Vulnerabilidades em Red Hat

2.122 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-71470CRITICALAcm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating saEPSS 0.4%CVE-2026-9803MEDIUMKeycloak: keycloak: denial of service via malformed authorization headerEPSS 0.4%CVE-2026-72526CRITICALMulticloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotationEPSS 0.4%CVE-2023-39198HIGHKernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()EPSS 0.4%CVE-2023-47039HIGHPerl: perl for windows binary hijacking vulnerabilityEPSS 0.4%CVE-2026-15584HIGHRedhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node rootEPSS 0.4%CVE-2024-3296MEDIUMRust-openssl: timing based side-channel can lead to a bleichenbacher style attackEPSS 0.4%CVE-2023-39193MEDIUMKernel: netfilter: xtables sctp out-of-bounds read in match_flags()EPSS 0.4%CVE-2025-14969MEDIUMHibernate-reactive-core: hibernate reactive: denial of service due to connection leak on http client disconnectEPSS 0.4%CVE-2026-58014HIGHGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"EPSS 0.4%CVE-2026-75885CRITICALOpenshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointEPSS 0.4%CVE-2026-18949HIGHOdh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resourcesEPSS 0.4%CVE-2025-8419MEDIUMOrg.keycloak/keycloak-services: keycloak smtp inject vulnerabilityEPSS 0.4%CVE-2026-32590HIGHMirror-registry: remote code execution using pickle deserializationEPSS 0.4%CVE-2017-2621MEDIUMAn access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory wEPSS 0.4%CVE-2023-40549MEDIUMShim: out-of-bounds read in verify_buffer_authenticode() malformed pe fileEPSS 0.4%CVE-2026-1180MEDIUMOrg.keycloak.protocol.oidc: blind server-side request forgery (ssrf) in keycloak oidc dynamic client registration via jwks_uriEPSS 0.4%CVE-2026-12549MEDIUMLibsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserverEPSS 0.4%CVE-2023-39189MEDIUMKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()EPSS 0.4%CVE-2026-77176HIGHKata-containers: insufficient validation of createcontainer mount and storage rules in genpolicyEPSS 0.4%