Vulnerabilidades em Red Hat

2.127 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-58712MEDIUMAmq: privilege escalation via excessive /etc/passwd permissionsEPSS 0.2%CVE-2026-15028LOWLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerEPSS 0.2%CVE-2024-8612LOWQemu-kvm: information leak in virtio devicesEPSS 0.2%CVE-2025-3359MEDIUMGnuplot: segmentation fault via io_str_init_static_internal functionEPSS 0.2%CVE-2025-61662HIGHGrub2: missing unregister call for gettext command may lead to use-after-freeEPSS 0.2%CVE-2025-6199LOWGdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoderEPSS 0.2%CVE-2026-7163MEDIUMAssisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosureEPSS 0.2%CVE-2026-6694MEDIUMGimp: gimp file-png plugin: denial of service via oversized apng trns chunkEPSS 0.2%CVE-2026-50264HIGHXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformatEPSS 0.2%CVE-2025-9908MEDIUMEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streamsEPSS 0.2%CVE-2023-6725MEDIUMTripleo-ansible: bind keys are world readableEPSS 0.2%CVE-2026-13622HIGHKubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to hostEPSS 0.2%CVE-2026-42784HIGHSequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionEPSS 0.2%CVE-2023-4134MEDIUMKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()EPSS 0.2%CVE-2026-84691HIGHAutomation-controller: automation-controller-container: automation-controller: format string injection in the api 4xx error log setting discloses django secret_key and database credentials to an administratorEPSS 0.2%CVE-2023-6917MEDIUMPcp: unsafe use of directories allows pcp to root privilege escalationEPSS 0.2%CVE-2026-42014MEDIUMGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinEPSS 0.2%CVE-2025-31177MEDIUMGnuplot: gnuplot heap-buffer overflow on utf8_copy_oneEPSS 0.2%CVE-2026-50257HIGHXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()EPSS 0.2%CVE-2026-79992HIGHEmacs: emacs: command injection via crafted filenames in trampEPSS 0.2%