Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-19404MEDIUM389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenanceEPSS 0.4%CVE-2025-7039LOWGlib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()EPSS 0.4%CVE-2026-0988LOWGlib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()EPSS 0.4%CVE-2024-8553MEDIUMForeman: read-only access to entire db from templatesEPSS 0.4%CVE-2026-12912HIGHLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageEPSS 0.4%CVE-2026-16072MEDIUMKeycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creationEPSS 0.4%CVE-2026-4282HIGHKeycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flawEPSS 0.4%CVE-2024-3623MEDIUMMirror-registry: default database secret key stored in plain-text on initial configuration fileEPSS 0.4%CVE-2024-12225CRITICALIo.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypassEPSS 0.4%CVE-2025-8277LOWLibssh: memory exhaustion via repeated key exchange in libsshEPSS 0.4%CVE-2026-5135MEDIUMForeman: foreman: unauthorized modification of host configurations via broken access controlEPSS 0.4%CVE-2023-6610HIGHKernel: oob access in smb2_dump_detailEPSS 0.4%CVE-2026-15571HIGHKeycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc clientEPSS 0.4%CVE-2026-37978MEDIUMKeycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin apiEPSS 0.4%CVE-2026-18141HIGHAap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http headerEPSS 0.4%CVE-2024-6840MEDIUMAutomation-controller: gain access to the k8s api server via job execution with container groupEPSS 0.4%CVE-2026-93007MEDIUMDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationEPSS 0.4%CVE-2024-9453MEDIUMJenkins-image: sensitive data disclosure when using openshift jenkins imageEPSS 0.4%CVE-2026-73196MEDIUMIpa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encodingEPSS 0.4%CVE-2026-10579CRITICALPicketlink-federation: auth bypass in picketlink saml unsolicited-responseEPSS 0.4%