Vulnerabilidades em Red Hat

2.125 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-79652MEDIUMKeycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequiredEPSS 0.3%CVE-2024-3624HIGHMirror-registry: database user and password stored in plain-textEPSS 0.3%CVE-2024-3625HIGHMirror-registry: redis password stored in plain-textEPSS 0.3%CVE-2026-12992HIGHApicurio/apicurio-registry: apicurio-registry: ssrf via wsdl4j import dereference in wsdl full validationEPSS 0.3%CVE-2024-31082HIGHXorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmapEPSS 0.3%CVE-2026-84717MEDIUMAutomation-controller: automation-controller: unauthenticated 200-vs-403 oracle in bitbucket data center webhook receiver enumerates webhook-enabled job templatesEPSS 0.3%CVE-2026-3190MEDIUMKeycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection apiEPSS 0.3%CVE-2026-15943MEDIUMKeycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url changeEPSS 0.3%CVE-2026-84712MEDIUMAutomation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membershipEPSS 0.3%CVE-2025-49175MEDIUMXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsEPSS 0.3%CVE-2019-14826MEDIUMA flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this EPSS 0.3%CVE-2024-4467HIGHQemu-kvm: 'qemu-img info' leads to host file read/writeEPSS 0.3%CVE-2023-4042MEDIUMGhostscript: incomplete fix for cve-2020-16305EPSS 0.3%CVE-2025-14443MEDIUMOse-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanismEPSS 0.3%CVE-2026-74242MEDIUMQuay: repository notification uuid idor in quay apiEPSS 0.3%CVE-2026-18147HIGHFreeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlEPSS 0.3%CVE-2025-49179HIGHXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionEPSS 0.3%CVE-2026-59088MEDIUMGimp: gimp: denial of service via signed integer overflow in fli file processingEPSS 0.3%CVE-2026-18217LOWKeycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollutionEPSS 0.3%CVE-2025-13947HIGHWebkit: webkitgtk: remote user-assisted information disclosure via file drag-and-dropEPSS 0.3%