# Red Hat OpenShift Container Platform 4. Every CVE that names Red Hat OpenShift Container Platform 4 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret](https://agentprime.io/advisories/CVE-2026-82976.md) `CVE-2026-82976` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-548 - [Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service](https://agentprime.io/advisories/CVE-2026-120831.md) `CVE-2026-120831` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure](https://agentprime.io/advisories/CVE-2026-120830.md) `CVE-2026-120830` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step](https://agentprime.io/advisories/CVE-2026-120194.md) `CVE-2026-120194` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2026 · Tags: Denial of service - [Gcc: out-of-bounds read in std::from_chars](https://agentprime.io/advisories/CVE-2026-115456.md) `CVE-2026-115456` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: stack overflow in std::bitset on libstdc++](https://agentprime.io/advisories/CVE-2026-115455.md) `CVE-2026-115455` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: integer wrap in \`std](https://agentprime.io/advisories/CVE-2026-114691.md) `CVE-2026-114691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: confirmed out-of-bounds read/write in libstdc++ parallel \`std](https://agentprime.io/advisories/CVE-2026-114690.md) `CVE-2026-114690` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)](https://agentprime.io/advisories/CVE-2026-118593.md) `CVE-2026-118593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-667 - [Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification](https://agentprime.io/advisories/CVE-2026-92092.md) `CVE-2026-92092` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.4 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-494 - [Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder](https://agentprime.io/advisories/CVE-2026-93009.md) `CVE-2026-93009` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check](https://agentprime.io/advisories/CVE-2026-93010.md) `CVE-2026-93010` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control - [Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content](https://agentprime.io/advisories/CVE-2026-93006.md) `CVE-2026-93006` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-672 - [Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation](https://agentprime.io/advisories/CVE-2026-93007.md) `CVE-2026-93007` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service - [Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms](https://agentprime.io/advisories/CVE-2026-93011.md) `CVE-2026-93011` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations](https://agentprime.io/advisories/CVE-2026-93008.md) `CVE-2026-93008` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-345 - [Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow](https://agentprime.io/advisories/CVE-2026-85498.md) `CVE-2026-85498` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.5 Low · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Samba: access control bypass via vfs_ceph_rgw case-insensitive open](https://agentprime.io/advisories/CVE-2026-109411.md) `CVE-2026-109411` · CVE record: Samba Samba and 4 more · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-178 - [Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon](https://agentprime.io/advisories/CVE-2026-116497.md) `CVE-2026-116497` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Memory corruption - [Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest](https://agentprime.io/advisories/CVE-2026-115449.md) `CVE-2026-115449` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.5 Low · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure - [Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination](https://agentprime.io/advisories/CVE-2026-115424.md) `CVE-2026-115424` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-61 - [Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers](https://agentprime.io/advisories/CVE-2026-114236.md) `CVE-2026-114236` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 3.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts](https://agentprime.io/advisories/CVE-2026-92824.md) `CVE-2026-92824` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml](https://agentprime.io/advisories/CVE-2026-92822.md) `CVE-2026-92822` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml](https://agentprime.io/advisories/CVE-2026-92823.md) `CVE-2026-92823` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-409 - [Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string](https://agentprime.io/advisories/CVE-2026-114038.md) `CVE-2026-114038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization](https://agentprime.io/advisories/CVE-2026-16460.md) `CVE-2026-16460` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345 - [Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd](https://agentprime.io/advisories/CVE-2026-89096.md) `CVE-2026-89096` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding](https://agentprime.io/advisories/CVE-2026-85977.md) `CVE-2026-85977` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1050 - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding](https://agentprime.io/advisories/CVE-2026-85231.md) `CVE-2026-85231` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd](https://agentprime.io/advisories/CVE-2026-89098.md) `CVE-2026-89098` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Luksmeta: missing slot-range validation permits out-of-gap device i/o](https://agentprime.io/advisories/CVE-2026-111555.md) `CVE-2026-111555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1285 - [Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass](https://agentprime.io/advisories/CVE-2026-104715.md) `CVE-2026-104715` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection - [Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection](https://agentprime.io/advisories/CVE-2026-92982.md) `CVE-2026-92982` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 and 4 more · CVSS 8.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection - [Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86849.md) `CVE-2026-86849` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver](https://agentprime.io/advisories/CVE-2026-86856.md) `CVE-2026-86856` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup](https://agentprime.io/advisories/CVE-2026-86847.md) `CVE-2026-86847` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86846.md) `CVE-2026-86846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup](https://agentprime.io/advisories/CVE-2026-86845.md) `CVE-2026-86845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)](https://agentprime.io/advisories/CVE-2026-86566.md) `CVE-2026-86566` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86848.md) `CVE-2026-86848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap](https://agentprime.io/advisories/CVE-2026-86567.md) `CVE-2026-86567` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: heap out-of-bounds read/write in gso header copy](https://agentprime.io/advisories/CVE-2026-100236.md) `CVE-2026-100236` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write](https://agentprime.io/advisories/CVE-2026-86565.md) `CVE-2026-86565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: double offset bug in vhost log mapping calculation](https://agentprime.io/advisories/CVE-2026-86563.md) `CVE-2026-86563` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)](https://agentprime.io/advisories/CVE-2026-86562.md) `CVE-2026-86562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup](https://agentprime.io/advisories/CVE-2026-86561.md) `CVE-2026-86561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou](https://agentprime.io/advisories/CVE-2026-93683.md) `CVE-2026-93683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file](https://agentprime.io/advisories/CVE-2026-109968.md) `CVE-2026-109968` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool](https://agentprime.io/advisories/CVE-2026-109971.md) `CVE-2026-109971` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-214 - [Clevis: clevis: pkcs#11 token pin written to world-readable file](https://agentprime.io/advisories/CVE-2026-109970.md) `CVE-2026-109970` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask](https://agentprime.io/advisories/CVE-2026-109969.md) `CVE-2026-109969` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices](https://agentprime.io/advisories/CVE-2026-110036.md) `CVE-2026-110036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection](https://agentprime.io/advisories/CVE-2026-109976.md) `CVE-2026-109976` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose](https://agentprime.io/advisories/CVE-2026-107935.md) `CVE-2026-107935` · CVE record: Red Hat Red Hat Build of Podman Desktop and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal - [Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution](https://agentprime.io/advisories/CVE-2026-89091.md) `CVE-2026-89091` · CVE record: Red Hat Migration Toolkit for Applications 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal - [Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption](https://agentprime.io/advisories/CVE-2026-107565.md) `CVE-2026-107565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-1284 - [Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret](https://agentprime.io/advisories/CVE-2026-107176.md) `CVE-2026-107176` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Privilege escalation - [Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients](https://agentprime.io/advisories/CVE-2026-107161.md) `CVE-2026-107161` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction](https://agentprime.io/advisories/CVE-2026-107174.md) `CVE-2026-107174` · CVE record: Red Hat OpenShift Serverless and 3 more · CVSS 6.4 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-61 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .