VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-49024 | redhat_vex | kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods | fixed: 303 known affected: 22 known not affected: 90 | 2026-07-23T19:52:09+00:00 | Vulnerability · Source |
| CVE-2025-21672 | redhat_vex | kernel: afs: Fix merge preference rule failure condition | fixed: 303 known affected: 22 known not affected: 166 | 2026-07-23T19:52:07+00:00 | Vulnerability · Source |
| CVE-2024-58062 | redhat_vex | kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference | fixed: 303 known affected: 126 known not affected: 62 | 2026-07-23T19:52:03+00:00 | Vulnerability · Source |
| CVE-2024-53241 | redhat_vex | kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) | fixed: 762 known affected: 65 | 2026-07-23T19:51:57+00:00 | Vulnerability · Source |
| CVE-2024-58083 | redhat_vex | kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() | fixed: 303 known affected: 188 | 2026-07-23T19:51:52+00:00 | Vulnerability · Source |
| CVE-2022-49437 | redhat_vex | kernel: powerpc/xive: Fix refcount leak in xive_spapr_init | fixed: 303 known affected: 70 known not affected: 118 | 2026-07-23T19:51:50+00:00 | Vulnerability · Source |
| CVE-2024-57988 | redhat_vex | kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() | fixed: 612 known affected: 50 known not affected: 62 | 2026-07-23T19:51:43+00:00 | Vulnerability · Source |
| CVE-2024-56739 | redhat_vex | kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-23T19:47:19+00:00 | Vulnerability · Source |
| CVE-2024-46744 | redhat_vex | kernel: Squashfs: sanity check symbolic link size | fixed: 303 known affected: 112 | 2026-07-23T19:47:17+00:00 | Vulnerability · Source |
| CVE-2022-49627 | redhat_vex | kernel: ima: Fix potential memory leak in ima_init_crypto() | fixed: 303 known affected: 50 known not affected: 138 | 2026-07-23T19:47:14+00:00 | Vulnerability · Source |
| CVE-2024-50060 | redhat_vex | kernel: io_uring: check if we need to reschedule during overflow flush | fixed: 303 known affected: 22 known not affected: 90 | 2026-07-23T19:47:08+00:00 | Vulnerability · Source |
| CVE-2024-53680 | redhat_vex | kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() | fixed: 303 known affected: 112 | 2026-07-23T19:47:08+00:00 | Vulnerability · Source |
| CVE-2024-57981 | redhat_vex | kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts | fixed: 612 known affected: 112 | 2026-07-23T19:46:49+00:00 | Vulnerability · Source |
| CVE-2022-49845 | redhat_vex | kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization | fixed: 303 known affected: 22 known not affected: 166 | 2026-07-23T19:46:46+00:00 | Vulnerability · Source |
| CVE-2024-49570 | redhat_vex | kernel: drm/xe/tracing: Fix a potential TP_printk UAF | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-23T19:36:44+00:00 | Vulnerability · Source |
| CVE-2024-58015 | redhat_vex | kernel: wifi: ath12k: Fix for out-of bound access error | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-23T19:36:43+00:00 | Vulnerability · Source |
| CVE-2025-37994 | redhat_vex | kernel: usb: typec: ucsi: displayport: Fix NULL pointer access | fixed: 612 known affected: 70 known not affected: 42 | 2026-07-23T19:36:42+00:00 | Vulnerability · Source |
| CVE-2022-49357 | redhat_vex | kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs | fixed: 303 known affected: 70 known not affected: 118 | 2026-07-23T19:36:38+00:00 | Vulnerability · Source |
| CVE-2024-53119 | redhat_vex | kernel: virtio/vsock: Fix accept_queue memory leak | fixed: 303 known affected: 98 known not affected: 14 | 2026-07-23T19:36:35+00:00 | Vulnerability · Source |
| CVE-2024-58014 | redhat_vex | kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() | fixed: 612 known affected: 98 known not affected: 14 | 2026-07-23T19:36:26+00:00 | Vulnerability · Source |
| CVE-2024-58072 | redhat_vex | kernel: wifi: rtlwifi: remove unused check_buddy_priv | fixed: 612 known affected: 98 known not affected: 14 | 2026-07-23T19:31:41+00:00 | Vulnerability · Source |
| CVE-2025-21671 | redhat_vex | kernel: zram: fix potential UAF of zram table | fixed: 612 known affected: 98 known not affected: 14 | 2026-07-23T19:31:34+00:00 | Vulnerability · Source |
| CVE-2024-56672 | redhat_vex | kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() | fixed: 303 known affected: 188 | 2026-07-23T19:31:28+00:00 | Vulnerability · Source |
| CVE-2025-21714 | redhat_vex | kernel: RDMA/mlx5: Fix implicit ODP use after free | fixed: 303 known affected: 174 known not affected: 14 | 2026-07-23T19:31:14+00:00 | Vulnerability · Source |
| CVE-2024-53170 | redhat_vex | kernel: block: fix uaf for flush rq while iterating tags | fixed: 303 known affected: 126 known not affected: 62 | 2026-07-23T19:31:09+00:00 | Vulnerability · Source |
