Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2026-10101MEDIUMAssisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view usersEPSS 0.2%CVE-2026-18917HIGHLibvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowEPSS 0.2%CVE-2026-10028MEDIUMGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chainEPSS 0.2%CVE-2026-71226HIGHLibkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio pathEPSS 0.2%CVE-2026-12080HIGHQemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keysEPSS 0.2%CVE-2025-53862LOWAap: aap-gateway: automation-hub: sensitive information disclosureEPSS 0.2%CVE-2025-57847MEDIUMAnsible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissionsEPSS 0.2%CVE-2026-13601HIGHYelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationsEPSS 0.2%CVE-2026-11785MEDIUM389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handlerEPSS 0.2%CVE-2026-4948MEDIUMFirewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorizationEPSS 0.2%CVE-2025-57850MEDIUMCodeready-ws: privilege escalation via excessive /etc/passwd permissionsEPSS 0.2%CVE-2026-50262MEDIUMXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesEPSS 0.2%CVE-2026-44605MEDIUMRpm: heap buffer overflow in ndb slot table parsingEPSS 0.2%CVE-2026-96545MEDIUMGimp: gimp: out-of-bounds heap read in the 4bpp tim image loaderEPSS 0.2%CVE-2026-84716MEDIUMAutomation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnamesEPSS 0.2%CVE-2026-11787MEDIUM389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingEPSS 0.2%CVE-2026-6420MEDIUMKeylime: keylime: security bypass due to hardcoded tpm quote nonceEPSS 0.2%CVE-2026-78323MEDIUMJss: jss: jsstrustmanager does not verify nss trust flags on ca certificatesEPSS 0.2%CVE-2025-13763MEDIUMLibopensc: opensc: multiple uses of uninitialized variableEPSS 0.2%CVE-2024-0639MEDIUMKernel: potential deadlock on &net->sctp.addr_wq_lock leading to dosEPSS 0.2%