Vulnerabilities in Red Hat

2,146 results
Vexday analysis

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-3195HIGHQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)EPSS 0.2%CVE-2026-84721MEDIUMAutomation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)EPSS 0.2%CVE-2025-9909MEDIUMAap-gateway: improper path validation in gateway allows credential exfiltrationEPSS 0.2%CVE-2026-10805MEDIUMNetworkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendEPSS 0.2%CVE-2025-5731MEDIUMInfinispan: credential leakage in infinispan cliEPSS 0.2%CVE-2025-9907MEDIUMEvent-driven-ansible: event stream test mode exposes sensitive headers in aap edaEPSS 0.2%CVE-2023-4155MEDIUMSev-es / sev-snp vmgexit double fetch vulnerabilityEPSS 0.2%CVE-2026-72694HIGHMrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationEPSS 0.2%CVE-2026-17072LOWGstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containersEPSS 0.2%CVE-2025-12464MEDIUMQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeEPSS 0.2%CVE-2026-13595MEDIUMUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingEPSS 0.2%CVE-2026-15370MEDIUMLibssh: libssh: stack buffer overflow in sftp server longname constructionEPSS 0.2%CVE-2026-4647MEDIUMBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd libraryEPSS 0.2%CVE-2026-7867HIGHUdisks2: udisks2: local privilege escalation via as-user option spoofingEPSS 0.2%CVE-2026-18090MEDIUMGdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle blockEPSS 0.2%CVE-2026-3842HIGHQemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writeEPSS 0.2%CVE-2026-76781MEDIUMLibxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attributeEPSS 0.2%CVE-2026-97176MEDIUMKeycloak-services: keycloak-services: essential acr requirement silently bypassed via cookie authenticatorEPSS 0.2%CVE-2026-6862MEDIUMEfivar: efivar: denial of service due to stack overflow in device path node parsingEPSS 0.2%CVE-2026-96442HIGHEmacs: emacs: arbitrary code execution in flymake modeEPSS 0.2%