Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-2271LOWGimp: gimp: denial of service via crafted psp image fileEPSS 0.5%CVE-2026-18663MEDIUM389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlEPSS 0.5%CVE-2026-1616HIGHosim: Path Traversal via query parameters in Nginx configurationEPSS 0.5%CVE-2019-14846HIGHIn Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG EPSS 0.5%CVE-2025-62229HIGHXorg: xmayland: use-after-free in xpresentnotify structure creationEPSS 0.5%CVE-2025-66287HIGHWebkitgtk: processing maliciously crafted web content may lead to an unexpected process crashEPSS 0.5%CVE-2023-42753HIGHKernel: netfilter: potential slab-out-of-bound access due to integer underflowEPSS 0.5%CVE-2024-5042MEDIUMSubmariner-operator: rbac permissions can allow for the spread of node compromisesEPSS 0.5%CVE-2020-1753MEDIUMA security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all EPSS 0.5%CVE-2026-16277MEDIUMRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()EPSS 0.5%CVE-2026-16531MEDIUMPcp: pcp: arbitrary file creation via path traversal in pmproxy logger servletEPSS 0.5%CVE-2026-2239LOWGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflowEPSS 0.5%CVE-2026-83596HIGHWebkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureEPSS 0.5%CVE-2026-71845MEDIUMInsights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()EPSS 0.5%CVE-2026-80186HIGHBluez: stack overflow in name2utf8 causes dos and potential code executionEPSS 0.5%CVE-2026-5483HIGHOdh-dashboard: odh dashboard kubernetes service account exposureEPSS 0.5%CVE-2024-2419HIGHKeycloak: path traversal in the redirect validationEPSS 0.5%CVE-2025-0689HIGHGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code executionEPSS 0.5%CVE-2024-6875MEDIUMInfinispan: infinispan: rest compare api has buffer leakEPSS 0.5%CVE-2026-77680MEDIUMLibsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fixEPSS 0.5%