Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-54771MEDIUMGrub2: use-after-free in grub_file_close()EPSS 0.1%CVE-2026-84828MEDIUMPcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --tokenEPSS 0.1%CVE-2026-18508MEDIUMTar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwriteEPSS 0.1%CVE-2026-18743LOWPopt-devel: popt-static: short realloc in poptconfigfiletostringEPSS 0.1%CVE-2026-4878MEDIUMLibcap: libcap: privilege escalation via toctou race condition in cap_set_file()EPSS 0.1%CVE-2026-86469MEDIUMGlib2: toctou symlink race in `g_file_create_replace_destination` fallback pathEPSS 0.1%CVE-2026-86564LOWDpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handlerEPSS 0.1%CVE-2026-19617MEDIUMLibdm: lvm2: libdm: denial of service via uncontrolled recursion in config parserEPSS 0.1%CVE-2026-59845MEDIUMLibssh: libssh: denial of service via unchecked proxycommand fork() failureEPSS 0.1%CVE-2026-18739LOWPopt-devel: popt-static: off-by-one in poptstuffargsEPSS 0.1%CVE-2026-71222MEDIUMGfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processingEPSS 0.1%CVE-2025-61664MEDIUMGrub2: missing unregister call for normal_exit command may lead to use-after-freeEPSS 0.1%CVE-2026-16743MEDIUMAccountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed usersEPSS 0.1%CVE-2026-13218MEDIUMKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcherEPSS 0.1%CVE-2026-1765MEDIUMLocalsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 filesEPSS 0.1%CVE-2026-11569MEDIUMQuay: quay: stored xss via filedrop svg uploadEPSS 0.1%CVE-2026-87872MEDIUMCommunity.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosureEPSS 0.1%CVE-2026-63623MEDIUMLibvirt: information disclosure via world-readable storage volume images during clone/convertEPSS 0.1%CVE-2026-84042HIGHCrun: crun: rootful krun with passt executes container payload as host rootEPSS 0.1%CVE-2026-92382MEDIUMUsbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds writeEPSS 0.1%