Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-80158MEDIUMAnsible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingsEPSS 0.1%CVE-2026-13002MEDIUMDnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsingEPSS 0.1%CVE-2026-6844MEDIUMBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesEPSS 0.1%CVE-2025-11537MEDIUMKeycloak-services: sensitive headers shown in the http access logsEPSS 0.1%CVE-2026-52721MEDIUMGstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsingEPSS 0.1%CVE-2026-88265MEDIUMCrun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chownEPSS 0.1%CVE-2025-58713MEDIUMRhpam: privilege escalation via excessive /etc/passwd permissionsEPSS 0.1%CVE-2026-6845MEDIUMBinutils: binutils: denial of service via crafted elf fileEPSS 0.1%CVE-2025-57854MEDIUMOsus-operator: privilege escalation via excessive /etc/passwd permissionsEPSS 0.1%CVE-2025-14946MEDIUMLibnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uriEPSS 0.1%CVE-2026-95519HIGHRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)EPSS 0.1%CVE-2026-68563MEDIUMAnsible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissionsEPSS 0.1%CVE-2026-93676LOWXdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checksEPSS 0.1%CVE-2026-92745MEDIUMCockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process argumentsEPSS 0.1%CVE-2026-73585MEDIUMSblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attackEPSS 0.1%CVE-2026-71219MEDIUMGfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversalEPSS 0.1%CVE-2026-92747MEDIUMCockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process listEPSS 0.1%CVE-2026-71224MEDIUMGfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walkEPSS 0.1%CVE-2026-3196MEDIUMQemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocationEPSS 0.1%CVE-2025-14876MEDIUMQemu-kvm: unbounded allocation in virtio-cryptoEPSS 0.1%