VEX records

Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.

Reset

100512 VEX records

API response
Vulnerability Source Title Product status Imported Links
CVE-2022-50259 redhat_vex kernel: Linux kernel: Denial of Service due to use-after-free in sock_map_free known affected: 156 known not affected: 119 2026-10-16T22:03:36+00:00 Vulnerability · Source
CVE-2022-50750 redhat_vex kernel: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure fixed: 120 known affected: 108 known not affected: 135 2026-10-16T22:03:35+00:00 Vulnerability · Source
CVE-2022-50252 redhat_vex kernel: igb: Do not free q_vector unless new one was allocated known affected: 184 known not affected: 91 2026-10-16T22:03:30+00:00 Vulnerability · Source
CVE-2022-49760 redhat_vex kernel: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() known affected: 108 known not affected: 167 2026-10-16T22:03:30+00:00 Vulnerability · Source
CVE-2022-49733 redhat_vex kernel: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC known affected: 14 known not affected: 261 2026-10-16T22:03:28+00:00 Vulnerability · Source
CVE-2026-105759 redhat_vex vllm: vLLM: Denial of service via arbitrary HTTP method tokens in metrics tracking known affected: 27 2026-10-16T22:01:24+00:00 Vulnerability · Source
CVE-2026-58045 redhat_vex nodejs: Node.js: Denial of Service vulnerability fixed: 336 known affected: 14 known not affected: 6 2026-10-16T22:01:21+00:00 Vulnerability · Source
CVE-2026-58041 redhat_vex nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator fixed: 131 known affected: 14 known not affected: 33 2026-10-16T22:01:17+00:00 Vulnerability · Source
CVE-2026-56850 redhat_vex nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw fixed: 336 known affected: 16 known not affected: 6 2026-10-16T22:01:14+00:00 Vulnerability · Source
CVE-2026-39919 redhat_vex ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter fixed: 15 known affected: 13 known not affected: 201 2026-10-16T22:01:12+00:00 Vulnerability · Source
CVE-2024-53922 redhat_vex kernel: Kernel: Denial of Service in buffer queue driver known affected: 2 2026-10-16T22:01:07+00:00 Vulnerability · Source
CVE-2023-3866 redhat_vex kernel: ksmbd Chained Request NULL Pointer Dereference known not affected: 275 2026-10-16T22:01:03+00:00 Vulnerability · Source
CVE-2022-50567 redhat_vex kernel: fs: jfs: fix shift-out-of-bounds in dbAllocAG known affected: 14 known not affected: 261 2026-10-16T22:00:59+00:00 Vulnerability · Source
CVE-2022-50493 redhat_vex kernel: scsi: qla2xxx: Fix crash when I/O abort times out fixed: 249 known affected: 166 known not affected: 77 2026-10-16T22:00:56+00:00 Vulnerability · Source
CVE-2022-50423 redhat_vex kernel: Linux kernel: Information disclosure and denial of service via use-after-free in ACPI subsystem fixed: 120 known affected: 138 known not affected: 105 2026-10-16T22:00:53+00:00 Vulnerability · Source
CVE-2022-50393 redhat_vex kernel: drm/amdgpu: SDMA update use unlocked iterator fixed: 120 known not affected: 243 2026-10-16T22:00:50+00:00 Vulnerability · Source
CVE-2022-50339 redhat_vex kernel: Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() known not affected: 275 2026-10-16T22:00:47+00:00 Vulnerability · Source
CVE-2022-50363 redhat_vex kernel: skmsg: pass gfp argument to alloc_sk_msg() fixed: 201 known not affected: 189 2026-10-16T22:00:46+00:00 Vulnerability · Source
CVE-2022-50329 redhat_vex kernel: Linux kernel: Denial of Service due to use-after-free in BFQ scheduler known affected: 156 known not affected: 119 2026-10-16T22:00:40+00:00 Vulnerability · Source
CVE-2022-50302 redhat_vex kernel: Linux kernel lockd: Denial of Service via uninitialized file lock field in NFSv3 fixed: 201 known affected: 22 known not affected: 167 2026-10-16T22:00:37+00:00 Vulnerability · Source
CVE-2022-50300 redhat_vex kernel: Linux kernel: Denial of Service in btrfs due to use-after-free vulnerability known not affected: 275 2026-10-16T22:00:33+00:00 Vulnerability · Source
CVE-2022-50231 redhat_vex kernel: Linux kernel: Denial of service or information disclosure in arm64/poly1305 due to out-of-bounds read known affected: 108 known not affected: 167 2026-10-16T22:00:30+00:00 Vulnerability · Source
CVE-2022-50219 redhat_vex kernel: bpf: Fix KASAN use-after-free Read in compute_effective_progs fixed: 321 known affected: 38 known not affected: 119 2026-10-16T22:00:22+00:00 Vulnerability · Source
CVE-2022-49990 redhat_vex kernel: s390: fix double free of GS and RI CBs on fork() failure fixed: 201 known affected: 112 known not affected: 77 2026-10-16T22:00:21+00:00 Vulnerability · Source
