VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104648 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-43877 | redhat_vex | kernel: media: pci: ivtv: Add check for DMA map result | known affected: 28 known not affected: 170 | 2026-10-16T18:33:25+00:00 | Vulnerability · Source |
| CVE-2024-43832 | redhat_vex | kernel: s390/uv: Don't call folio_wait_writeback() without a folio reference | known affected: 28 known not affected: 170 | 2026-10-16T18:21:48+00:00 | Vulnerability · Source |
| CVE-2024-42088 | redhat_vex | kernel: ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link | known not affected: 198 | 2026-10-16T18:21:44+00:00 | Vulnerability · Source |
| CVE-2024-42064 | redhat_vex | kernel: drm/amd/display: Skip pipe if the pipe idx not set properly | known not affected: 198 | 2026-10-16T18:21:39+00:00 | Vulnerability · Source |
| CVE-2023-54220 | redhat_vex | kernel: serial: 8250: Fix oops for port->pm on uart_change_pm() | known affected: 108 known not affected: 167 | 2026-10-16T18:21:35+00:00 | Vulnerability · Source |
| CVE-2023-54210 | redhat_vex | kernel: Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() | known affected: 122 known not affected: 153 | 2026-10-16T18:21:28+00:00 | Vulnerability · Source |
| CVE-2023-54127 | redhat_vex | kernel: fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() | known affected: 14 known not affected: 261 | 2026-10-16T18:21:23+00:00 | Vulnerability · Source |
| CVE-2023-54083 | redhat_vex | kernel: phy: tegra: xusb: Clear the driver reference in usb-phy dev | fixed: 280 known affected: 22 known not affected: 175 | 2026-10-16T18:21:18+00:00 | Vulnerability · Source |
| CVE-2023-54050 | redhat_vex | kernel: ubifs: Fix memleak when insert_old_idx() failed | known affected: 14 known not affected: 261 | 2026-10-16T18:21:12+00:00 | Vulnerability · Source |
| CVE-2023-52887 | redhat_vex | kernel: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new | known affected: 108 known not affected: 90 | 2026-10-16T18:21:00+00:00 | Vulnerability · Source |
| CVE-2021-47291 | redhat_vex | kernel: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions | known affected: 42 known not affected: 156 | 2026-10-16T18:20:56+00:00 | Vulnerability · Source |
| CVE-2026-67420 | redhat_vex | rabbitmq-server: rabbitmq-server: Unauthorized user impersonation via stale OAuth token refresh | fixed: 3 known affected: 2 known not affected: 6 | 2026-10-16T18:20:52+00:00 | Vulnerability · Source |
| CVE-2024-42313 | redhat_vex | kernel: media: venus: fix use after free in vdec_close | known not affected: 198 | 2026-10-16T18:18:29+00:00 | Vulnerability · Source |
| CVE-2024-42276 | redhat_vex | kernel: nvme-pci: add missing condition check for existence of mapped data | fixed: 280 known affected: 50 known not affected: 70 | 2026-10-16T18:18:26+00:00 | Vulnerability · Source |
| CVE-2024-42264 | redhat_vex | kernel: drm/v3d: Prevent out of bounds access in performance query extensions | known not affected: 198 | 2026-10-16T18:18:21+00:00 | Vulnerability · Source |
| CVE-2024-41070 | redhat_vex | kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() | known not affected: 198 | 2026-10-16T18:18:17+00:00 | Vulnerability · Source |
| CVE-2024-39486 | redhat_vex | kernel: drm/drm_file: Fix pid refcounting race | fixed: 280 known affected: 64 known not affected: 56 | 2026-10-16T18:18:14+00:00 | Vulnerability · Source |
| CVE-2023-54292 | redhat_vex | kernel: RDMA/irdma: Fix data race on CQP request done | fixed: 279 known affected: 70 known not affected: 119 | 2026-10-16T18:18:09+00:00 | Vulnerability · Source |
| CVE-2023-54269 | redhat_vex | kernel: SUNRPC: double free xprt_ctxt while still in use | fixed: 128 known affected: 138 known not affected: 105 | 2026-10-16T18:18:07+00:00 | Vulnerability · Source |
| CVE-2023-54258 | redhat_vex | kernel: Kernel: Denial of Service in CIFS client due to race condition | known affected: 156 known not affected: 119 | 2026-10-16T18:18:04+00:00 | Vulnerability · Source |
| CVE-2023-54200 | redhat_vex | kernel: Linux kernel: netfilter use-after-free vulnerability leading to denial of service | known affected: 156 known not affected: 119 | 2026-10-16T18:18:00+00:00 | Vulnerability · Source |
| CVE-2023-54096 | redhat_vex | kernel: Linux kernel (soundwire): Memory corruption due to incorrect device enumeration completion | fixed: 399 known affected: 38 known not affected: 119 | 2026-10-16T18:17:56+00:00 | Vulnerability · Source |
| CVE-2023-53747 | redhat_vex | kernel: Linux kernel: Denial of Service via use-after-free in vc_screen | fixed: 280 known affected: 98 known not affected: 99 | 2026-10-16T18:17:55+00:00 | Vulnerability · Source |
| CVE-2023-52930 | redhat_vex | kernel: drm/i915: Fix potential bit_17 double-free | known affected: 108 known not affected: 167 | 2026-10-16T18:17:47+00:00 | Vulnerability · Source |
