Vulnerabilidades em Red Hat

2.125 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-18211MEDIUMKeycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domainsEPSS 0.3%CVE-2025-8283LOWNetavark: podman: netavark may resolve hostnames to unexpected hostsEPSS 0.3%CVE-2026-2092HIGHKeycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertionsEPSS 0.3%CVE-2024-1062MEDIUM389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)EPSS 0.3%CVE-2026-3634LOWLibsoup: libsoup: http header injection and response splitting via crlf injection in content-type headerEPSS 0.3%CVE-2026-84706HIGHAutomation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution in the execution environmentEPSS 0.3%CVE-2026-66759HIGHGimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesEPSS 0.3%CVE-2026-18570MEDIUMKeycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowedEPSS 0.3%CVE-2024-3446HIGHQemu: virtio: dma reentrancy issue leads to double free vulnerabilityEPSS 0.3%CVE-2024-45617LOWLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopenscEPSS 0.3%CVE-2025-46397HIGHXfig: xfig: stack-overflow allows possible code execution via local input manipulationEPSS 0.3%CVE-2024-49395MEDIUMMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockEPSS 0.3%CVE-2026-28295MEDIUMGvfs: gvfs ftp backend: information disclosure via untrusted pasv responsesEPSS 0.3%CVE-2024-0690MEDIUMAnsible-core: possible information leak in tasks that ignore ansible_no_log configurationEPSS 0.3%CVE-2025-25207MEDIUMRhcl: authpolicy callbacks result in denial of service in authorino severityEPSS 0.3%CVE-2026-13083MEDIUMPen-drive: pen-drive: stored xss via unescaped cluster data in html reportEPSS 0.3%CVE-2016-7066—It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow anEPSS 0.3%CVE-2026-6384HIGHGimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processingEPSS 0.3%CVE-2026-71458MEDIUMAutomation-controller: automation-controller-container: automation-controller: named-url 404 body oracle enables cross-tenant resource name enumerationEPSS 0.3%CVE-2026-94215MEDIUMKeycloak-services: keycloak-services: cross-realm client read/write via request-level cache missing realm ownership checkEPSS 0.3%