Vulnerabilidades em Red Hat

2.125 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2023-3180MEDIUMHeap buffer overflow in virtio_crypto_sym_op_helper()EPSS 0.2%CVE-2025-66286MEDIUMWebkitgtk: authorization bypass through webpage::send-request signal handlerEPSS 0.2%CVE-2023-1476HIGHKpatch: mm/mremap.c: incomplete fix for cve-2022-41222EPSS 0.2%CVE-2024-45783MEDIUMGrub2: fs/hfs+: refcount can be decremented twiceEPSS 0.2%CVE-2026-66757MEDIUMGimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi imagesEPSS 0.2%CVE-2025-5962HIGHRhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulationEPSS 0.2%CVE-2023-4133MEDIUMKernel: cxgb4: use-after-free in ch_flower_stats_cb()EPSS 0.2%CVE-2025-48798HIGHGimp: multiple use after free in xcf parserEPSS 0.2%CVE-2024-11029MEDIUMFreeipa: administrative user data leaked through systemd journalEPSS 0.2%CVE-2026-10533MEDIUMOpenshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradationEPSS 0.2%CVE-2026-94368HIGHNoobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source headerEPSS 0.2%CVE-2026-74244MEDIUMQuay: stripe webhook accepts forged events without signature verification in quayEPSS 0.2%CVE-2026-14324MEDIUMPipewire: raop rtsp null derefEPSS 0.2%CVE-2024-5891MEDIUMQuay: unauthorized user may authenticate via oauth application tokenEPSS 0.2%CVE-2024-1312MEDIUMKernel: race condition leads to use after free during vma lock in lock_vma_under_rcuEPSS 0.2%CVE-2024-0217LOWPackagekitd: use-after-free in idle function callbackEPSS 0.2%CVE-2023-3863MEDIUMUse-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.cEPSS 0.2%CVE-2026-3012HIGHSamba: group policy certificate enrollment uses http:// without validationEPSS 0.2%CVE-2026-93999MEDIUMKeycloak-services: keycloak-services: token refresh continues issuing tokens for disabled audience clientsEPSS 0.2%CVE-2025-9820MEDIUMGnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionEPSS 0.2%