Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-86330HIGHNoobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internalEPSS 2.2%CVE-2022-3874HIGHOs command injection via ct_command and fcct_commandEPSS 2.2%CVE-2013-0335HIGHOpenstack nova: vnc proxy can connect to the wrong vmEPSS 2.1%CVE-2018-14642MEDIUMAn information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that hanEPSS 2.1%CVE-2024-8883MEDIUMKeycloak: vulnerable redirect uri validation results in open redirecEPSS 2.1%CVE-2023-6816CRITICALXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerEPSS 2.1%CVE-2012-4550MEDIUMJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypassEPSS 2.1%CVE-2020-10749MEDIUMA vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in KuberneteEPSS 2.1%CVE-2023-5568MEDIUMSamba: heap buffer overflow with freshness tokens in the heimdal kdcEPSS 2.1%CVE-2026-33845HIGHGnutls: gnutls: denial of service via dtls zero-length fragmentEPSS 2.1%CVE-2019-14862MEDIUMThere is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web applicationEPSS 2.1%CVE-2024-3183HIGHFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forceEPSS 2.1%CVE-2012-5571MEDIUMOpenstack keystone: openstack keystone: authorization bypass via improper ec2 token handlingEPSS 2.0%CVE-2011-2920MEDIUMSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.EPSS 2.0%CVE-2020-10700MEDIUMA use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A mEPSS 2.0%CVE-2024-8698HIGHKeycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloakEPSS 2.0%CVE-2023-6200HIGHKernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerabilityEPSS 2.0%CVE-2020-1695HIGHA flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an impropeEPSS 2.0%CVE-2024-0565MEDIUMKernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of clientEPSS 2.0%CVE-2025-4404CRITICALFreeipa: idm: privilege escalation from host to domain admin in freeipaEPSS 2.0%