Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-19685HIGHNetworkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)EPSS 0.1%CVE-2026-84718MEDIUMAutomation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trustEPSS 0.1%CVE-2026-97846MEDIUMKeycloak-services: keycloak-services: standard token exchange v2 bypasses mtls holder-of-key bindingEPSS 0.1%CVE-2025-14010MEDIUMAnsible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose outputEPSS 0.1%CVE-2026-54228HIGHAbrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directoriesEPSS 0.1%CVE-2025-6017MEDIUMRhacm: users with clusterreader role can see credentials from managed-clustersEPSS 0.1%CVE-2026-13322LOWKubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of serviceEPSS 0.1%CVE-2026-97185HIGHGimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset fileEPSS 0.1%CVE-2026-19411LOWShim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns nullEPSS 0.1%CVE-2026-68743MEDIUMSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1EPSS 0.1%CVE-2026-68744LOWSssd: sssd: nss responder uninitialized heap disclosure in initgroups replyEPSS 0.1%CVE-2026-96512HIGHSudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationEPSS 0.1%CVE-2026-84185MEDIUMJwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verificationEPSS 0.1%CVE-2026-91786MEDIUMGnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer sizeEPSS 0.1%CVE-2026-90947HIGHGimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset fileEPSS 0.1%CVE-2026-73583MEDIUMSblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdrEPSS 0.1%CVE-2026-68742MEDIUMSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddrEPSS 0.1%CVE-2025-12390MEDIUMOrg.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session idEPSS 0.1%CVE-2025-14821HIGHLibssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windowsEPSS 0.1%CVE-2026-96889HIGHLibrsvg: use-after-free when xml includes have duplicated entitiesEPSS 0.1%