Vulnerabilities in Red Hat

2,153 results
Vexday analysis

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-75900MEDIUMSwtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatchEPSS 0.1%CVE-2026-73434MEDIUMGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingEPSS 0.1%CVE-2026-88264MEDIUMCrun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfsEPSS 0.1%CVE-2026-80158MEDIUMAnsible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingsEPSS 0.1%CVE-2026-13002MEDIUMDnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsingEPSS 0.1%CVE-2026-6843MEDIUMNano: nano: format string vulnerability leads to denial of serviceEPSS 0.1%CVE-2026-6844MEDIUMBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesEPSS 0.1%CVE-2025-54770MEDIUMGrub2: use-after-free in net_set_vlanEPSS 0.1%CVE-2026-88265MEDIUMCrun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chownEPSS 0.1%CVE-2025-11537MEDIUMKeycloak-services: sensitive headers shown in the http access logsEPSS 0.1%CVE-2026-52721MEDIUMGstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsingEPSS 0.1%CVE-2025-58713MEDIUMRhpam: privilege escalation via excessive /etc/passwd permissionsEPSS 0.1%CVE-2025-57854MEDIUMOsus-operator: privilege escalation via excessive /etc/passwd permissionsEPSS 0.1%CVE-2026-6845MEDIUMBinutils: binutils: denial of service via crafted elf fileEPSS 0.1%CVE-2026-68563MEDIUMAnsible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissionsEPSS 0.1%CVE-2025-14946MEDIUMLibnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uriEPSS 0.1%CVE-2026-95519HIGHRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)EPSS 0.1%CVE-2026-93676LOWXdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checksEPSS 0.1%CVE-2026-71219MEDIUMGfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversalEPSS 0.1%CVE-2026-92745MEDIUMCockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process argumentsEPSS 0.1%