VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283039 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47691 | redhat_vex | io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records | fixed: 6 known affected: 30 known not affected: 11 | 2026-07-20T15:18:51+00:00 | Vulnerability · Source |
| CVE-2026-46340 | redhat_vex | netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments | fixed: 2 known affected: 3 known not affected: 2 | 2026-07-20T15:18:48+00:00 | Vulnerability · Source |
| CVE-2026-45674 | redhat_vex | netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation | fixed: 6 known affected: 30 known not affected: 11 | 2026-07-20T15:18:45+00:00 | Vulnerability · Source |
| CVE-2026-44893 | redhat_vex | netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message | fixed: 10 known affected: 24 known not affected: 67 | 2026-07-20T15:18:24+00:00 | Vulnerability · Source |
| CVE-2026-44890 | redhat_vex | netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:18:19+00:00 | Vulnerability · Source |
| CVE-2026-44250 | redhat_vex | netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:17:42+00:00 | Vulnerability · Source |
| CVE-2026-44248 | redhat_vex | netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header | fixed: 2 known affected: 3 known not affected: 3 | 2026-07-20T15:17:36+00:00 | Vulnerability · Source |
| CVE-2026-42583 | redhat_vex | netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder | fixed: 6 known affected: 34 known not affected: 87 | 2026-07-20T15:17:30+00:00 | Vulnerability · Source |
| CVE-2026-40984 | redhat_vex | micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests | fixed: 3 known affected: 21 known not affected: 1 | 2026-07-20T15:17:18+00:00 | Vulnerability · Source |
| CVE-2026-40983 | redhat_vex | micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests | fixed: 2 known affected: 14 known not affected: 4 under investigation: 9 | 2026-07-20T15:17:17+00:00 | Vulnerability · Source |
| CVE-2025-67030 | redhat_vex | org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method | fixed: 1246 known affected: 187 known not affected: 82 | 2026-07-20T15:16:47+00:00 | Vulnerability · Source |
| CVE-2026-63808 | microsoft_vex | exfat: fix potential use-after-free in exfat_find_dir_entry() | known affected: 1 | 2026-07-20T14:47:15+00:00 | Vulnerability · Source |
| CVE-2026-53381 | microsoft_vex | virtiofs: fix UAF on submount umount | known affected: 1 | 2026-07-20T14:47:10+00:00 | Vulnerability · Source |
| CVE-2026-53398 | microsoft_vex | NFSD: Fix SECINFO_NO_NAME decode error cleanup | known affected: 1 | 2026-07-20T14:46:58+00:00 | Vulnerability · Source |
| CVE-2026-63795 | microsoft_vex | 9p: avoid putting oldfid in p9_client_walk() error path | known affected: 1 | 2026-07-20T14:46:53+00:00 | Vulnerability · Source |
| CVE-2026-53382 | microsoft_vex | media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si | known affected: 1 | 2026-07-20T14:46:47+00:00 | Vulnerability · Source |
| CVE-2026-53383 | microsoft_vex | ksmbd: reject non-VALID session in compound request branch | known affected: 1 | 2026-07-20T14:46:41+00:00 | Vulnerability · Source |
| CVE-2026-63814 | microsoft_vex | f2fs: validate ACL entry sizes in f2fs_acl_from_disk() | known affected: 1 | 2026-07-20T14:46:36+00:00 | Vulnerability · Source |
| CVE-2026-53390 | microsoft_vex | ksmbd: fix out-of-bounds read in smb_check_perm_dacl() | known affected: 1 | 2026-07-20T14:46:19+00:00 | Vulnerability · Source |
| CVE-2026-53385 | microsoft_vex | vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | known affected: 1 | 2026-07-20T14:46:13+00:00 | Vulnerability · Source |
| CVE-2026-63812 | microsoft_vex | f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() | known affected: 1 | 2026-07-20T14:46:07+00:00 | Vulnerability · Source |
| CVE-2026-63802 | microsoft_vex | blk-cgroup: fix UAF in __blkcg_rstat_flush() | known affected: 1 | 2026-07-20T14:46:02+00:00 | Vulnerability · Source |
| CVE-2026-63804 | microsoft_vex | gfs2: fix use-after-free in gfs2_qd_dealloc | known affected: 1 | 2026-07-20T14:45:51+00:00 | Vulnerability · Source |
| CVE-2026-63817 | microsoft_vex | f2fs: validate compress cache inode only when enabled | known affected: 1 | 2026-07-20T14:45:45+00:00 | Vulnerability · Source |
