Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-13327MEDIUMUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsEPSS 0.2%CVE-2025-2157LOWForeman: disclosure of executed commands and outputs in foreman / red hat satelliteEPSS 0.2%CVE-2025-8860LOWQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callbackEPSS 0.2%CVE-2026-81893MEDIUMGdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recoveryEPSS 0.2%CVE-2026-18938MEDIUMP11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systemsEPSS 0.2%CVE-2026-87766HIGHBubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setupEPSS 0.2%CVE-2026-4897MEDIUMPolkit: polkit: denial of service via unbounded input processing through standard inputEPSS 0.2%CVE-2026-15003MEDIUMBinutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of serviceEPSS 0.2%CVE-2026-93653MEDIUMPoppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)EPSS 0.2%CVE-2026-13316MEDIUMForeman: ssrf to cloud metada service through unvalidated test_url parameters in foreman configEPSS 0.1%CVE-2026-90463MEDIUMSssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)EPSS 0.1%CVE-2026-4105MEDIUMSystemd: systemd: privilege escalation via improper access control in registermachine d-bus methodEPSS 0.1%CVE-2026-92768MEDIUMCockpit-machines: cockpit-machines: sensitive data exposure via command-line argumentsEPSS 0.1%CVE-2026-6245MEDIUMSssd: out-of-bounds read in the sssdEPSS 0.1%CVE-2026-73433MEDIUMGstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeEPSS 0.1%CVE-2026-73434MEDIUMGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingEPSS 0.1%CVE-2026-75900MEDIUMSwtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatchEPSS 0.1%CVE-2026-6843MEDIUMNano: nano: format string vulnerability leads to denial of serviceEPSS 0.1%CVE-2025-54770MEDIUMGrub2: use-after-free in net_set_vlanEPSS 0.1%CVE-2026-88264MEDIUMCrun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfsEPSS 0.1%