffer leak on bus acquire failure | known not affected: 275 | 2026-07-21T08:01:09+00:00 | Vulnerability · Source |
| CVE-2026-64074 | redhat_vex | kernel: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap | known not affected: 274 | 2026-07-21T07:52:33+00:00 | Vulnerability · Source |
| CVE-2026-64138 | redhat_vex | kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance | known not affected: 275 | 2026-07-21T07:52:28+00:00 | Vulnerability · Source |
| CVE-2026-64146 | redhat_vex | kernel: erofs: fix metabuf leak in inode xattr initialization | known affected: 184 known not affected: 90 | 2026-07-21T07:52:25+00:00 | Vulnerability · Source |
| CVE-2026-64075 | redhat_vex | kernel: fprobe: Fix unregister_fprobe() to wait for RCU grace period | known affected: 232 known not affected: 43 | 2026-07-21T07:52:24+00:00 | Vulnerability · Source |
| CVE-2026-64035 | redhat_vex | kernel: igc: set tx buffer type for SMD frames | known affected: 184 known not affected: 90 | 2026-07-21T07:24:32+00:00 | Vulnerability · Source |
| CVE-2026-63832 | redhat_vex | kernel: wifi: mt76: add wcid publish check in mt76_sta_add | known affected: 232 known not affected: 42 | 2026-07-21T07:24:06+00:00 | Vulnerability · Source |
| CVE-2026-64117 | redhat_vex | kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 246 known not affected: 29 | 2026-07-21T07:20:53+00:00 | Vulnerability · Source |
| CVE-2026-64076 | redhat_vex | kernel: netfilter: bridge: eb_tables: close module init race | known affected: 198 known not affected: 76 | 2026-07-21T07:20:49+00:00 | Vulnerability · Source |
| CVE-2026-64059 | redhat_vex | kernel: netfs: Fix folio->private handling in netfs_perform_write() | known affected: 76 known not affected: 199 | 2026-07-21T07:20:45+00:00 | Vulnerability · Source |
| CVE-2026-64053 | redhat_vex | kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() | known affected: 184 known not affected: 90 | 2026-07-21T07:04:35+00:00 | Vulnerability · Source |
| CVE-2026-39879 | redhat_vex | syslog-ng: syslog-ng: SQL Injection vulnerability leading to denial of service and data manipulation | known not affected: 1 | 2026-07-21T07:04:08+00:00 | Vulnerability · Source |
| CVE-2026-46117 | redhat_vex | kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-21T06:59:58+00:00 | Vulnerability · Source |
| CVE-2026-64040 | redhat_vex | kernel: cachefiles: Fix error return when vfs_mkdir() fails | known affected: 14 known not affected: 260 | 2026-07-21T06:44:10+00:00 | Vulnerability · Source |
| CVE-2026-6475 | redhat_vex | postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind | fixed: 3387 known affected: 12 known not affected: 41 | 2026-07-21T06:43:30+00:00 | Vulnerability · Source |
| CVE-2026-6478 | redhat_vex | postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison | fixed: 3387 known affected: 25 known not affected: 28 | 2026-07-21T06:43:11+00:00 | Vulnerability · Source |
| CVE-2026-6477 | redhat_vex | postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory | fixed: 3387 known affected: 31 known not affected: 28 | 2026-07-21T06:43:01+00:00 | Vulnerability · Source |
| CVE-2026-6473 | redhat_vex | postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write | fixed: 3383 known affected: 25 known not affected: 29 | 2026-07-21T06:42:49+00:00 | Vulnerability · Source |
| CVE-2026-64066 | redhat_vex | kernel: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure | known affected: 76 known not affected: 198 | 2026-07-21T06:39:01+00:00 | Vulnerability · Source |
| CVE-2026-64110 | redhat_vex | kernel: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() | known affected: 184 known not affected: 90 | 2026-07-21T06:33:35+00:00 | Vulnerability · Source |
| CVE-2026-26199 | redhat_vex | HDF5: HDF5: Denial of Service via buffer underflow in H5Iget_name | known affected: 53 | 2026-07-21T06:33:33+00:00 | Vulnerability · Source |
| CVE-2026-46054 | redhat_vex | kernel: selinux: fix overlayfs mmap() and mprotect() access checks | fixed: 762 known affected: 33 known not affected: 17 under investigation: 14 | 2026-07-21T06:33:08+00:00 | Vulnerability · Source |
| CVE-2026-64039 | redhat_vex | kernel: drm/msm/snapshot: fix dumping of the unaligned regions | known not affected: 274 | 2026-07-21T06:27:35+00:00 | Vulnerability · Source |
| CVE-2026-64079 | redhat_vex | kernel: netfilter: x_tables: allocate hook ops while under mutex | known affected: 198 known not affected: 76 | 2026-07-21T06:27:26+00:00 | Vulnerability · Source |
| CVE-2026-64143 | redhat_vex | kernel: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced | known not affected: 274 | 2026-07-21T06:23:10+00:00 | Vulnerability · Source |