| CVE-2026-63797 | microsoft_vex | rpmsg: char: Fix use-after-free on probe error path | known affected: 1 | 2026-07-20T14:45:33+00:00 | Vulnerability · Source |
| CVE-2026-63823 | microsoft_vex | keys: Pin request_key_auth payload in instantiate paths | known affected: 1 | 2026-07-20T14:45:22+00:00 | Vulnerability · Source |
| CVE-2026-63798 | microsoft_vex | irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove | known affected: 1 | 2026-07-20T14:45:16+00:00 | Vulnerability · Source |
| CVE-2026-63821 | microsoft_vex | wifi: rtw88: usb: fix memory leaks on USB write failures | known affected: 1 | 2026-07-20T14:45:05+00:00 | Vulnerability · Source |
| CVE-2026-63836 | microsoft_vex | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | known affected: 1 | 2026-07-20T14:44:59+00:00 | Vulnerability · Source |
| CVE-2026-53397 | microsoft_vex | nfsd: fix posix_acl leak on SETACL decode failure | known affected: 1 | 2026-07-20T14:44:54+00:00 | Vulnerability · Source |
| CVE-2026-63794 | microsoft_vex | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | known affected: 1 | 2026-07-20T14:44:48+00:00 | Vulnerability · Source |
| CVE-2026-53388 | microsoft_vex | fuse: re-lock request before replacing page cache folio | known affected: 1 | 2026-07-20T14:44:42+00:00 | Vulnerability · Source |
| CVE-2026-63822 | microsoft_vex | wifi: ath11k: fix warning when unbinding | known affected: 1 | 2026-07-20T14:44:36+00:00 | Vulnerability · Source |
| CVE-2026-53391 | microsoft_vex | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | known affected: 1 | 2026-07-20T14:44:31+00:00 | Vulnerability · Source |
| CVE-2026-63830 | microsoft_vex | net: skmsg: preserve sg.copy across SG transforms | known affected: 1 | 2026-07-20T14:44:25+00:00 | Vulnerability · Source |
| CVE-2026-53384 | microsoft_vex | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | known affected: 1 | 2026-07-20T14:44:19+00:00 | Vulnerability · Source |
| CVE-2026-63834 | microsoft_vex | batman-adv: tp_meter: restrict number of unacked list entries | known affected: 1 | 2026-07-20T14:44:14+00:00 | Vulnerability · Source |
| CVE-2026-63803 | microsoft_vex | hdlc_ppp: sync per-proto timers before freeing hdlc state | known affected: 1 | 2026-07-20T14:44:08+00:00 | Vulnerability · Source |
| CVE-2026-63807 | microsoft_vex | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | known affected: 1 | 2026-07-20T14:44:03+00:00 | Vulnerability · Source |
| CVE-2026-63835 | microsoft_vex | batman-adv: v: prevent OGM aggregation on disabled hardif | known affected: 1 | 2026-07-20T14:43:57+00:00 | Vulnerability · Source |
| CVE-2026-63809 | microsoft_vex | bpf: use kvfree() for replaced sysctl write buffer | known affected: 1 | 2026-07-20T14:43:51+00:00 | Vulnerability · Source |
| CVE-2026-53393 | microsoft_vex | nfsd: reset write verifier on deferred writeback errors | known affected: 1 | 2026-07-20T14:43:45+00:00 | Vulnerability · Source |
| CVE-2026-53387 | microsoft_vex | iio: light: veml6075: add bounds check to veml6075_it_ms index | known affected: 1 | 2026-07-20T14:43:40+00:00 | Vulnerability · Source |
| CVE-2026-63832 | microsoft_vex | wifi: mt76: add wcid publish check in mt76_sta_add | known affected: 1 | 2026-07-20T14:43:34+00:00 | Vulnerability · Source |
| CVE-2026-53375 | microsoft_vex | drm/amdgpu/vce: Prevent partial address patches | known affected: 1 | 2026-07-20T14:43:29+00:00 | Vulnerability · Source |
| CVE-2026-63829 | microsoft_vex | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | known affected: 1 | 2026-07-20T14:43:23+00:00 | Vulnerability · Source |
| CVE-2026-63818 | microsoft_vex | f2fs: validate orphan inode entry count | known affected: 1 | 2026-07-20T14:43:17+00:00 | Vulnerability · Source |
| CVE-2026-63858 | microsoft_vex | netfilter: nf_tables: add hook transactions for device deletions | known affected: 1 | 2026-07-20T14:43:12+00:00 | Vulnerability · Source |
| CVE-2026-63826 | microsoft_vex | fbdev: fix use-after-free in store_modes() | known affected: 1 | 2026-07-20T14:43:06+00:00 | Vulnerability · Source |
| CVE-2026-53399 | microsoft_vex | nfsd: release layout stid on setlease failure | known affected: 1 | 2026-07-20T14:43:00+00:00 | Vulnerability · Source |