VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
100512 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-3867 | redhat_vex | kernel: Out of bounds read in smb2_sess_setup | known not affected: 275 | 2026-10-16T21:59:13+00:00 | Vulnerability · Source |
| CVE-2022-48979 | redhat_vex | kernel: drm/amd/display: fix array index out of bound error in DCN32 DML | known affected: 198 | 2026-10-16T21:59:08+00:00 | Vulnerability · Source |
| CVE-2022-49362 | redhat_vex | kernel: NFSD: Fix potential use-after-free in nfsd_file_put() | fixed: 201 known not affected: 189 | 2026-10-16T21:59:08+00:00 | Vulnerability · Source |
| CVE-2022-49030 | redhat_vex | kernel: libbpf: Handle size overflow for ringbuf mmap | known not affected: 198 | 2026-10-16T21:59:08+00:00 | Vulnerability · Source |
| CVE-2022-49138 | redhat_vex | kernel: Bluetooth: hci_event: Ignore multiple conn complete events | known affected: 198 known not affected: 77 | 2026-10-16T21:59:08+00:00 | Vulnerability · Source |
| CVE-2026-88031 | redhat_vex | go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs | fixed: 9 known affected: 212 known not affected: 375 under investigation: 8 | 2026-10-16T21:56:51+00:00 | Vulnerability · Source |
| CVE-2026-82397 | redhat_vex | python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields | fixed: 26 known affected: 60 known not affected: 6 | 2026-10-16T21:56:37+00:00 | Vulnerability · Source |
| CVE-2026-80793 | redhat_vex | kernel: ipv4: reject undersized MTUs in ip_do_fragment() | known affected: 277 | 2026-10-16T21:56:37+00:00 | Vulnerability · Source |
| CVE-2026-93590 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass | known affected: 14 | 2026-10-16T21:56:08+00:00 | Vulnerability · Source |
| CVE-2026-93588 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via Null Pointer Dereference in PNM Coder | known affected: 14 | 2026-10-16T21:56:03+00:00 | Vulnerability · Source |
| CVE-2026-93586 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via Use After Free in ImagesToBlob | known affected: 14 | 2026-10-16T21:56:01+00:00 | Vulnerability · Source |
| CVE-2026-76905 | redhat_vex | github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body | fixed: 2 known affected: 64 known not affected: 93 | 2026-10-16T21:55:11+00:00 | Vulnerability · Source |
| CVE-2026-73566 | redhat_vex | tar: node-tar: Denial of Service via crafted long-path tar archive | fixed: 35 known affected: 57 known not affected: 2397 | 2026-10-16T21:55:00+00:00 | Vulnerability · Source |
| CVE-2026-93589 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder | known affected: 14 | 2026-10-16T21:54:40+00:00 | Vulnerability · Source |
| CVE-2026-78677 | redhat_vex | GitPython: GitPython: Arbitrary Code Execution via Path Traversal | fixed: 10 known affected: 54 known not affected: 260 | 2026-10-16T21:54:36+00:00 | Vulnerability · Source |
| CVE-2026-77214 | redhat_vex | expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer | fixed: 10 known affected: 44 | 2026-10-16T21:54:33+00:00 | Vulnerability · Source |
| CVE-2026-74582 | redhat_vex | kernel: packet: use consistent hard_header_len in non-ring send paths | fixed: 1368 known affected: 185 known not affected: 43 | 2026-10-16T21:54:30+00:00 | Vulnerability · Source |
| CVE-2026-48935 | redhat_vex | nodejs: Node.js: Unauthorized file metadata modification | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:58:46+00:00 | Vulnerability · Source |
| CVE-2026-48617 | redhat_vex | nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation | fixed: 367 known affected: 9 known not affected: 6 | 2026-10-16T18:58:44+00:00 | Vulnerability · Source |
| CVE-2026-59983 | redhat_vex | OpenEXR: OpenEXR: Denial of Service via crafted deep-tile EXR files | known not affected: 18 | 2026-10-16T18:55:42+00:00 | Vulnerability · Source |
| CVE-2026-48934 | redhat_vex | nodejs: Node.js: Certification validation bypass in TLS host verification | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:55:36+00:00 | Vulnerability · Source |
| CVE-2026-48930 | redhat_vex | nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:55:32+00:00 | Vulnerability · Source |
| CVE-2026-48928 | redhat_vex | Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:55:28+00:00 | Vulnerability · Source |
| CVE-2026-48619 | redhat_vex | nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:55:24+00:00 | Vulnerability · Source |
| CVE-2026-48615 | redhat_vex | nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:55:19+00:00 | Vulnerability · Source |
