VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-43826 | suse_vex | SUSE CVE CVE-2024-43826 | known affected: 394 known not affected: 344 recommended: 386 | 2026-10-16T01:46:02+00:00 | Vulnerability · Source |
| CVE-2026-42764 | microsoft_vex | NULL Pointer Dereference in QUIC Server Initial Packet Handling | known not affected: 6 | 2026-10-16T01:46:01+00:00 | Vulnerability · Source |
| CVE-2026-94417 | microsoft_vex | CRL check skipped when OCSP enabled and certificate has no OCSP URL | known not affected: 1 | 2026-10-16T01:46:01+00:00 | Vulnerability · Source |
| CVE-2026-23318 | microsoft_vex | ALSA: usb-audio: Use correct version for UAC3 header validation | fixed: 1 known affected: 3 | 2026-10-16T01:46:00+00:00 | Vulnerability · Source |
| CVE-2026-15442 | microsoft_vex | Heap use-after-free on read during bidirectional (D)TLS shutdown | known not affected: 1 | 2026-10-16T01:46:00+00:00 | Vulnerability · Source |
| CVE-2024-43827 | suse_vex | SUSE CVE CVE-2024-43827 | known not affected: 371 recommended: 47 | 2026-10-16T01:46:00+00:00 | Vulnerability · Source |
| CVE-2026-34183 | microsoft_vex | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | fixed: 1 known affected: 1 known not affected: 6 | 2026-10-16T01:45:59+00:00 | Vulnerability · Source |
| CVE-2026-22796 | microsoft_vex | ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function | known not affected: 1 | 2026-10-16T01:45:58+00:00 | Vulnerability · Source |
| CVE-2026-93304 | microsoft_vex | (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange | known not affected: 1 | 2026-10-16T01:45:58+00:00 | Vulnerability · Source |
| CVE-2024-43828 | suse_vex | SUSE CVE CVE-2024-43828 | known affected: 410 known not affected: 254 recommended: 718 | 2026-10-16T01:45:58+00:00 | Vulnerability · Source |
| CVE-2026-89135 | microsoft_vex | Failed X509_verify_cert leaves unverified CA in shared CertManager | known not affected: 1 | 2026-10-16T01:45:56+00:00 | Vulnerability · Source |
| CVE-2026-22795 | microsoft_vex | Missing ASN1_TYPE validation in PKCS#12 parsing | known not affected: 1 | 2026-10-16T01:45:56+00:00 | Vulnerability · Source |
| CVE-2024-43830 | suse_vex | SUSE CVE CVE-2024-43830 | known affected: 401 known not affected: 136 recommended: 663 | 2026-10-16T01:45:56+00:00 | Vulnerability · Source |
| CVE-2026-89102 | microsoft_vex | OCSP stapling v2 multi accepts non-CA chain certificates as issuers | known not affected: 1 | 2026-10-16T01:45:55+00:00 | Vulnerability · Source |
| CVE-2024-43833 | suse_vex | SUSE CVE CVE-2024-43833 | known affected: 394 known not affected: 322 recommended: 355 | 2026-10-16T01:45:55+00:00 | Vulnerability · Source |
| CVE-2026-42768 | microsoft_vex | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | fixed: 1 known affected: 1 known not affected: 6 | 2026-10-16T01:45:54+00:00 | Vulnerability · Source |
| CVE-2026-94419 | microsoft_vex | Client session cache reference poisoning allows resumption with wrong server | known not affected: 1 | 2026-10-16T01:45:53+00:00 | Vulnerability · Source |
| CVE-2024-43834 | suse_vex | SUSE CVE CVE-2024-43834 | known affected: 483 known not affected: 143 recommended: 729 | 2026-10-16T01:45:52+00:00 | Vulnerability · Source |
| CVE-2026-34180 | microsoft_vex | Heap Buffer Over-read in ASN.1 Content Parsing | fixed: 2 known affected: 2 known not affected: 9 | 2026-10-16T01:45:51+00:00 | Vulnerability · Source |
| CVE-2026-94418 | microsoft_vex | Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY | known not affected: 1 | 2026-10-16T01:45:50+00:00 | Vulnerability · Source |
| CVE-2024-43835 | suse_vex | SUSE CVE CVE-2024-43835 | known affected: 566 known not affected: 176 recommended: 605 | 2026-10-16T01:45:50+00:00 | Vulnerability · Source |
| CVE-2026-89136 | microsoft_vex | Client accepts unsolicited RawPublicKey server certificate type | known not affected: 1 | 2026-10-16T01:45:49+00:00 | Vulnerability · Source |
| CVE-2025-69419 | microsoft_vex | Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion | known not affected: 1 | 2026-10-16T01:45:49+00:00 | Vulnerability · Source |
| CVE-2026-23259 | microsoft_vex | io_uring/rw: free potentially allocated iovec on cache put failure | fixed: 2 known affected: 2 | 2026-10-16T01:45:49+00:00 | Vulnerability · Source |
