VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222495 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43033 | redhat_vex | kernel: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | known affected: 232 known not affected: 42 | 2026-07-02T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-43028 | redhat_vex | kernel: netfilter: x_tables: ensure names are nul-terminated | known affected: 246 known not affected: 28 | 2026-07-02T12:49:27+00:00 | Vulnerability · Source |
| CVE-2026-43025 | redhat_vex | kernel: netfilter: ctnetlink: ignore explicit helper on new expectations | known affected: 274 | 2026-07-02T12:49:26+00:00 | Vulnerability · Source |
| CVE-2026-43019 | redhat_vex | kernel: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync | known affected: 198 known not affected: 76 | 2026-07-02T12:49:23+00:00 | Vulnerability · Source |
| CVE-2026-43018 | redhat_vex | kernel: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt | known affected: 246 known not affected: 28 | 2026-07-02T12:49:22+00:00 | Vulnerability · Source |
| CVE-2026-43016 | redhat_vex | kernel: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() | known affected: 184 known not affected: 90 | 2026-07-02T12:49:20+00:00 | Vulnerability · Source |
| CVE-2026-43009 | redhat_vex | kernel: bpf: Fix incorrect pruning due to atomic fetch precision tracking | known affected: 232 known not affected: 42 | 2026-07-02T12:49:16+00:00 | Vulnerability · Source |
| CVE-2026-42934 | redhat_vex | nginx: ngx_http_charset_module: information disclosure and denial of service | known affected: 55 known not affected: 1 | 2026-07-02T12:49:12+00:00 | Vulnerability · Source |
| CVE-2026-40020 | redhat_vex | dovecot: dovecot: Denial of Service via IMAP SETACL command injection | known affected: 24 | 2026-07-02T12:49:05+00:00 | Vulnerability · Source |
| CVE-2026-33603 | redhat_vex | dovecot: Dovecot: Information disclosure via SCRAM TLS channel binding bypass | known affected: 24 | 2026-07-02T12:48:49+00:00 | Vulnerability · Source |
| CVE-2026-31779 | redhat_vex | kernel: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() | known affected: 232 known not affected: 42 | 2026-07-02T12:48:45+00:00 | Vulnerability · Source |
| CVE-2026-31774 | redhat_vex | kernel: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() | known affected: 184 known not affected: 90 | 2026-07-02T12:48:43+00:00 | Vulnerability · Source |
| CVE-2026-31773 | redhat_vex | kernel: Bluetooth: SMP: derive legacy responder STK authentication from MITM state | known affected: 232 known not affected: 42 | 2026-07-02T12:48:39+00:00 | Vulnerability · Source |
| CVE-2026-31771 | redhat_vex | kernel: Bluetooth: hci_event: move wake reason storage into validated event handlers | known affected: 246 known not affected: 28 | 2026-07-02T12:48:36+00:00 | Vulnerability · Source |
| CVE-2026-31758 | redhat_vex | kernel: usb: usbtmc: Flush anchored URBs in usbtmc_release | known affected: 274 | 2026-07-02T12:48:35+00:00 | Vulnerability · Source |
| CVE-2026-31742 | redhat_vex | kernel: vt: discard stale unicode buffer on alt screen exit after resize | known affected: 260 known not affected: 14 | 2026-07-02T12:48:31+00:00 | Vulnerability · Source |
| CVE-2026-31739 | redhat_vex | kernel: crypto: tegra - Add missing CRYPTO_ALG_ASYNC | known affected: 184 known not affected: 90 | 2026-07-02T12:48:30+00:00 | Vulnerability · Source |
| CVE-2026-31731 | redhat_vex | kernel: thermal: core: Address thermal zone removal races with resume | known affected: 184 known not affected: 90 | 2026-07-02T12:48:26+00:00 | Vulnerability · Source |
| CVE-2026-31708 | redhat_vex | kernel: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | known affected: 232 known not affected: 42 | 2026-07-02T12:48:24+00:00 | Vulnerability · Source |
| CVE-2026-31700 | redhat_vex | kernel: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | known affected: 246 known not affected: 28 | 2026-07-02T12:48:21+00:00 | Vulnerability · Source |
| CVE-2026-31699 | redhat_vex | kernel: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | known affected: 232 known not affected: 42 | 2026-07-02T12:48:20+00:00 | Vulnerability · Source |
| CVE-2026-31698 | redhat_vex | kernel: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | known affected: 232 known not affected: 42 | 2026-07-02T12:48:15+00:00 | Vulnerability · Source |
| CVE-2026-31697 | redhat_vex | kernel: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | known affected: 232 known not affected: 42 | 2026-07-02T12:48:14+00:00 | Vulnerability · Source |
| CVE-2026-31693 | redhat_vex | kernel: cifs: some missing initializations on replay | known affected: 232 known not affected: 42 | 2026-07-02T12:48:11+00:00 | Vulnerability · Source |
