Vulnerabilities in Red Hat

2,146 results
Vexday analysis

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-8766MEDIUMNoobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core containerEPSS 0.2%CVE-2026-71227MEDIUMLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnEPSS 0.2%CVE-2026-89329MEDIUMDevice-mapper-multipath: local denial of service via blocking ipc send operationsEPSS 0.2%CVE-2026-4740HIGHRhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validationEPSS 0.2%CVE-2026-91202MEDIUMCockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged pasteEPSS 0.2%CVE-2026-19730MEDIUMPodman: podman: quadlet install --replace non-truncating write retains removed host-access directivesEPSS 0.2%CVE-2026-82327MEDIUMLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist dataEPSS 0.2%CVE-2026-61477LOWLibvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injectionEPSS 0.2%CVE-2026-59846LOWLibssh: libssh: information disclosure via proxycommand %r username expansionEPSS 0.2%CVE-2026-5673MEDIUMLibtheora: libtheora: denial of service or information disclosure via malformed avi file processingEPSS 0.2%CVE-2026-77159MEDIUMLibvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlinkEPSS 0.2%CVE-2023-4066MEDIUMOperator: passwords defined in secrets shown in statefulset yamlEPSS 0.2%CVE-2026-11837HIGHAnsible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chownEPSS 0.2%CVE-2025-9615LOWNetworkmanager: networkmanager file accessEPSS 0.2%CVE-2024-0641MEDIUMKernel: deadlock leading to denial of service in tipc_crypto_key_revokeEPSS 0.2%CVE-2026-11819MEDIUMCommunity.general: community.general keyring_info — os keyring passphrase returned in plaintextEPSS 0.2%CVE-2026-71846MEDIUMInsights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilegeEPSS 0.2%CVE-2026-11786LOW389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()EPSS 0.2%CVE-2026-5164MEDIUMVirtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap requestEPSS 0.2%CVE-2026-57965MEDIUMSpice-vdagent: integer overflow in udscs_write() leading to heap buffer overflowEPSS 0.2%