| CVE-2026-106062 | redhat_vex | gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file | known affected: 9 known not affected: 27 | 2026-10-16T18:55:07+00:00 | Vulnerability · Source |
| CVE-2026-102322 | redhat_vex | chromium-browser: Incorrect Authorization in SiteIsolation | known not affected: 1 | 2026-10-16T18:55:04+00:00 | Vulnerability · Source |
| CVE-2026-48933 | redhat_vex | nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:54:55+00:00 | Vulnerability · Source |
| CVE-2026-48618 | redhat_vex | nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch | fixed: 401 known affected: 7 known not affected: 10 | 2026-10-16T18:54:54+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1971 known affected: 99 known not affected: 8935 | 2026-10-16T18:54:46+00:00 | Vulnerability · Source |
| CVE-2026-28390 | redhat_vex | openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing | fixed: 508 known affected: 196 known not affected: 441 | 2026-10-16T18:54:39+00:00 | Vulnerability · Source |
| CVE-2021-47421 | redhat_vex | kernel: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume | known affected: 60 known not affected: 138 | 2026-10-16T18:54:39+00:00 | Vulnerability · Source |
| CVE-2026-39820 | redhat_vex | net/mail: golang: Go net/mail: Denial of Service via crafted email inputs | fixed: 1509 known affected: 90 known not affected: 7868 | 2026-10-16T18:54:39+00:00 | Vulnerability · Source |
| CVE-2026-87819 | redhat_vex | GitPython: GitPython: Denial of Service via crafted commit author field | fixed: 6 known affected: 56 known not affected: 251 | 2026-10-16T18:53:03+00:00 | Vulnerability · Source |
| CVE-2026-91990 | redhat_vex | tornado: Tornado: Denial of Service via memory amplification in multipart parsing | fixed: 41 known affected: 55 known not affected: 74 | 2026-10-16T18:52:58+00:00 | Vulnerability · Source |
| CVE-2026-93599 | redhat_vex | rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List | fixed: 90 known affected: 97 known not affected: 193 | 2026-10-16T18:52:50+00:00 | Vulnerability · Source |
| CVE-2026-9496 | redhat_vex | pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function | fixed: 130 known affected: 49 known not affected: 28 | 2026-10-16T18:52:41+00:00 | Vulnerability · Source |
| CVE-2025-37801 | redhat_vex | kernel: spi: spi-imx: Add check for spi_imx_setupxfer() | known affected: 185 known not affected: 90 | 2026-10-16T18:37:53+00:00 | Vulnerability · Source |
| CVE-2025-23151 | redhat_vex | kernel: bus: mhi: host: Fix race between unprepare and queue_buf | known affected: 185 known not affected: 90 | 2026-10-16T18:37:49+00:00 | Vulnerability · Source |
| CVE-2025-22012 | redhat_vex | kernel: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu" | known not affected: 275 | 2026-10-16T18:37:49+00:00 | Vulnerability · Source |
| CVE-2025-21890 | redhat_vex | kernel: idpf: fix checksums set in idpf_rx_rsc() | known affected: 233 known not affected: 42 | 2026-10-16T18:37:43+00:00 | Vulnerability · Source |
| CVE-2025-21875 | redhat_vex | kernel: mptcp: always handle address removal under msk socket lock | known affected: 233 known not affected: 42 | 2026-10-16T18:37:37+00:00 | Vulnerability · Source |
| CVE-2025-21832 | redhat_vex | kernel: block: don't revert iter for -EIOCBQUEUED | known affected: 185 known not affected: 90 | 2026-10-16T18:37:33+00:00 | Vulnerability · Source |
| CVE-2025-21830 | redhat_vex | kernel: landlock: Handle weird files | known affected: 185 known not affected: 90 | 2026-10-16T18:37:29+00:00 | Vulnerability · Source |
| CVE-2025-21810 | redhat_vex | kernel: driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() | known affected: 227 known not affected: 48 | 2026-10-16T18:37:25+00:00 | Vulnerability · Source |
| CVE-2025-21661 | redhat_vex | kernel: gpio: virtuser: fix missing lookup table cleanups | known not affected: 275 | 2026-10-16T18:37:24+00:00 | Vulnerability · Source |
| CVE-2024-53127 | redhat_vex | kernel: Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" | known not affected: 198 | 2026-10-16T18:37:15+00:00 | Vulnerability · Source |
| CVE-2024-50291 | redhat_vex | kernel: media: dvb-core: add missing buffer index check | known not affected: 198 | 2026-10-16T18:37:11+00:00 | Vulnerability · Source |
| CVE-2024-50286 | redhat_vex | kernel: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create | known not affected: 198 | 2026-10-16T18:37:10+00:00 | Vulnerability · Source |
| CVE-2024-50285 | redhat_vex | kernel: ksmbd: check outstanding simultaneous SMB operations | known not affected: 198 | 2026-10-16T18:37:06+00:00 | Vulnerability · Source |