VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40917 | redhat_vex | gimp: GIMP: Application crashes or information disclosure via crafted ICNS image files | known affected: 32 | 2026-07-02T17:16:26+00:00 | Vulnerability · Source |
| CVE-2026-40916 | redhat_vex | gimp: GIMP: Denial of Service due to stack buffer overflow in TIM image loader | known affected: 32 | 2026-07-02T17:16:24+00:00 | Vulnerability · Source |
| CVE-2026-40915 | redhat_vex | gimp: GIMP: Heap buffer overflow due to integer overflow in FITS image loader | known affected: 32 | 2026-07-02T17:16:22+00:00 | Vulnerability · Source |
| CVE-2026-40447 | redhat_vex | escargot: Escargot: Denial of Service due to integer overflow or wraparound vulnerability | known affected: 80 | 2026-07-02T17:16:21+00:00 | Vulnerability · Source |
| CVE-2026-40354 | redhat_vex | flatpak: xdg-desktop-portal: Flatpak xdg-desktop-portal: File deletion via symlink attack | known affected: 8 | 2026-07-02T17:16:18+00:00 | Vulnerability · Source |
| CVE-2026-40341 | redhat_vex | libgphoto2: libgphoto2: Denial of Service via out-of-bounds read from untrusted USB devices | known affected: 10 | 2026-07-02T17:16:16+00:00 | Vulnerability · Source |
| CVE-2026-40340 | redhat_vex | libgphoto2: libgphoto2: Information disclosure and denial of service via out-of-bounds read | known affected: 10 | 2026-07-02T17:16:14+00:00 | Vulnerability · Source |
| CVE-2026-40339 | redhat_vex | libgphoto2: libgphoto2: Information Disclosure via out-of-bounds read | known affected: 10 | 2026-07-02T17:16:12+00:00 | Vulnerability · Source |
| CVE-2026-40338 | redhat_vex | libgphoto2: libgphoto2: Information disclosure and denial of service via out-of-bounds read | known affected: 10 | 2026-07-02T17:16:10+00:00 | Vulnerability · Source |
| CVE-2026-40335 | redhat_vex | libgphoto2: libgphoto2: Information disclosure via out-of-bounds read in ptp_unpack_DPV() | known affected: 10 | 2026-07-02T17:16:08+00:00 | Vulnerability · Source |
| CVE-2026-40333 | redhat_vex | libgphoto2: libgphoto2: Information disclosure and denial of service via unbounded reads | known affected: 10 | 2026-07-02T17:16:06+00:00 | Vulnerability · Source |
| CVE-2026-40254 | redhat_vex | FreeRDP: FreeRDP: Information disclosure and arbitrary file modification via path traversal | known affected: 31 | 2026-07-02T17:16:05+00:00 | Vulnerability · Source |
| CVE-2026-39886 | redhat_vex | OpenEXR: OpenEXR: Signed integer overflow in HTJ2K decompression can lead to denial of service. | known affected: 18 | 2026-07-02T17:16:04+00:00 | Vulnerability · Source |
| CVE-2026-33555 | redhat_vex | haproxy: HAProxy: Request smuggling via HTTP/3 parser desynchronization | fixed: 3 known affected: 10 known not affected: 4 | 2026-07-02T17:15:57+00:00 | Vulnerability · Source |
| CVE-2026-33523 | redhat_vex | httpd: HTTP response splitting forwarding malicious status line | fixed: 4 known affected: 53 | 2026-07-02T17:15:55+00:00 | Vulnerability · Source |
| CVE-2026-32778 | redhat_vex | libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition | known affected: 21 | 2026-07-02T17:15:54+00:00 | Vulnerability · Source |
| CVE-2026-32775 | redhat_vex | libexif: libexif: Buffer overwrite via integer underflow in MakerNotes decoding | known affected: 17 | 2026-07-02T17:15:53+00:00 | Vulnerability · Source |
| CVE-2026-32777 | redhat_vex | libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing | known affected: 21 | 2026-07-02T17:15:51+00:00 | Vulnerability · Source |
| CVE-2026-32776 | redhat_vex | libexpat: libexpat: Denial of Service due to NULL pointer dereference | known affected: 21 | 2026-07-02T17:15:50+00:00 | Vulnerability · Source |
| CVE-2026-5406 | redhat_vex | wireshark: Wireshark: Denial of Service via FC-SWILS protocol dissector crash | known affected: 20 | 2026-07-02T17:15:48+00:00 | Vulnerability · Source |
| CVE-2026-4897 | redhat_vex | polkit: Polkit: Denial of Service via unbounded input processing through standard input | known affected: 23 | 2026-07-02T17:15:44+00:00 | Vulnerability · Source |
| CVE-2026-4867 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters | fixed: 12 known affected: 102 known not affected: 85 | 2026-07-02T17:15:44+00:00 | Vulnerability · Source |
| CVE-2026-4367 | redhat_vex | libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing | fixed: 3 known affected: 13 | 2026-07-02T17:15:41+00:00 | Vulnerability · Source |
| CVE-2026-4426 | redhat_vex | libarchive: libarchive: Denial of Service via malformed ISO file processing | fixed: 3 known affected: 21 | 2026-07-02T17:15:40+00:00 | Vulnerability · Source |
| CVE-2026-4105 | redhat_vex | systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method | fixed: 4 known affected: 131 | 2026-07-02T17:15:35+00:00 | Vulnerability · Source |
