Vulnerabilities in Red Hat

2,153 results
Vexday analysis

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-19816HIGHPackageKit: dnf5 backend ignores SIMULATE on RepoRemoveEPSS 0.1%CVE-2026-15779MEDIUMSamba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validationEPSS 0.1%CVE-2026-26104MEDIUMUdisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus apiEPSS 0.1%CVE-2026-76925MEDIUMFlatpak: flatpak: toctou race condition allows symlink redirectionEPSS 0.1%CVE-2025-11568MEDIUMLuksmeta: data corruption when handling luks1 partitions with luksmetaEPSS 0.1%CVE-2025-53861LOWAap: sensitive cookie(s) set without security flagsEPSS 0.1%CVE-2026-91203MEDIUMCockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race conditionEPSS 0.1%CVE-2023-5342MEDIUMShim: expired secure boot certificateEPSS 0.1%CVE-2026-15811MEDIUMKronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changesEPSS 0.1%CVE-2026-18477MEDIUMTar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escapeEPSS 0.1%CVE-2026-16517LOWLibarchive: libarchive: signed integer overflow in archive_write_zip_headerEPSS 0.1%CVE-2026-102473MEDIUMDash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabledEPSS —CVE-2026-102623MEDIUMKubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volumeEPSS —CVE-2026-102555HIGHLibsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decodingEPSS —CVE-2026-101292HIGHArtemis-core-client: unsafe reflection in apache activemq artemis federation message deserializationEPSS —CVE-2026-102560HIGHLibsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growthEPSS —CVE-2026-102558HIGHLibsoup: libsoup: heap buffer overflow during websocket receive-buffer growthEPSS —CVE-2026-97023HIGHFlatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/binEPSS —CVE-2026-97024HIGHFlatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etcEPSS —CVE-2026-96740MEDIUMStreamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providersEPSS —