| CVE-2026-47178 | redhat_vex | libheif: libheif: Arbitrary code execution via crafted HEIF file | known not affected: 1 | 2026-07-23T19:16:12+00:00 | Vulnerability · Source |
| CVE-2026-47254 | redhat_vex | libheif: libheif: Heap-buffer-overflow due to out-of-bounds write in sample timing table | known not affected: 1 | 2026-07-23T19:16:08+00:00 | Vulnerability · Source |
| CVE-2026-48029 | redhat_vex | libheif: libheif: Denial of Service via crafted image file processing | known not affected: 1 | 2026-07-23T19:10:53+00:00 | Vulnerability · Source |
| CVE-2018-19211 | redhat_vex | ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c | known affected: 21 | 2026-07-23T19:06:15+00:00 | Vulnerability · Source |
| CVE-2026-53093 | redhat_vex | kernel: wifi: brcmfmac: Fix error pointer dereference | known affected: 232 known not affected: 42 | 2026-07-23T18:41:21+00:00 | Vulnerability · Source |
| CVE-2026-53104 | redhat_vex | kernel: wifi: mt76: Fix memory leak destroying device | known affected: 184 known not affected: 90 | 2026-07-23T18:41:21+00:00 | Vulnerability · Source |
| CVE-2026-53080 | redhat_vex | kernel: net/sched: cls_fw: fix NULL dereference of "old" filters before change() | known affected: 246 known not affected: 28 | 2026-07-23T18:41:17+00:00 | Vulnerability · Source |
| CVE-2026-53105 | redhat_vex | kernel: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi | known affected: 184 known not affected: 90 | 2026-07-23T18:41:13+00:00 | Vulnerability · Source |
| CVE-2026-53083 | redhat_vex | kernel: bpf: Fix RCU stall in bpf_fd_array_map_clear() | known affected: 232 known not affected: 42 | 2026-07-23T18:41:11+00:00 | Vulnerability · Source |
| CVE-2026-53084 | redhat_vex | kernel: bpf: return VMA snapshot from task_vma iterator | known affected: 184 known not affected: 90 | 2026-07-23T18:41:08+00:00 | Vulnerability · Source |
| CVE-2026-53089 | redhat_vex | kernel: bpf: Fix use-after-free in offloaded map/prog info fill | known affected: 232 known not affected: 42 | 2026-07-23T18:41:04+00:00 | Vulnerability · Source |
| CVE-2026-43000 | redhat_vex | keystone: OpenStack Keystone: Privilege escalation via chained application credential impersonation and trust misuse | known affected: 13 | 2026-07-23T17:06:55+00:00 | Vulnerability · Source |
| CVE-2026-42999 | redhat_vex | openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via arbitrary policy attribute injection | known affected: 13 | 2026-07-23T17:06:51+00:00 | Vulnerability · Source |
| CVE-2024-50076 | redhat_vex | kernel: vt: prevent kernel-infoleak in con_font_get() | fixed: 305 known affected: 150 known not affected: 48 | 2026-07-23T16:24:44+00:00 | Vulnerability · Source |
| CVE-2026-50243 | microsoft_vex | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL | fixed: 1 known affected: 1 | 2026-07-23T14:45:12+00:00 | Vulnerability · Source |
| CVE-2026-41637 | microsoft_vex | Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries | fixed: 1 known affected: 1 | 2026-07-23T14:45:04+00:00 | Vulnerability · Source |
| CVE-2026-50252 | microsoft_vex | Possible cache poisoning attack by mapping source port population per thread | fixed: 1 known affected: 1 | 2026-07-23T14:44:57+00:00 | Vulnerability · Source |
| CVE-2026-50251 | microsoft_vex | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush | fixed: 1 known affected: 1 | 2026-07-23T14:44:49+00:00 | Vulnerability · Source |
| CVE-2026-55991 | microsoft_vex | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 | fixed: 1 known affected: 1 | 2026-07-23T14:44:41+00:00 | Vulnerability · Source |
| CVE-2026-55990 | microsoft_vex | Packet of death for a DNSCrypt misconfigured Unbound | fixed: 1 known affected: 1 | 2026-07-23T14:44:34+00:00 | Vulnerability · Source |
| CVE-2026-50046 | microsoft_vex | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out | fixed: 1 known affected: 1 | 2026-07-23T14:44:26+00:00 | Vulnerability · Source |
| CVE-2026-14586 | microsoft_vex | Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments | fixed: 1 known affected: 1 | 2026-07-23T14:44:19+00:00 | Vulnerability · Source |
| CVE-2026-42955 | microsoft_vex | Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records | fixed: 1 known affected: 1 | 2026-07-23T14:44:11+00:00 | Vulnerability · Source |
| CVE-2026-46582 | microsoft_vex | A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path | fixed: 1 known affected: 1 | 2026-07-23T14:44:03+00:00 | Vulnerability · Source |
| CVE-2026-54478 | microsoft_vex | DNS Cookie bypass when combined with proxy-protocol use | fixed: 1 known affected: 1 | 2026-07-23T14:43:56+00:00 | Vulnerability · Source |