| CVE-2026-3731 | redhat_vex | libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler | fixed: 4 known affected: 21 | 2026-07-02T17:15:32+00:00 | Vulnerability · Source |
| CVE-2026-3634 | redhat_vex | libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type header | known affected: 16 | 2026-07-02T17:15:28+00:00 | Vulnerability · Source |
| CVE-2026-3494 | redhat_vex | MariaDB: MariaDB: Information disclosure due to unlogged SQL statements with comments | known affected: 162 | 2026-07-02T17:15:27+00:00 | Vulnerability · Source |
| CVE-2026-31680 | redhat_vex | kernel: net: ipv6: flowlabel: defer exclusive option free until RCU teardown | known affected: 260 known not affected: 14 | 2026-07-02T17:15:15+00:00 | Vulnerability · Source |
| CVE-2026-31679 | redhat_vex | kernel: openvswitch: validate MPLS set/set_masked payload length | known affected: 260 known not affected: 14 | 2026-07-02T17:15:13+00:00 | Vulnerability · Source |
| CVE-2026-31678 | redhat_vex | kernel: openvswitch: defer tunnel netdev_put to RCU release | known affected: 260 known not affected: 14 | 2026-07-02T17:15:11+00:00 | Vulnerability · Source |
| CVE-2026-31675 | redhat_vex | kernel: net/sched: sch_netem: fix out-of-bounds access in packet corruption | known affected: 260 known not affected: 14 | 2026-07-02T17:15:09+00:00 | Vulnerability · Source |
| CVE-2026-31674 | redhat_vex | kernel: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | known affected: 260 known not affected: 14 | 2026-07-02T17:15:08+00:00 | Vulnerability · Source |
| CVE-2026-31673 | redhat_vex | kernel: af_unix: read UNIX_DIAG_VFS data under unix_state_lock | known affected: 260 known not affected: 14 | 2026-07-02T17:15:04+00:00 | Vulnerability · Source |
| CVE-2026-31667 | redhat_vex | kernel: Input: uinput - fix circular locking dependency with ff-core | known affected: 260 known not affected: 14 | 2026-07-02T17:15:03+00:00 | Vulnerability · Source |
| CVE-2026-31665 | redhat_vex | kernel: netfilter: nft_ct: fix use-after-free in timeout object destroy | known affected: 260 known not affected: 14 | 2026-07-02T17:15:01+00:00 | Vulnerability · Source |
| CVE-2026-31662 | redhat_vex | kernel: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | known affected: 260 known not affected: 14 | 2026-07-02T17:14:58+00:00 | Vulnerability · Source |
| CVE-2026-31649 | redhat_vex | kernel: net: stmmac: fix integer underflow in chain mode | known affected: 232 known not affected: 42 | 2026-07-02T17:14:57+00:00 | Vulnerability · Source |
| CVE-2026-31648 | redhat_vex | kernel: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | known affected: 260 known not affected: 14 | 2026-07-02T17:14:54+00:00 | Vulnerability · Source |
| CVE-2026-31638 | redhat_vex | kernel: rxrpc: Only put the call ref if one was acquired | known affected: 184 known not affected: 90 | 2026-07-02T17:14:52+00:00 | Vulnerability · Source |
| CVE-2026-31637 | redhat_vex | kernel: rxrpc: reject undecryptable rxkad response tickets | known affected: 260 known not affected: 14 | 2026-07-02T17:14:50+00:00 | Vulnerability · Source |
| CVE-2026-31633 | redhat_vex | kernel: rxrpc: Fix integer overflow in rxgk_verify_response() | known affected: 260 known not affected: 14 | 2026-07-02T17:14:47+00:00 | Vulnerability · Source |
| CVE-2026-31631 | redhat_vex | kernel: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() | known affected: 260 known not affected: 14 | 2026-07-02T17:14:46+00:00 | Vulnerability · Source |
| CVE-2026-31609 | redhat_vex | kernel: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() | known affected: 260 known not affected: 14 | 2026-07-02T17:14:42+00:00 | Vulnerability · Source |
| CVE-2026-31630 | redhat_vex | kernel: rxrpc: proc: size address buffers for %pISpc output | known affected: 260 known not affected: 14 | 2026-07-02T17:14:42+00:00 | Vulnerability · Source |
| CVE-2026-31600 | redhat_vex | kernel: arm64: mm: Handle invalid large leaf mappings correctly | known affected: 260 known not affected: 14 | 2026-07-02T17:14:41+00:00 | Vulnerability · Source |
| CVE-2026-31588 | redhat_vex | kernel: KVM: x86: Use scratch field in MMIO fragment to hold small write values | known affected: 260 known not affected: 14 | 2026-07-02T17:14:37+00:00 | Vulnerability · Source |
| CVE-2026-31570 | redhat_vex | kernel: can: gw: fix OOB heap access in cgw_csum_crc8_rel() | known affected: 260 known not affected: 14 | 2026-07-02T17:14:36+00:00 | Vulnerability · Source |
| CVE-2026-31557 | redhat_vex | kernel: nvmet: move async event work off nvmet-wq | known affected: 260 known not affected: 14 | 2026-07-02T17:14:32+00:00 | Vulnerability · Source |
| CVE-2026-31548 | redhat_vex | kernel: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down | known affected: 232 known not affected: 42 | 2026-07-02T17:14:30+00:00 | Vulnerability · Source |