Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-75092HIGHLeapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable pluginsEPSS 0.1%CVE-2025-61663MEDIUMGrub2: missing unregister call for normal commands may lead to use-after-freeEPSS 0.1%CVE-2026-44187LOWAnsible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api keyEPSS 0.1%CVE-2026-88832HIGHBusybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflowEPSS 0.1%CVE-2026-13208MEDIUMKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request bodyEPSS 0.1%CVE-2026-66785LOWSubmariner: ipsec psk secrets file created with default world-readable permissionsEPSS 0.1%CVE-2026-73584MEDIUMSblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handlingEPSS 0.1%CVE-2026-91142LOWCockpit: integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ilp32 buildsEPSS 0.1%CVE-2026-54229HIGHAbrt: chownproblemdir succeeds during active post-create event processing due to inadequate lockingEPSS 0.1%CVE-2026-55655MEDIUMOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionsEPSS 0.1%CVE-2026-88839MEDIUMBusybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpointEPSS 0.1%CVE-2026-12610MEDIUMSssd: use-after-free crash in sssd' 'sssd_pam' processEPSS 0.1%CVE-2026-13732HIGHGdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfEPSS 0.1%CVE-2025-13193MEDIUMLibvirt: information disclosure via world-readable vm snapshotsEPSS 0.1%CVE-2026-88835MEDIUMBusybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packagesEPSS 0.1%CVE-2026-2243MEDIUMQemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsingEPSS 0.1%CVE-2026-18495MEDIUMLibtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthroughEPSS 0.1%CVE-2026-96546LOWGimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loaderEPSS 0.1%CVE-2026-18839LOWPopt-devel: popt-static: size_t underflow in singleoptionhelpEPSS 0.1%CVE-2026-2625MEDIUMRust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verificationEPSS 0.1%