Vulnerabilidades en Red Hat

2121 resultados
Análisis Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2020-1735MEDIUMA flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then chEPSS 0.5%CVE-2026-5483HIGHOdh-dashboard: odh dashboard kubernetes service account exposureEPSS 0.5%CVE-2026-58012MEDIUMGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()EPSS 0.5%CVE-2024-3508MEDIUMBzip2: compressed content bomb leads to denial of service of bombastic apiEPSS 0.5%CVE-2026-58010MEDIUMGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()EPSS 0.5%CVE-2024-1753HIGHBuildah: full container escape at build timeEPSS 0.5%CVE-2023-38201MEDIUMKeylime: challenge-response protocol bypass during agent registrationEPSS 0.5%CVE-2026-9099HIGHKeycloak: group-admin escalation to realm-adminEPSS 0.5%CVE-2026-1616HIGHosim: Path Traversal via query parameters in Nginx configurationEPSS 0.5%CVE-2026-34000MEDIUMXwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.EPSS 0.5%CVE-2026-34002MEDIUMXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingEPSS 0.5%CVE-2026-14164HIGHLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()EPSS 0.5%CVE-2025-2241HIGHHive: exposure of vcenter credentials via clusterprovision in hive / mce / acmEPSS 0.5%CVE-2026-14940MEDIUM389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnEPSS 0.5%CVE-2024-0560MEDIUMApicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versionsEPSS 0.5%CVE-2026-4629MEDIUMKeycloak: keycloak: privilege escalation through hardcoded role mapper injectionEPSS 0.5%CVE-2026-11610HIGH389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindEPSS 0.5%CVE-2025-8556LOWGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultsEPSS 0.5%CVE-2026-2239LOWGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflowEPSS 0.5%CVE-2017-7513MEDIUMIt was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host EPSS 0.5%