Vulnerabilidades em RED HAT
2.125 resultadosAnálise Vexday
Red Hat apresenta footprint mínimo na base Vexday com apenas 1 CVE registrado, sem incidentes sob exploração ativa no momento. A vulnerabilidade identificada relaciona-se a deficiências em armazenamento de credenciais (CWE-522), mas não figura entre as críticas e permanece sem atividade recente de ataque.
CVE-2025-0650HIGHOvn: egress acls may be bypassed via specially crafted udp packetEPSS 0.9%CVE-2026-1933HIGHSamba: missing access check on reparse point operationsEPSS 0.9%CVE-2023-6476MEDIUMCri-o: pods are able to break out of resource confinement on cgroupv2EPSS 0.9%CVE-2026-3047HIGHOrg.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated loginEPSS 0.9%CVE-2025-32049HIGHLibsoup: denial of service attack to websocket serverEPSS 0.9%CVE-2026-86404HIGHArtemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by defaultEPSS 0.9%CVE-2023-0813HIGHNetwork-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforcedEPSS 0.9%CVE-2026-58012MEDIUMGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()EPSS 0.9%CVE-2026-58013MEDIUMGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"EPSS 0.9%CVE-2026-58010MEDIUMGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()EPSS 0.9%CVE-2023-3171HIGHEap-7: heap exhaustion via deserializationEPSS 0.9%CVE-2026-3832LOWGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseEPSS 0.9%CVE-2023-7008MEDIUMSystemd-resolved: unsigned name response in signed zone is not refused when dnssec=yesEPSS 0.8%CVE-2024-7341HIGHWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adaptersEPSS 0.8%CVE-2026-74909HIGHKeycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segmentsEPSS 0.8%CVE-2026-18453HIGH389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchEPSS 0.8%CVE-2023-4458MEDIUMKernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerabilityEPSS 0.8%CVE-2025-2784HIGHLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentEPSS 0.8%CVE-2024-0193HIGHKernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalationEPSS 0.8%CVE-2023-5189MEDIUMHub: insecure galaxy-importer tarfile extractionEPSS 0.8%