VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283068 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64068 | redhat_vex | kernel: netfs: Fix missing locking around retry adding new subreqs | known affected: 76 known not affected: 198 | 2026-07-20T16:47:31+00:00 | Vulnerability · Source |
| CVE-2026-64122 | redhat_vex | kernel: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover | known affected: 14 known not affected: 261 | 2026-07-20T16:47:26+00:00 | Vulnerability · Source |
| CVE-2026-64150 | redhat_vex | kernel: netfilter: nft_inner: release local_lock before re-enabling softirqs | known affected: 76 known not affected: 198 | 2026-07-20T16:47:22+00:00 | Vulnerability · Source |
| CVE-2026-64181 | redhat_vex | kernel: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() | known affected: 14 known not affected: 260 | 2026-07-20T16:47:17+00:00 | Vulnerability · Source |
| CVE-2026-64115 | redhat_vex | kernel: vsock/vmci: fix UAF when peer resets connection during handshake | known affected: 260 known not affected: 14 | 2026-07-20T16:47:12+00:00 | Vulnerability · Source |
| CVE-2026-63803 | redhat_vex | kernel: hdlc_ppp: sync per-proto timers before freeing hdlc state | known affected: 274 known not affected: 1 | 2026-07-20T16:47:04+00:00 | Vulnerability · Source |
| CVE-2026-63804 | redhat_vex | kernel: gfs2: fix use-after-free in gfs2_qd_dealloc | known not affected: 1 | 2026-07-20T16:47:02+00:00 | Vulnerability · Source |
| CVE-2026-64041 | redhat_vex | kernel: ASoC: codecs: fs210x: fix possible buffer overflow | known affected: 76 known not affected: 198 | 2026-07-20T16:46:56+00:00 | Vulnerability · Source |
| CVE-2026-64077 | redhat_vex | kernel: netfilter: ebtables: move to two-stage removal scheme | known affected: 90 known not affected: 184 | 2026-07-20T16:46:47+00:00 | Vulnerability · Source |
| CVE-2026-64126 | redhat_vex | kernel: Bluetooth: MGMT: validate Add Extended Advertising Data length | known affected: 232 known not affected: 43 | 2026-07-20T16:46:44+00:00 | Vulnerability · Source |
| CVE-2026-16242 | redhat_vex | hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates | known affected: 6 known not affected: 24 | 2026-07-20T16:46:29+00:00 | Vulnerability · Source |
| CVE-2026-64136 | redhat_vex | kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() | known affected: 184 known not affected: 90 | 2026-07-20T16:44:47+00:00 | Vulnerability · Source |
| CVE-2026-64047 | redhat_vex | kernel: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring | known affected: 232 known not affected: 42 | 2026-07-20T16:44:42+00:00 | Vulnerability · Source |
| CVE-2026-42586 | redhat_vex | netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder | fixed: 2 known affected: 3 known not affected: 2 | 2026-07-20T16:43:24+00:00 | Vulnerability · Source |
| CVE-2026-34077 | redhat_vex | react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling | fixed: 1 known affected: 64 known not affected: 8 under investigation: 101 | 2026-07-20T16:43:12+00:00 | Vulnerability · Source |
| CVE-2026-33245 | redhat_vex | react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects | fixed: 45 known affected: 63 known not affected: 521 under investigation: 93 | 2026-07-20T16:43:08+00:00 | Vulnerability · Source |
| CVE-2026-63831 | redhat_vex | kernel: mac802154: llsec: add skb_cow_data() before in-place crypto | known not affected: 1 | 2026-07-20T16:41:41+00:00 | Vulnerability · Source |
| CVE-2026-7261 | redhat_vex | PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling | fixed: 1718 known affected: 54 known not affected: 47 | 2026-07-20T16:37:18+00:00 | Vulnerability · Source |
| CVE-2026-63830 | redhat_vex | kernel: net: skmsg: preserve sg.copy across SG transforms | known affected: 246 known not affected: 29 | 2026-07-20T16:36:47+00:00 | Vulnerability · Source |
| CVE-2026-63829 | redhat_vex | kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | known affected: 260 under investigation: 14 | 2026-07-20T16:33:24+00:00 | Vulnerability · Source |
| CVE-2024-27289 | redhat_vex | pgx: SQL Injection via Line Comment Creation | fixed: 41 known affected: 29 known not affected: 786 | 2026-07-20T16:16:30+00:00 | Vulnerability · Source |
| CVE-2023-53781 | redhat_vex | kernel: smc: Fix use-after-free in tcp_write_timer_handler() | fixed: 453 known affected: 22 known not affected: 118 | 2026-07-20T15:46:28+00:00 | Vulnerability · Source |
| CVE-2024-57982 | redhat_vex | kernel: xfrm: state: fix out-of-bounds read during lookup | fixed: 612 known affected: 84 known not affected: 28 | 2026-07-20T15:46:07+00:00 | Vulnerability · Source |
| CVE-2026-64168 | redhat_vex | kernel: spi: sprd: fix error pointer deref after DMA setup failure | known not affected: 274 | 2026-07-20T15:45:49+00:00 | Vulnerability · Source |
| CVE-2026-53402 | redhat_vex | kernel: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | known affected: 184 known not affected: 90 | 2026-07-20T15:44:48+00:00 | Vulnerability · Source |