| CVE-2023-52907 | redhat_vex | kernel: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() | known not affected: 198 | 2026-10-16T18:17:45+00:00 | Vulnerability · Source |
| CVE-2023-52903 | redhat_vex | kernel: io_uring: lock overflowing for IOPOLL | known not affected: 198 | 2026-10-16T18:17:40+00:00 | Vulnerability · Source |
| CVE-2023-52648 | redhat_vex | kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state | fixed: 709 known affected: 64 known not affected: 8 | 2026-10-16T18:17:37+00:00 | Vulnerability · Source |
| CVE-2023-52588 | redhat_vex | kernel: f2fs: fix to tag gcing flag on page during block migration | known not affected: 198 | 2026-10-16T18:17:33+00:00 | Vulnerability · Source |
| CVE-2023-52586 | redhat_vex | kernel: drm/msm/dpu: Add mutex lock in control vblank irq | known not affected: 198 | 2026-10-16T18:17:31+00:00 | Vulnerability · Source |
| CVE-2023-52522 | redhat_vex | kernel: net: fix possible store tearing in neigh_periodic_work() | fixed: 929 known affected: 64 known not affected: 1 | 2026-10-16T18:17:26+00:00 | Vulnerability · Source |
| CVE-2022-50851 | redhat_vex | kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap | known affected: 156 known not affected: 119 | 2026-10-16T18:17:22+00:00 | Vulnerability · Source |
| CVE-2022-48811 | redhat_vex | kernel: ibmvnic: don't release napi in __ibmvnic_open() | known affected: 184 known not affected: 14 | 2026-10-16T18:17:18+00:00 | Vulnerability · Source |
| CVE-2022-48804 | redhat_vex | kernel: vt_ioctl: fix array_index_nospec in vt_setactivate | fixed: 709 known affected: 50 known not affected: 22 | 2026-10-16T18:17:12+00:00 | Vulnerability · Source |
| CVE-2021-47219 | redhat_vex | kernel: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() | known affected: 90 known not affected: 108 | 2026-10-16T18:17:07+00:00 | Vulnerability · Source |
| CVE-2021-46960 | redhat_vex | kernel: cifs: Return correct error code from smb2_get_enc_key | fixed: 146 known affected: 74 known not affected: 124 | 2026-10-16T18:17:04+00:00 | Vulnerability · Source |
| CVE-2026-67419 | redhat_vex | rabbitmq-server: rabbitmq-server: Denial of Service via consecutive wildcards in topic binding keys | fixed: 3 known affected: 8 | 2026-10-16T18:14:57+00:00 | Vulnerability · Source |
| CVE-2026-101044 | redhat_vex | pnpm: pnpm: Arbitrary file creation outside project directory via lockfile path traversal | known affected: 4 known not affected: 10 | 2026-10-16T18:14:37+00:00 | Vulnerability · Source |
| CVE-2023-3865 | redhat_vex | kernel: Out of bounds read in smb2_write | known not affected: 275 | 2026-10-16T18:14:27+00:00 | Vulnerability · Source |
| CVE-2023-54286 | redhat_vex | kernel: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace | fixed: 120 known not affected: 243 | 2026-10-16T18:14:24+00:00 | Vulnerability · Source |
| CVE-2021-47605 | redhat_vex | kernel: vduse: fix memory corruption in vduse_dev_ioctl() | known not affected: 198 | 2026-10-16T18:14:20+00:00 | Vulnerability · Source |
| CVE-2017-5436 | redhat_vex | Mozilla: graphite2: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12) | fixed: 98 known affected: 2 | 2026-10-16T18:14:18+00:00 | Vulnerability · Source |
| CVE-2026-91142 | redhat_vex | cockpit: Cockpit: Unauthorized modification of login records via integer overflow | known affected: 35 | 2026-10-16T17:43:47+00:00 | Vulnerability · Source |
| CVE-2021-4454 | redhat_vex | kernel: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | known affected: 108 known not affected: 167 | 2026-10-16T17:43:42+00:00 | Vulnerability · Source |
| CVE-2026-90949 | redhat_vex | gimp: gimp: heap-based buffer overflow in PSP loader due to selection-channel geometry mismatch | known affected: 6 known not affected: 26 | 2026-10-16T17:43:14+00:00 | Vulnerability · Source |
| CVE-2026-43961 | redhat_vex | vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution | fixed: 17 known affected: 32 known not affected: 2 | 2026-10-16T17:42:51+00:00 | Vulnerability · Source |
| CVE-2025-49812 | redhat_vex | httpd: HTTP Session Hijack via a TLS upgrade | fixed: 833 | 2026-10-16T17:37:02+00:00 | Vulnerability · Source |
| CVE-2024-45812 | redhat_vex | vite: XSS via DOM Clobbering gadget found in vite bundled scripts | fixed: 8 known affected: 2 known not affected: 65 | 2026-10-16T17:37:00+00:00 | Vulnerability · Source |
| CVE-2024-45811 | redhat_vex | vite: server.fs.deny is bypassed when using `?import&raw` | fixed: 8 known affected: 2 known not affected: 65 | 2026-10-16T17:36:58+00:00 | Vulnerability · Source |
| CVE-2026-35536 | redhat_vex | tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments | fixed: 198 known affected: 11 known not affected: 607 | 2026-10-16T17:35:08+00:00 | Vulnerability · Source |
| CVE-2026-18611 | redhat_vex | data-science-pipelines-operator: DSPO: Cryptographically weak secret generation (math/rand) for DB and S3 credentials | fixed: 19 known not affected: 831 | 2026-10-16T17:35:04+00:00 | Vulnerability · Source |