Vulnerabilidades em Red Hat

2.048 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-14559MEDIUMOrg.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled usersEPSS 0.5%CVE-2023-6110MEDIUMOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeEPSS 0.5%CVE-2026-5483HIGHOdh-dashboard: odh dashboard kubernetes service account exposureEPSS 0.5%CVE-2020-1735MEDIUMA flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then chEPSS 0.5%CVE-2026-58010MEDIUMGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()EPSS 0.5%CVE-2024-3508MEDIUMBzip2: compressed content bomb leads to denial of service of bombastic apiEPSS 0.5%CVE-2026-58012MEDIUMGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()EPSS 0.5%CVE-2024-1753HIGHBuildah: full container escape at build timeEPSS 0.5%CVE-2023-38201MEDIUMKeylime: challenge-response protocol bypass during agent registrationEPSS 0.5%CVE-2026-9099HIGHKeycloak: group-admin escalation to realm-adminEPSS 0.5%CVE-2026-34000MEDIUMXwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.EPSS 0.5%CVE-2026-1616HIGHosim: Path Traversal via query parameters in Nginx configurationEPSS 0.5%CVE-2026-34002MEDIUMXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingEPSS 0.5%CVE-2026-14164HIGHLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()EPSS 0.5%CVE-2025-2241HIGHHive: exposure of vcenter credentials via clusterprovision in hive / mce / acmEPSS 0.5%CVE-2026-14940MEDIUM389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnEPSS 0.5%CVE-2026-4629MEDIUMKeycloak: keycloak: privilege escalation through hardcoded role mapper injectionEPSS 0.5%CVE-2024-0560MEDIUMApicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versionsEPSS 0.5%CVE-2026-11610HIGH389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindEPSS 0.5%CVE-2025-8556LOWGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultsEPSS 0.5%