Vulnerabilidades em Red Hat

2.131 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2025-9909MEDIUMAap-gateway: improper path validation in gateway allows credential exfiltrationEPSS 0.2%CVE-2026-10805MEDIUMNetworkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendEPSS 0.2%CVE-2023-4155MEDIUMSev-es / sev-snp vmgexit double fetch vulnerabilityEPSS 0.2%CVE-2026-91786MEDIUMGnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer sizeEPSS 0.2%CVE-2026-7867HIGHUdisks2: udisks2: local privilege escalation via as-user option spoofingEPSS 0.2%CVE-2026-4647MEDIUMBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd libraryEPSS 0.2%CVE-2026-72694HIGHMrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationEPSS 0.2%CVE-2026-17072LOWGstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containersEPSS 0.2%CVE-2026-15370MEDIUMLibssh: libssh: stack buffer overflow in sftp server longname constructionEPSS 0.2%CVE-2026-13595MEDIUMUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingEPSS 0.2%CVE-2025-12464MEDIUMQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeEPSS 0.2%CVE-2026-97176MEDIUMKeycloak-services: keycloak-services: essential acr requirement silently bypassed via cookie authenticatorEPSS 0.2%CVE-2026-18090MEDIUMGdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle blockEPSS 0.2%CVE-2026-76781MEDIUMLibxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attributeEPSS 0.2%CVE-2026-3842HIGHQemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writeEPSS 0.2%CVE-2026-6862MEDIUMEfivar: efivar: denial of service due to stack overflow in device path node parsingEPSS 0.2%CVE-2026-96442HIGHEmacs: emacs: arbitrary code execution in flymake modeEPSS 0.2%CVE-2026-71227MEDIUMLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnEPSS 0.2%CVE-2025-8766MEDIUMNoobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core containerEPSS 0.2%CVE-2026-89329MEDIUMDevice-mapper-multipath: local denial of service via blocking ipc send operationsEPSS 0.2%