Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-4633LOWKeycloak: keycloak: user enumeration via differential error messagesEPSS 0.4%CVE-2026-16456MEDIUMOdh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputyEPSS 0.4%CVE-2026-101919HIGHHypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control planeEPSS 0.4%CVE-2026-1801MEDIUMLibsoup: libsoup: http request smuggling via malformed chunk headersEPSS 0.4%CVE-2025-2877MEDIUMEvent-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in edaEPSS 0.4%CVE-2026-77968HIGHHawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccountEPSS 0.4%CVE-2026-85769MEDIUMLibtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksizeEPSS 0.4%CVE-2026-85977MEDIUMLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingEPSS 0.4%CVE-2023-39194LOWKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()EPSS 0.4%CVE-2023-3567HIGHKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to raceEPSS 0.4%CVE-2026-74245MEDIUMQuay: unauthenticated exported logs download in quayEPSS 0.4%CVE-2026-3099MEDIUMLibsoup: libsoup: authentication bypass via digest authentication replay attackEPSS 0.4%CVE-2026-107124MEDIUMKeycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeoverEPSS 0.4%CVE-2026-15581HIGHTrustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wideEPSS 0.4%CVE-2023-39198HIGHKernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()EPSS 0.4%CVE-2026-9803MEDIUMKeycloak: keycloak: denial of service via malformed authorization headerEPSS 0.4%CVE-2023-47039HIGHPerl: perl for windows binary hijacking vulnerabilityEPSS 0.4%CVE-2023-5366HIGHOpenvswitch don't match packets on nd_target fieldEPSS 0.4%CVE-2026-81665HIGHCorosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyEPSS 0.4%CVE-2026-15584HIGHRedhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node rootEPSS 0.4%