CVE-2022-49545 redhat_vex kernel: ALSA: usb-audio: Cancel pending work at closing a MIDI substream fixed: 286 known affected: 58 known not affected: 99 2026-10-16T22:00:17+00:00 Vulnerability · Source
CVE-2022-49231 redhat_vex kernel: rtw88: fix memory overrun and memory leak during hw_scan known affected: 184 known not affected: 91 2026-10-16T22:00:16+00:00 Vulnerability · Source
CVE-2026-103500 redhat_vex thunderbird: thunderbird: Heap buffer overflow via opening large emails known affected: 6 2026-10-16T21:59:58+00:00 Vulnerability · Source
CVE-2026-103262 redhat_vex tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient fixed: 26 known affected: 54 known not affected: 9 2026-10-16T21:59:56+00:00 Vulnerability · Source
CVE-2026-102831 redhat_vex jupyterlab: JupyterLab: Cross-Site Scripting via malicious clipboard cell pasting known affected: 18 known not affected: 3 2026-10-16T21:59:53+00:00 Vulnerability · Source
CVE-2026-102557 redhat_vex libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly fixed: 39 known affected: 9 2026-10-16T21:59:51+00:00 Vulnerability · Source
CVE-2026-102278 redhat_vex brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns fixed: 108 known affected: 337 known not affected: 107 2026-10-16T21:59:44+00:00 Vulnerability · Source
CVE-2026-102276 redhat_vex brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns fixed: 53 known affected: 353 known not affected: 99 2026-10-16T21:59:42+00:00 Vulnerability · Source
CVE-2026-57967 redhat_vex artemis-server: Apache Artemis — session hijack via missing authentication fixed: 563 known affected: 1 known not affected: 2189 2026-10-16T21:59:29+00:00 Vulnerability · Source
CVE-2026-56848 redhat_vex nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service fixed: 316 known affected: 7 known not affected: 5 2026-10-16T21:59:25+00:00 Vulnerability · Source
CVE-2026-56003 redhat_vex libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties fixed: 249 2026-10-16T21:59:23+00:00 Vulnerability · Source
CVE-2026-45363 redhat_vex ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification fixed: 46 known affected: 3 known not affected: 306 2026-10-16T21:59:22+00:00 Vulnerability · Source
CVE-2022-49669 redhat_vex kernel: mptcp: fix race on unaccepted mptcp sockets fixed: 286 known not affected: 157 2026-10-16T21:59:15+00:00 Vulnerability · Source
CVE-2023-3867 redhat_vex kernel: Out of bounds read in smb2_sess_setup known not affected: 275 2026-10-16T21:59:13+00:00 Vulnerability · Source
CVE-2022-48979 redhat_vex kernel: drm/amd/display: fix array index out of bound error in DCN32 DML known affected: 198 2026-10-16T21:59:08+00:00 Vulnerability · Source
CVE-2022-49362 redhat_vex kernel: NFSD: Fix potential use-after-free in nfsd_file_put() fixed: 201 known not affected: 189 2026-10-16T21:59:08+00:00 Vulnerability · Source
CVE-2022-49030 redhat_vex kernel: libbpf: Handle size overflow for ringbuf mmap known not affected: 198 2026-10-16T21:59:08+00:00 Vulnerability · Source
CVE-2022-49138 redhat_vex kernel: Bluetooth: hci_event: Ignore multiple conn complete events known affected: 198 known not affected: 77 2026-10-16T21:59:08+00:00 Vulnerability · Source
CVE-2026-88031 redhat_vex go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs fixed: 9 known affected: 212 known not affected: 375 under investigation: 8 2026-10-16T21:56:51+00:00 Vulnerability · Source
CVE-2026-82397 redhat_vex python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields fixed: 26 known affected: 60 known not affected: 6 2026-10-16T21:56:37+00:00 Vulnerability · Source
CVE-2026-80793 redhat_vex kernel: ipv4: reject undersized MTUs in ip_do_fragment() known affected: 277 2026-10-16T21:56:37+00:00 Vulnerability · Source
CVE-2026-93590 redhat_vex ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass known affected: 14 2026-10-16T21:56:08+00:00 Vulnerability · Source
CVE-2026-93588 redhat_vex ImageMagick: ImageMagick: Denial of Service via Null Pointer Dereference in PNM Coder known affected: 14 2026-10-16T21:56:03+00:00 Vulnerability · Source
CVE-2026-93586 redhat_vex ImageMagick: ImageMagick: Denial of Service via Use After Free in ImagesToBlob known affected: 14 2026-10-16T21:56:01+00:00 Vulnerability · Source
CVE-2026-76905 redhat_vex github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body fixed: 2 known affected: 64 known not affected: 93 2026-10-16T21:55:11+00:00 Vulnerability · Source
CVE-2026-73566 redhat_vex tar: node-tar: Denial of Service via crafted long-path tar archive fixed: 35 known affected: 57 known not affected: 2397 2026-10-16T21:55:00+00:00 Vulnerability · Source