Vulnerabilities in Red Hat

2,153 results
Vexday analysis

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-86330HIGHNoobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internalEPSS —CVE-2026-102557HIGHLibsoup: libsoup: heap buffer overflow during websocket message reassemblyEPSS —CVE-2026-97027LOWFlatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service filesEPSS —CVE-2026-102556HIGHLibsoup: libsoup: heap buffer overflow from websocket pong signal type confusionEPSS —CVE-2026-97025LOWFlatpak: flatpak: world-readable oci authentication token in system-helper cache pathEPSS —CVE-2026-102559HIGHLibsoup: libsoup: heap buffer overflow during websocket client-frame maskingEPSS —CVE-2026-102474MEDIUMDash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservationEPSS —CVE-2026-101333LOWKeycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpointEPSS —CVE-2026-97026LOWFlatpak: flatpak: world-writable temporary child repositories in system-helper cache pathEPSS —CVE-2026-102010HIGHGcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_ifEPSS —CVE-2026-87114HIGHKube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudoEPSS —CVE-2026-95520HIGHRpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packagesEPSS —CVE-2026-97029MEDIUMFlatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process groupEPSS —