VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222955 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-31697 | redhat_vex | kernel: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | known affected: 232 known not affected: 42 | 2026-07-02T12:48:14+00:00 | Vulnerability · Source |
| CVE-2026-31693 | redhat_vex | kernel: cifs: some missing initializations on replay | known affected: 232 known not affected: 42 | 2026-07-02T12:48:11+00:00 | Vulnerability · Source |
| CVE-2026-28532 | redhat_vex | FRRouting: frr: FRRouting: Denial of Service due to integer overflow in OSPF TLV parser functions | known affected: 13 | 2026-07-02T12:48:10+00:00 | Vulnerability · Source |
| CVE-2026-3592 | redhat_vex | bind: Amplification vulnerabilities via self-pointed glue records | fixed: 4 known affected: 86 | 2026-07-02T12:48:05+00:00 | Vulnerability · Source |
| CVE-2025-61971 | redhat_vex | microcode_ctl: Microcode: Loss of SEV-SNP guest integrity via NBIO register modification | known affected: 6 | 2026-07-02T12:48:02+00:00 | Vulnerability · Source |
| CVE-2026-45190 | redhat_vex | Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation | known affected: 323 | 2026-07-02T12:47:52+00:00 | Vulnerability · Source |
| CVE-2026-43896 | redhat_vex | jq: stack overflow in recursive object merge | fixed: 3 known affected: 14 | 2026-07-02T12:47:47+00:00 | Vulnerability · Source |
| CVE-2026-43864 | redhat_vex | mutt: Mutt: Denial of Service via null pointer dereference in show_sig_summary | known affected: 9 | 2026-07-02T12:47:44+00:00 | Vulnerability · Source |
| CVE-2026-43620 | redhat_vex | rsync: rsync: Remote Denial of Service via Out-of-bounds Read | known affected: 16 | 2026-07-02T12:47:41+00:00 | Vulnerability · Source |
| CVE-2026-43619 | redhat_vex | rsync: rsync: Symlink race vulnerability allows unauthorized file operations | known affected: 16 | 2026-07-02T12:47:40+00:00 | Vulnerability · Source |
| CVE-2026-43617 | redhat_vex | rsync: rsync: Hostname-based ACL bypass in daemon chroot configuration | known affected: 16 | 2026-07-02T12:47:37+00:00 | Vulnerability · Source |
| CVE-2026-43475 | redhat_vex | kernel: scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT | known affected: 274 | 2026-07-02T12:47:35+00:00 | Vulnerability · Source |
| CVE-2026-43469 | redhat_vex | kernel: xprtrdma: Decrement re_receiving on the early exit paths | known affected: 246 known not affected: 28 | 2026-07-02T12:47:32+00:00 | Vulnerability · Source |
| CVE-2026-43466 | redhat_vex | kernel: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery | known affected: 274 | 2026-07-02T12:47:27+00:00 | Vulnerability · Source |
| CVE-2026-43456 | redhat_vex | kernel: bonding: fix type confusion in bond_setup_by_slave() | known affected: 274 | 2026-07-02T12:47:19+00:00 | Vulnerability · Source |
| CVE-2026-43441 | redhat_vex | kernel: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled | known affected: 198 known not affected: 76 | 2026-07-02T12:47:14+00:00 | Vulnerability · Source |
| CVE-2026-43440 | redhat_vex | kernel: net/mana: Null service_wq on setup error to prevent double destroy | known affected: 232 known not affected: 42 | 2026-07-02T12:47:09+00:00 | Vulnerability · Source |
| CVE-2026-43437 | redhat_vex | kernel: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() | known affected: 260 known not affected: 14 | 2026-07-02T12:47:09+00:00 | Vulnerability · Source |
| CVE-2026-43415 | redhat_vex | kernel: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend | known affected: 76 known not affected: 198 | 2026-07-02T12:47:01+00:00 | Vulnerability · Source |
| CVE-2026-43421 | redhat_vex | kernel: usb: gadget: f_ncm: Fix net_device lifecycle with device_move | known affected: 76 known not affected: 198 | 2026-07-02T12:47:00+00:00 | Vulnerability · Source |
| CVE-2026-43413 | redhat_vex | kernel: scsi: hisi_sas: Fix NULL pointer exception during user_scan() | known affected: 232 known not affected: 42 | 2026-07-02T12:46:59+00:00 | Vulnerability · Source |
| CVE-2026-43409 | redhat_vex | kernel: kprobes: avoid crash when rmmod/insmod after ftrace killed | known affected: 274 | 2026-07-02T12:46:54+00:00 | Vulnerability · Source |
| CVE-2026-43406 | redhat_vex | kernel: libceph: prevent potential out-of-bounds reads in process_message_header() | known affected: 232 known not affected: 42 | 2026-07-02T12:46:50+00:00 | Vulnerability · Source |
| CVE-2026-43403 | redhat_vex | kernel: nsfs: tighten permission checks for ns iteration ioctls | known affected: 76 known not affected: 198 | 2026-07-02T12:46:46+00:00 | Vulnerability · Source |
| CVE-2026-43402 | redhat_vex | kernel: kthread: consolidate kthread exit paths to prevent use-after-free | known affected: 198 known not affected: 76 | 2026-07-02T12:46:45+00:00 | Vulnerability · Source |
