Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-57851MEDIUMMce: privilege escalation via excessive /etc/passwd permissionsEPSS 0.1%CVE-2026-88924HIGHGvfs: gvfs-admin socket ownership race permits local rootEPSS 0.1%CVE-2026-18107HIGHCriu: criu: container escape via rseq critical section hijack during checkpoint/restoreEPSS 0.1%CVE-2026-14330MEDIUMPipewire: pulse server alloca stack overflowEPSS 0.1%CVE-2026-73834MEDIUMMust-gather: must-gather: embedded secret data in acm wrapper crs collected without redactionEPSS 0.1%CVE-2026-6842LOWNano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissionsEPSS 0.1%CVE-2026-72693HIGHKbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root loginEPSS 0.1%CVE-2026-54099HIGHWindows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:mastersEPSS 0.1%CVE-2026-16730MEDIUMDbus-broker: dbus-broker: session bus denial of service via emfile during peer setupEPSS 0.1%CVE-2026-17113MEDIUMCri-o: cri-o: unvalidated image env var causes daemon crashEPSS 0.1%CVE-2026-26103HIGHUdisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus apiEPSS 0.1%CVE-2026-19079MEDIUMPolicycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulationEPSS 0.1%CVE-2026-14969MEDIUM389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionEPSS 0.1%CVE-2026-91205MEDIUMCockpit-files: cockpit-files: local attacker can hijack file ownership via symlink raceEPSS 0.1%CVE-2026-19816HIGHPackageKit: dnf5 backend ignores SIMULATE on RepoRemoveEPSS 0.1%CVE-2026-26104MEDIUMUdisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus apiEPSS 0.1%CVE-2026-15779MEDIUMSamba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validationEPSS 0.1%CVE-2026-76925MEDIUMFlatpak: flatpak: toctou race condition allows symlink redirectionEPSS 0.1%CVE-2025-11568MEDIUMLuksmeta: data corruption when handling luks1 partitions with luksmetaEPSS 0.1%CVE-2025-53861LOWAap: sensitive cookie(s) set without security flagsEPSS 0.1%