| CVE-2024-43837 | suse_vex | SUSE CVE CVE-2024-43837 | known affected: 450 known not affected: 176 recommended: 643 | 2026-10-16T01:45:48+00:00 | Vulnerability · Source |
| CVE-2026-107298 | microsoft_vex | msgpack5: Deeply nested input can exhaust the decoder stack | known not affected: 1 | 2026-10-16T01:45:47+00:00 | Vulnerability · Source |
| CVE-2024-43838 | suse_vex | SUSE CVE CVE-2024-43838 | known not affected: 371 | 2026-10-16T01:45:47+00:00 | Vulnerability · Source |
| CVE-2026-89133 | microsoft_vex | NameConstraints not enforced across unconstrained intermediate CA | known not affected: 1 | 2026-10-16T01:45:46+00:00 | Vulnerability · Source |
| CVE-2026-107301 | microsoft_vex | msgpack5: Partial options disable prototype protection | known not affected: 1 | 2026-10-16T01:45:45+00:00 | Vulnerability · Source |
| CVE-2026-19444 | microsoft_vex | Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes | known not affected: 1 | 2026-10-16T01:45:45+00:00 | Vulnerability · Source |
| CVE-2024-43839 | suse_vex | SUSE CVE CVE-2024-43839 | known affected: 590 recommended: 727 | 2026-10-16T01:45:45+00:00 | Vulnerability · Source |
| CVE-2021-34558 | microsoft_vex | The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange allowing a malicious TLS server to cause a TLS client to panic. | fixed: 1 known affected: 1 known not affected: 2 | 2026-10-16T01:45:43+00:00 | Vulnerability · Source |
| CVE-2026-23248 | microsoft_vex | perf/core: Fix refcount bug and potential UAF in perf_mmap | fixed: 2 known affected: 2 | 2026-10-16T01:45:43+00:00 | Vulnerability · Source |
| CVE-2024-43840 | suse_vex | SUSE CVE CVE-2024-43840 | known affected: 394 known not affected: 322 recommended: 355 | 2026-10-16T01:45:43+00:00 | Vulnerability · Source |
| CVE-2026-107296 | microsoft_vex | msgpack5: Decoding negative int64 values mutates the input buffer | known not affected: 1 | 2026-10-16T01:45:42+00:00 | Vulnerability · Source |
| CVE-2026-107300 | microsoft_vex | msgpack5: Many buffered values can exhaust the streaming decoder stack | known not affected: 1 | 2026-10-16T01:45:41+00:00 | Vulnerability · Source |
| CVE-2024-43843 | suse_vex | SUSE CVE CVE-2024-43843 | known not affected: 371 | 2026-10-16T01:45:41+00:00 | Vulnerability · Source |
| CVE-2026-93990 | microsoft_vex | Expat through 2.8.4 Malformed UTF-16 Acceptance via Unchecked Surrogate | fixed: 1 known affected: 1 known not affected: 2 | 2026-10-16T01:45:40+00:00 | Vulnerability · Source |
| CVE-2026-107299 | microsoft_vex | msgpack5: Reserved byte can cause unbounded stream buffering | known not affected: 1 | 2026-10-16T01:45:39+00:00 | Vulnerability · Source |
| CVE-2024-43844 | suse_vex | SUSE CVE CVE-2024-43844 | known not affected: 371 | 2026-10-16T01:45:39+00:00 | Vulnerability · Source |
| CVE-2018-20677 | microsoft_vex | In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. | known not affected: 4 | 2026-10-16T01:45:37+00:00 | Vulnerability · Source |
| CVE-2025-71161 | microsoft_vex | dm-verity: disable recursive forward error correction | known affected: 5 | 2026-10-16T01:45:37+00:00 | Vulnerability · Source |
| CVE-2026-107302 | microsoft_vex | msgpack5: Truncated map32 headers throw an unexpected error | known not affected: 1 | 2026-10-16T01:45:37+00:00 | Vulnerability · Source |
| CVE-2024-43848 | suse_vex | SUSE CVE CVE-2024-43848 | known not affected: 371 recommended: 47 | 2026-10-16T01:45:37+00:00 | Vulnerability · Source |
| CVE-2024-43849 | suse_vex | SUSE CVE CVE-2024-43849 | known affected: 340 known not affected: 201 recommended: 643 | 2026-10-16T01:45:35+00:00 | Vulnerability · Source |
| CVE-2026-107297 | microsoft_vex | msgpack5: Quadratic parsing in the streaming decoder | known not affected: 1 | 2026-10-16T01:45:34+00:00 | Vulnerability · Source |
| CVE-2024-43851 | suse_vex | SUSE CVE CVE-2024-43851 | known affected: 394 known not affected: 322 recommended: 355 | 2026-10-16T01:45:33+00:00 | Vulnerability · Source |
| CVE-2018-14042 | microsoft_vex | In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. | known not affected: 5 | 2026-10-16T01:45:32+00:00 | Vulnerability · Source |
| CVE-2024-43852 | suse_vex | SUSE CVE CVE-2024-43852 | known not affected: 371 | 2026-10-16T01:45:32+00:00 | Vulnerability · Source |
| CVE-2026-107708 | microsoft_vex | MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC | known not affected: 1 | 2026-10-16T01:45:31+00:00 | Vulnerability · Source |