Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-24329MEDIUMWildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.EPSS 0.6%CVE-2024-50311MEDIUMGraphql: denial of service (dos) vulnerability via graphql batchingEPSS 0.6%CVE-2022-4145MEDIUMContent spoofingEPSS 0.6%CVE-2024-1979LOWQuarkus: information leak in annotationEPSS 0.6%CVE-2025-49521HIGHEvent-driven-ansible: template injection via git branch and refspec in eda projectsEPSS 0.6%CVE-2025-14874HIGHNodemailer: nodemailer: denial of service via crafted email address headerEPSS 0.6%CVE-2017-7528MEDIUMAnsible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For headEPSS 0.6%CVE-2025-2487MEDIUM389-ds-base: null pointer dereference leads to denial of serviceEPSS 0.6%CVE-2026-75569HIGHMce-operator-bundle: all github actions pinned by mutable tag, not commit shaEPSS 0.6%CVE-2018-14620MEDIUMThe OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could poEPSS 0.6%CVE-2026-15467HIGHTrustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy overrideEPSS 0.6%CVE-2026-102558HIGHLibsoup: libsoup: heap buffer overflow during websocket receive-buffer growthEPSS 0.6%CVE-2024-0793HIGHKube-controller-manager: malformed hpa v1 manifest causes crashEPSS 0.6%CVE-2026-18947HIGHFeast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materializationEPSS 0.6%CVE-2025-46420MEDIUMLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cEPSS 0.6%CVE-2025-49795HIGHLibxml: null pointer dereference leads to denial of service (dos)EPSS 0.6%CVE-2026-16527HIGHPcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rulesEPSS 0.6%CVE-2026-81829MEDIUMSmallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolverEPSS 0.6%CVE-2023-39329MEDIUMOpenjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.cEPSS 0.6%CVE-2023-4456MEDIUMOpenshift-logging: lokistack authorisation is cached too broadlyEPSS 0.6%