| CVE-2026-53400 | redhat_vex | kernel: i2c: core: fix adapter registration race | known affected: 232 known not affected: 42 | 2026-07-20T15:43:52+00:00 | Vulnerability · Source |
| CVE-2026-16277 | redhat_vex | rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | known affected: 4 | 2026-07-20T15:42:05+00:00 | Vulnerability · Source |
| CVE-2026-64112 | redhat_vex | kernel: rbd: eliminate a race in lock_dwork draining on unmap | known affected: 260 known not affected: 14 | 2026-07-20T15:42:02+00:00 | Vulnerability · Source |
| CVE-2026-53397 | redhat_vex | kernel: nfsd: fix posix_acl leak on SETACL decode failure | known affected: 274 | 2026-07-20T15:39:51+00:00 | Vulnerability · Source |
| CVE-2026-46338 | redhat_vex | pymdown-extensions: PyMdown Extensions: Information disclosure via crafted Markdown snippets | known affected: 3 known not affected: 1 | 2026-07-20T15:34:30+00:00 | Vulnerability · Source |
| CVE-2026-53394 | redhat_vex | kernel: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race | known affected: 198 known not affected: 77 | 2026-07-20T15:34:20+00:00 | Vulnerability · Source |
| CVE-2026-53395 | redhat_vex | kernel: nfsd: fix dead ACL conflict guard in nfsd4_create | known affected: 90 known not affected: 184 | 2026-07-20T15:34:19+00:00 | Vulnerability · Source |
| CVE-2026-58010 | redhat_vex | glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | known affected: 46 known not affected: 1 | 2026-07-20T15:34:13+00:00 | Vulnerability · Source |
| CVE-2026-53396 | redhat_vex | kernel: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file | known not affected: 261 under investigation: 14 | 2026-07-20T15:30:29+00:00 | Vulnerability · Source |
| CVE-2026-53399 | redhat_vex | kernel: nfsd: release layout stid on setlease failure | known affected: 260 known not affected: 15 | 2026-07-20T15:29:44+00:00 | Vulnerability · Source |
| CVE-2026-53398 | redhat_vex | kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup | known affected: 184 known not affected: 76 under investigation: 14 | 2026-07-20T15:27:46+00:00 | Vulnerability · Source |
| CVE-2026-64042 | redhat_vex | kernel: vfio/pci: Check BAR resources before exporting a DMABUF | known affected: 76 known not affected: 198 | 2026-07-20T15:27:35+00:00 | Vulnerability · Source |
| CVE-2026-64037 | redhat_vex | kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled | known affected: 184 known not affected: 91 | 2026-07-20T15:27:33+00:00 | Vulnerability · Source |
| CVE-2026-64132 | redhat_vex | kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() | known affected: 76 known not affected: 185 under investigation: 14 | 2026-07-20T15:27:32+00:00 | Vulnerability · Source |
| CVE-2026-64051 | redhat_vex | kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap | known affected: 76 known not affected: 199 | 2026-07-20T15:27:30+00:00 | Vulnerability · Source |
| CVE-2026-64061 | redhat_vex | kernel: netfs: Fix early put of sink folio in netfs_read_gaps() | known affected: 76 known not affected: 199 | 2026-07-20T15:27:28+00:00 | Vulnerability · Source |
| CVE-2026-64137 | redhat_vex | kernel: smb: client: require net admin for CIFS SWN netlink | known not affected: 274 | 2026-07-20T15:25:59+00:00 | Vulnerability · Source |
| CVE-2026-63797 | redhat_vex | kernel: rpmsg: char: Fix use-after-free on probe error path | known affected: 76 known not affected: 198 | 2026-07-20T15:23:12+00:00 | Vulnerability · Source |
| CVE-2026-64621 | redhat_vex | FreeRDP: FreeRDP: Double-free vulnerability via crafted .rdp file leading to potential remote code execution | known affected: 31 | 2026-07-20T15:22:52+00:00 | Vulnerability · Source |
| CVE-2026-64113 | redhat_vex | kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | known affected: 260 known not affected: 15 | 2026-07-20T15:22:22+00:00 | Vulnerability · Source |
| CVE-2026-63795 | redhat_vex | kernel: 9p: avoid putting oldfid in p9_client_walk() error path | known not affected: 260 under investigation: 14 | 2026-07-20T15:22:17+00:00 | Vulnerability · Source |
| CVE-2026-63794 | redhat_vex | kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | known affected: 232 known not affected: 42 | 2026-07-20T15:22:14+00:00 | Vulnerability · Source |
| CVE-2026-50011 | redhat_vex | netty-codec-redis: Netty: Denial of Service via malicious Redis array header | fixed: 2 known affected: 3 known not affected: 1 | 2026-07-20T15:19:05+00:00 | Vulnerability · Source |
| CVE-2026-48059 | redhat_vex | netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers | fixed: 10 known affected: 26 known not affected: 66 | 2026-07-20T15:18:59+00:00 | Vulnerability · Source |
| CVE-2026-48043 | redhat_vex | netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak | fixed: 22 known affected: 32 known not affected: 56 | 2026-07-20T15:18:57+00:00 | Vulnerability · Source |