| CVE-2026-28532 | redhat_vex | FRRouting: frr: FRRouting: Denial of Service due to integer overflow in OSPF TLV parser functions | known affected: 13 | 2026-07-02T12:48:10+00:00 | Vulnerability · Source |
| CVE-2026-3592 | redhat_vex | bind: Amplification vulnerabilities via self-pointed glue records | fixed: 4 known affected: 86 | 2026-07-02T12:48:05+00:00 | Vulnerability · Source |
| CVE-2025-61971 | redhat_vex | microcode_ctl: Microcode: Loss of SEV-SNP guest integrity via NBIO register modification | known affected: 6 | 2026-07-02T12:48:02+00:00 | Vulnerability · Source |
| CVE-2026-45190 | redhat_vex | Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation | known affected: 323 | 2026-07-02T12:47:52+00:00 | Vulnerability · Source |
| CVE-2026-43896 | redhat_vex | jq: stack overflow in recursive object merge | fixed: 3 known affected: 14 | 2026-07-02T12:47:47+00:00 | Vulnerability · Source |
| CVE-2026-43864 | redhat_vex | mutt: Mutt: Denial of Service via null pointer dereference in show_sig_summary | known affected: 9 | 2026-07-02T12:47:44+00:00 | Vulnerability · Source |
| CVE-2026-43620 | redhat_vex | rsync: rsync: Remote Denial of Service via Out-of-bounds Read | known affected: 16 | 2026-07-02T12:47:41+00:00 | Vulnerability · Source |
| CVE-2026-43619 | redhat_vex | rsync: rsync: Symlink race vulnerability allows unauthorized file operations | known affected: 16 | 2026-07-02T12:47:40+00:00 | Vulnerability · Source |
| CVE-2026-43617 | redhat_vex | rsync: rsync: Hostname-based ACL bypass in daemon chroot configuration | known affected: 16 | 2026-07-02T12:47:37+00:00 | Vulnerability · Source |
| CVE-2026-43475 | redhat_vex | kernel: scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT | known affected: 274 | 2026-07-02T12:47:35+00:00 | Vulnerability · Source |
| CVE-2026-43469 | redhat_vex | kernel: xprtrdma: Decrement re_receiving on the early exit paths | known affected: 246 known not affected: 28 | 2026-07-02T12:47:32+00:00 | Vulnerability · Source |
| CVE-2026-43466 | redhat_vex | kernel: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery | known affected: 274 | 2026-07-02T12:47:27+00:00 | Vulnerability · Source |
| CVE-2026-43456 | redhat_vex | kernel: bonding: fix type confusion in bond_setup_by_slave() | known affected: 274 | 2026-07-02T12:47:19+00:00 | Vulnerability · Source |
| CVE-2026-43441 | redhat_vex | kernel: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled | known affected: 198 known not affected: 76 | 2026-07-02T12:47:14+00:00 | Vulnerability · Source |
| CVE-2026-43440 | redhat_vex | kernel: net/mana: Null service_wq on setup error to prevent double destroy | known affected: 232 known not affected: 42 | 2026-07-02T12:47:09+00:00 | Vulnerability · Source |
| CVE-2026-43437 | redhat_vex | kernel: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() | known affected: 260 known not affected: 14 | 2026-07-02T12:47:09+00:00 | Vulnerability · Source |
| CVE-2026-43415 | redhat_vex | kernel: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend | known affected: 76 known not affected: 198 | 2026-07-02T12:47:01+00:00 | Vulnerability · Source |
| CVE-2026-43421 | redhat_vex | kernel: usb: gadget: f_ncm: Fix net_device lifecycle with device_move | known affected: 76 known not affected: 198 | 2026-07-02T12:47:00+00:00 | Vulnerability · Source |
| CVE-2026-43413 | redhat_vex | kernel: scsi: hisi_sas: Fix NULL pointer exception during user_scan() | known affected: 232 known not affected: 42 | 2026-07-02T12:46:59+00:00 | Vulnerability · Source |
| CVE-2026-43409 | redhat_vex | kernel: kprobes: avoid crash when rmmod/insmod after ftrace killed | known affected: 274 | 2026-07-02T12:46:54+00:00 | Vulnerability · Source |
| CVE-2026-43406 | redhat_vex | kernel: libceph: prevent potential out-of-bounds reads in process_message_header() | known affected: 232 known not affected: 42 | 2026-07-02T12:46:50+00:00 | Vulnerability · Source |
| CVE-2026-43403 | redhat_vex | kernel: nsfs: tighten permission checks for ns iteration ioctls | known affected: 76 known not affected: 198 | 2026-07-02T12:46:46+00:00 | Vulnerability · Source |
| CVE-2026-43402 | redhat_vex | kernel: kthread: consolidate kthread exit paths to prevent use-after-free | known affected: 198 known not affected: 76 | 2026-07-02T12:46:45+00:00 | Vulnerability · Source |
| CVE-2026-43374 | redhat_vex | kernel: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry | known affected: 184 known not affected: 90 | 2026-07-02T12:46:40+00:00 | Vulnerability · Source |
| CVE-2026-43366 | redhat_vex | kernel: io_uring/kbuf: check if target buffer list is still legacy on recycle | known affected: 184 known not affected: 90 | 2026-07-02T12:46:36+00:00 | Vulnerability · Source |
| CVE-2026-43365 | redhat_vex | kernel: xfs: fix undersized l_iclog_roundoff values | known affected: 246 known not affected: 28 | 2026-07-02T12:46:35+00:00 | Vulnerability · Source |