Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2024-3622HIGHMirror-registry: plain-text default csrf secret keyEPSS 0.5%CVE-2026-70398CRITICALMulticloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespaceEPSS 0.5%CVE-2026-102560HIGHLibsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growthEPSS 0.5%CVE-2026-18621HIGHData-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardeningEPSS 0.5%CVE-2023-3089HIGHOcp & fips modeEPSS 0.5%CVE-2026-12993MEDIUMApicurio/apicurio-registry: apicurio-registry: xml entity-expansion denial of service via internal dtd subsetEPSS 0.5%CVE-2025-11065MEDIUMGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructureEPSS 0.5%CVE-2026-85469HIGHQuay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopeEPSS 0.5%CVE-2024-31080HIGHXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsEPSS 0.5%CVE-2026-24330MEDIUMWildfly-core: wildfly: arbitrary file read via malicious archive deploymentEPSS 0.5%CVE-2024-31081HIGHXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceEPSS 0.5%CVE-2026-15574HIGHVllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug defaultEPSS 0.5%CVE-2026-9804HIGHKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file readEPSS 0.5%CVE-2024-2467MEDIUMPerl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)EPSS 0.5%CVE-2025-6032HIGHPodman: podman missing tls verificationEPSS 0.5%CVE-2024-7631MEDIUMOpenshift-console: openshift console: path traversalEPSS 0.5%CVE-2025-12801MEDIUMNfs-utils: rpc.mountd in the nfs-utils privilege escalationEPSS 0.5%CVE-2024-12582HIGHSkupper: skupper-cli: flawed authentication method may lead to arbitrary file read or denial of serviceEPSS 0.5%CVE-2026-2271LOWGimp: gimp: denial of service via crafted psp image fileEPSS 0.5%CVE-2026-123151HIGHGdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailEPSS 0.5%