Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2023-1672MEDIUMRace condition exists in the key generation and rotation functionalityEPSS 0.6%CVE-2026-14474HIGHSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationEPSS 0.6%CVE-2026-59844MEDIUMLibssh: libssh: denial of service via oversized sftp read lengthEPSS 0.6%CVE-2026-91149HIGHCockpit: cockpit: denial of service via unbounded connection thread spawningEPSS 0.6%CVE-2026-59843MEDIUMLibssh: libssh: denial of service via zero advertised channel packet sizeEPSS 0.6%CVE-2026-44604HIGHRpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell commandEPSS 0.6%CVE-2025-32051MEDIUMLibsoup: segmentation fault when parsing malformed data uriEPSS 0.6%CVE-2026-3833MEDIUMGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonEPSS 0.6%CVE-2024-2199MEDIUM389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.cEPSS 0.6%CVE-2025-10894CRITICALNx: nx/devkit: malicious versions of nx and plugins published to npmEPSS 0.6%CVE-2026-96889HIGHLibrsvg: use-after-free when xml includes have duplicated entitiesEPSS 0.6%CVE-2025-4574MEDIUMCrossbeam-channel: crossbeam-channel vulnerable to double free on dropEPSS 0.6%CVE-2026-119843MEDIUMGst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tagsEPSS 0.6%CVE-2026-19729MEDIUMKeycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parametersEPSS 0.6%CVE-2024-11614HIGHDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryEPSS 0.6%CVE-2026-12542MEDIUMForeman: command injection in foreman-tailEPSS 0.6%CVE-2026-71366HIGHAwx: notification backends allow ssrf and credential leakageEPSS 0.6%CVE-2026-1609HIGHOrg.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled usersEPSS 0.6%CVE-2023-6944MEDIUMRhdh: catalog-import function leaks credentials to frontendEPSS 0.6%CVE-2026-10649HIGHPacemaker: pacemaker: denial of service via integer overflow in remote message decompressionEPSS 0.6%