| CVE-2026-43374 | redhat_vex | kernel: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry | known affected: 184 known not affected: 90 | 2026-07-02T12:46:40+00:00 | Vulnerability · Source |
| CVE-2026-43366 | redhat_vex | kernel: io_uring/kbuf: check if target buffer list is still legacy on recycle | known affected: 184 known not affected: 90 | 2026-07-02T12:46:36+00:00 | Vulnerability · Source |
| CVE-2026-43365 | redhat_vex | kernel: xfs: fix undersized l_iclog_roundoff values | known affected: 246 known not affected: 28 | 2026-07-02T12:46:35+00:00 | Vulnerability · Source |
| CVE-2026-6870 | redhat_vex | Wireshark: Wireshark: Denial of service via GSM RP protocol dissector crash | known affected: 20 | 2026-07-02T12:46:31+00:00 | Vulnerability · Source |
| CVE-2026-6867 | redhat_vex | wireshark: Wireshark: Denial of service via SMB2 protocol dissector crash | known affected: 20 | 2026-07-02T12:46:29+00:00 | Vulnerability · Source |
| CVE-2026-6534 | redhat_vex | wireshark: Wireshark: Denial of Service via USB HID protocol dissector infinite loop | known affected: 20 | 2026-07-02T12:46:26+00:00 | Vulnerability · Source |
| CVE-2026-6532 | redhat_vex | wireshark: Wireshark: Denial of service via Kismet protocol dissector crash | known affected: 20 | 2026-07-02T12:46:24+00:00 | Vulnerability · Source |
| CVE-2026-6530 | redhat_vex | wireshark: Wireshark: Denial of Service via DCP-ETSI protocol dissector crash | known affected: 20 | 2026-07-02T12:46:22+00:00 | Vulnerability · Source |
| CVE-2026-6524 | redhat_vex | wireshark: Wireshark: Denial of Service via MySQL protocol dissector crash | known affected: 20 | 2026-07-02T12:46:20+00:00 | Vulnerability · Source |
| CVE-2026-6402 | redhat_vex | webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure | known affected: 77 | 2026-07-02T12:46:18+00:00 | Vulnerability · Source |
| CVE-2026-5950 | redhat_vex | bind: Unbounded resend loop in BIND 9 resolver | fixed: 4 known affected: 86 | 2026-07-02T12:46:14+00:00 | Vulnerability · Source |
| CVE-2026-5404 | redhat_vex | wireshark: Wireshark: Denial of service due to K12 RF5 file parser crash | known affected: 20 | 2026-07-02T12:46:11+00:00 | Vulnerability · Source |
| CVE-2026-5407 | redhat_vex | Wireshark: Wireshark: Denial of Service from malicious SMB2 protocol data | known affected: 20 | 2026-07-02T12:46:11+00:00 | Vulnerability · Source |
| CVE-2026-5401 | redhat_vex | wireshark: Wireshark: Denial of service via AFP Spotlight protocol dissector crash | known affected: 20 | 2026-07-02T12:44:19+00:00 | Vulnerability · Source |
| CVE-2026-58517 | redhat_vex | wikilambda: WikiLambda Extension: Authentication bypass due to improper input neutralization | known not affected: 1 | 2026-07-02T12:31:28+00:00 | Vulnerability · Source |
| CVE-2026-43048 | redhat_vex | kernel: HID: core: Mitigate potential OOB by removing bogus memset() | known affected: 274 | 2026-07-02T12:26:50+00:00 | Vulnerability · Source |
| CVE-2021-34432 | redhat_vex | mosquitto: DoS when client tries to send a PUBLISH packet with topic length = 0 | known not affected: 1 | 2026-07-02T11:20:47+00:00 | Vulnerability · Source |
| CVE-2026-42960 | redhat_vex | unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance | fixed: 4 known affected: 30 | 2026-07-02T10:33:58+00:00 | Vulnerability · Source |
| CVE-2026-49851 | redhat_vex | Mistune: Mistune: Denial of Service via crafted Markdown input | known affected: 20 known not affected: 5 | 2026-07-02T09:42:59+00:00 | Vulnerability · Source |
| CVE-2026-9800 | redhat_vex | keycloak-policy-enforcer: Keycloak Policy Enforcer: Authorization bypass via incorrect URI comparison | fixed: 20 known affected: 3 under investigation: 6 | 2026-07-02T09:35:16+00:00 | Vulnerability · Source |
| CVE-2026-45287 | redhat_vex | go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak | fixed: 30 known affected: 116 known not affected: 75 under investigation: 883 | 2026-07-02T09:33:38+00:00 | Vulnerability · Source |
| CVE-2022-25881 | redhat_vex | http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability | fixed: 290 known affected: 60 known not affected: 38 | 2026-07-02T09:02:53+00:00 | Vulnerability · Source |
| CVE-2024-22019 | redhat_vex | nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks | fixed: 402 known affected: 1 | 2026-07-02T08:59:00+00:00 | Vulnerability · Source |
| CVE-2026-54257 | redhat_vex | electron: Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow | known not affected: 1 | 2026-07-02T08:58:24+00:00 | Vulnerability · Source |
| CVE-2016-2183 | redhat_vex | SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) | fixed: 1036 known affected: 26 known not affected: 749 | 2026-07-02T08:57:53+00:00 | Vulnerability · Source |