Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-8067HIGHUdisks: out-of-bounds read in udisks daemonEPSS 0.7%CVE-2026-9800HIGHKeycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonEPSS 0.7%CVE-2024-9622MEDIUMResteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4EPSS 0.6%CVE-2024-5967LOWKeycloak: leak of configured ldap bind credentials through the keycloak admin consoleEPSS 0.6%CVE-2026-82965HIGHKeycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsingEPSS 0.6%CVE-2026-109411HIGHSamba: access control bypass via vfs_ceph_rgw case-insensitive openEPSS 0.6%CVE-2023-4273MEDIUMKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryEPSS 0.6%CVE-2023-0456HIGHApicast proxies the api call with incorrect jwt token to the api backend without proper authorization checkEPSS 0.6%CVE-2025-4373MEDIUMGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharEPSS 0.6%CVE-2026-4887MEDIUMGimp: gimp:memory disclosure and denial of service via specially crafted pcx imageEPSS 0.6%CVE-2024-31420MEDIUMCnv: dos through repeatedly calling vm-dump-metrics until virt handler crashesEPSS 0.6%CVE-2026-56209HIGHLibaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackEPSS 0.6%CVE-2026-91147MEDIUMCockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slashEPSS 0.6%CVE-2017-7514MEDIUMA cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user abEPSS 0.6%CVE-2026-94640HIGHRpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of serviceEPSS 0.6%CVE-2026-10059CRITICALCluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount tokenEPSS 0.6%CVE-2025-4953HIGHPodman: build context bind mountEPSS 0.6%CVE-2026-4634HIGHKeycloak: keycloak: denial of service via excessive processing of openid connect scope parametersEPSS 0.6%CVE-2026-52720HIGHGstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbEPSS 0.6%CVE-2026-7504HIGHOrg.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloakEPSS 0.6%