| CVE-2026-64131 | redhat_vex | kernel: mm/memory: fix spurious warning when unmapping device-private/exclusive pages | known affected: 198 known not affected: 76 | 2026-07-21T06:23:08+00:00 | Vulnerability · Source |
| CVE-2026-64088 | redhat_vex | kernel: batman-adv: tt: fix negative tt_buff_len | known affected: 184 known not affected: 90 | 2026-07-21T06:23:03+00:00 | Vulnerability · Source |
| CVE-2026-64188 | redhat_vex | kernel: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | known not affected: 275 | 2026-07-21T06:22:57+00:00 | Vulnerability · Source |
| CVE-2026-64093 | redhat_vex | kernel: batman-adv: tp_meter: directly shut down timer on cleanup | known not affected: 274 | 2026-07-21T06:22:55+00:00 | Vulnerability · Source |
| CVE-2026-64103 | redhat_vex | kernel: scsi: isci: Fix use-after-free in device removal path | known affected: 274 | 2026-07-21T06:22:53+00:00 | Vulnerability · Source |
| CVE-2026-26197 | redhat_vex | hdf5: HDF5: Out-of-bounds read due to corrupted file can lead to denial of service | known affected: 52 under investigation: 1 | 2026-07-21T06:22:53+00:00 | Vulnerability · Source |
| CVE-2026-64036 | redhat_vex | kernel: cgroup/rstat: validate cpu before css_rstat_cpu() access | known affected: 198 known not affected: 76 | 2026-07-21T06:22:52+00:00 | Vulnerability · Source |
| CVE-2026-64185 | redhat_vex | kernel: sysfs: don't remove existing directory on update failure | known affected: 246 known not affected: 28 | 2026-07-21T06:12:54+00:00 | Vulnerability · Source |
| CVE-2026-15927 | redhat_vex | quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation | known affected: 3 | 2026-07-21T06:08:30+00:00 | Vulnerability · Source |
| CVE-2026-64130 | redhat_vex | kernel: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free | known affected: 14 known not affected: 260 | 2026-07-21T06:02:26+00:00 | Vulnerability · Source |
| CVE-2026-64114 | redhat_vex | kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 | known affected: 274 known not affected: 1 | 2026-07-21T06:02:20+00:00 | Vulnerability · Source |
| CVE-2026-64177 | redhat_vex | kernel: phonet/pep: disable BH around forwarded sk_receive_skb() | known affected: 14 known not affected: 260 | 2026-07-21T05:52:04+00:00 | Vulnerability · Source |
| CVE-2026-43216 | redhat_vex | kernel: net: Drop the lock in skb_may_tx_timestamp() | known affected: 246 known not affected: 28 | 2026-07-21T05:49:57+00:00 | Vulnerability · Source |
| CVE-2026-45988 | redhat_vex | kernel: rxrpc: Fix re-decryption of RESPONSE packets | known affected: 184 known not affected: 90 | 2026-07-21T05:44:16+00:00 | Vulnerability · Source |
| CVE-2026-64081 | redhat_vex | kernel: firmware: arm_ffa: Validate framework notification message layout | known not affected: 274 | 2026-07-21T05:43:54+00:00 | Vulnerability · Source |
| CVE-2026-13325 | redhat_vex | virt-handler-rhel9: kubevirt: kubevirt: DisableTLS migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known affected: 2 | 2026-07-21T05:38:20+00:00 | Vulnerability · Source |
| CVE-2024-47068 | redhat_vex | rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | fixed: 9 known affected: 6 known not affected: 118 | 2026-07-21T05:27:35+00:00 | Vulnerability · Source |
| CVE-2024-55565 | redhat_vex | nanoid: nanoid mishandles non-integer values | fixed: 1010 known affected: 45 known not affected: 1011 | 2026-07-21T05:27:08+00:00 | Vulnerability · Source |
| CVE-2025-32996 | redhat_vex | http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-21T05:26:47+00:00 | Vulnerability · Source |
| CVE-2024-45590 | redhat_vex | body-parser: Denial of Service Vulnerability in body-parser | fixed: 234 known affected: 36 known not affected: 912 | 2026-07-21T05:24:42+00:00 | Vulnerability · Source |
| CVE-2024-45296 | redhat_vex | path-to-regexp: Backtracking regular expressions cause ReDoS | fixed: 869 known affected: 39 known not affected: 2095 | 2026-07-21T05:23:58+00:00 | Vulnerability · Source |
| CVE-2025-32997 | redhat_vex | http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-21T05:22:06+00:00 | Vulnerability · Source |
| CVE-2025-27516 | redhat_vex | jinja2: Jinja sandbox breakout through attr filter selecting format method | fixed: 895 known affected: 20 known not affected: 2406 | 2026-07-21T05:22:05+00:00 | Vulnerability · Source |
| CVE-2024-56201 | redhat_vex | jinja2: Jinja has a sandbox breakout through malicious filenames | fixed: 900 known affected: 24 known not affected: 851 | 2026-07-21T05:21:50+00:00 | Vulnerability · Source |
| CVE-2024-56326 | redhat_vex | jinja2: Jinja has a sandbox breakout through indirect reference to format method | fixed: 941 known affected: 33 known not affected: 3068 | 2026-07-21T05:21:50+00:00 | Vulnerability · Source |