Vulnerabilities in Red Hat

2,153 results
Vexday analysis

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-73583MEDIUMSblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdrEPSS 0.1%CVE-2026-84185MEDIUMJwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verificationEPSS 0.1%CVE-2026-90947HIGHGimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset fileEPSS 0.1%CVE-2026-68742MEDIUMSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddrEPSS 0.1%CVE-2025-61663MEDIUMGrub2: missing unregister call for normal commands may lead to use-after-freeEPSS 0.1%CVE-2026-75092HIGHLeapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable pluginsEPSS 0.1%CVE-2026-96889HIGHLibrsvg: use-after-free when xml includes have duplicated entitiesEPSS 0.1%CVE-2025-14821HIGHLibssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windowsEPSS 0.1%CVE-2026-44187LOWAnsible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api keyEPSS 0.1%CVE-2026-88832HIGHBusybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflowEPSS 0.1%CVE-2026-66785LOWSubmariner: ipsec psk secrets file created with default world-readable permissionsEPSS 0.1%CVE-2026-73584MEDIUMSblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handlingEPSS 0.1%CVE-2026-13208MEDIUMKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request bodyEPSS 0.1%CVE-2026-91142LOWCockpit: integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ilp32 buildsEPSS 0.1%CVE-2026-54229HIGHAbrt: chownproblemdir succeeds during active post-create event processing due to inadequate lockingEPSS 0.1%CVE-2026-55655MEDIUMOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionsEPSS 0.1%CVE-2026-88839MEDIUMBusybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpointEPSS 0.1%CVE-2026-13732HIGHGdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfEPSS 0.1%CVE-2026-12610MEDIUMSssd: use-after-free crash in sssd' 'sssd_pam' processEPSS 0.1%CVE-2025-13193MEDIUMLibvirt: information disclosure via world-readable vm snapshotsEPSS 0.1%