Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2024-9620MEDIUMEvent-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryptionEPSS 0.2%CVE-2026-12892MEDIUMGstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parserEPSS 0.2%CVE-2026-90996MEDIUMSssd: sssd: denial of service in nss responder via crafted zero-length requestsEPSS 0.2%CVE-2026-52902MEDIUMAwxkit: path traversal via yaml !include directiveEPSS 0.2%CVE-2026-12505HIGHCifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcallEPSS 0.2%CVE-2026-70495HIGHSearch-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:mastersEPSS 0.2%CVE-2025-57852MEDIUMOpenshift-ai: privilege escalation via excessive /etc/passwd permissionsEPSS 0.2%CVE-2026-2376MEDIUMMirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interfaceEPSS 0.2%CVE-2026-78410HIGHUtil-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirectionEPSS 0.2%CVE-2026-71474HIGHInsights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx responseEPSS 0.2%CVE-2026-93433MEDIUMLibstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsingEPSS 0.2%CVE-2026-92615MEDIUMFlightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedEPSS 0.2%CVE-2026-90995MEDIUMSssd: sssd: local denial of service due to null pointer dereference in pam responderEPSS 0.2%CVE-2026-19548MEDIUMBinutils: binutils: multiple use-after-free in add_archive_element via lto plugin processingEPSS 0.2%CVE-2026-5165MEDIUMVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetEPSS 0.2%CVE-2026-6390MEDIUMNano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.EPSS 0.2%CVE-2026-78409HIGHUtil-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinksEPSS 0.2%CVE-2026-0665MEDIUMQemu-kvm: heap off-by-one in kvm xen physdevop_map_pirqEPSS 0.2%CVE-2026-4367MEDIUMLibxpm: libxpm: denial of service via out-of-bounds read in xpm file parsingEPSS 0.2%CVE-2026-6861MEDIUMEmacs: emacs: memory corruption vulnerability when processing svg cssEPSS 0.2%