# Red Hat OpenShift Container Platform 4. Every CVE that names Red Hat OpenShift Container Platform 4 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies](https://agentprime.io/advisories/CVE-2026-12725.md) `CVE-2026-12725` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Memory corruption - [Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft](https://agentprime.io/advisories/CVE-2026-54100.md) `CVE-2026-54100` · CVE record: Red Hat Red Hat OpenShift for Windows Containers 10.19 and 4 more · CVSS 8.3 High · Not analysed yet · Published 22 Jun 2026 · Tags: Weak cryptography or TLS - [Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters](https://agentprime.io/advisories/CVE-2026-54099.md) `CVE-2026-54099` · CVE record: Red Hat Red Hat OpenShift for Windows Containers 10.19 and 4 more · CVSS 8.8 High · Not analysed yet · Published 22 Jun 2026 · Tags: Privilege escalation - [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)](https://agentprime.io/advisories/CVE-2026-3195.md) `CVE-2026-3195` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation](https://agentprime.io/advisories/CVE-2026-3196.md) `CVE-2026-3196` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall](https://agentprime.io/advisories/CVE-2026-12505.md) `CVE-2026-12505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Privilege escalation - [Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression](https://agentprime.io/advisories/CVE-2026-10649.md) `CVE-2026-10649` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling](https://agentprime.io/advisories/CVE-2026-48914.md) `CVE-2026-48914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Memory corruption - [Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read](https://agentprime.io/advisories/CVE-2026-11850.md) `CVE-2026-11850` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Memory corruption - [Samba: denial of service against ad dc wins server](https://agentprime.io/advisories/CVE-2026-3238.md) `CVE-2026-3238` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2026 · Tags: Memory corruption - [Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws](https://agentprime.io/advisories/CVE-2026-10843.md) `CVE-2026-10843` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.2 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation - [Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend](https://agentprime.io/advisories/CVE-2026-10805.md) `CVE-2026-10805` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection - [Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal](https://agentprime.io/advisories/CVE-2026-5419.md) `CVE-2026-5419` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-208 - [Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation](https://agentprime.io/advisories/CVE-2026-10533.md) `CVE-2026-10533` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 · CVSS 5.0 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Denial of service - [Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation](https://agentprime.io/advisories/CVE-2026-42965.md) `CVE-2026-42965` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.7 High · Not analysed yet · Published 29 May 2026 · Tags: Server-side request forgery (SSRF) - [Samba: samba: remote code execution in printing subsystem via unescaped job description](https://agentprime.io/advisories/CVE-2026-4480.md) `CVE-2026-4480` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 26 May 2026 · Tags: Command injection - [Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file](https://agentprime.io/advisories/CVE-2026-9149.md) `CVE-2026-9149` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption - [Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums](https://agentprime.io/advisories/CVE-2026-9150.md) `CVE-2026-9150` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption - [Openvswitch: open vswitch: denial of service via malformed ftp epasv command](https://agentprime.io/advisories/CVE-2026-34956.md) `CVE-2026-34956` · CVE record: Red Hat Fast Datapath for RHEL 7 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response](https://agentprime.io/advisories/CVE-2026-3832.md) `CVE-2026-3832` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-179 - [Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection](https://agentprime.io/advisories/CVE-2026-7309.md) `CVE-2026-7309` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 · CVSS 4.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-426 - [Ovn: ovn: information disclosure via crafted dhcpv6 packets](https://agentprime.io/advisories/CVE-2026-5367.md) `CVE-2026-5367` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-130 - [Libxml2: libxml2: denial of service via crafted xsd-validated document](https://agentprime.io/advisories/CVE-2026-6732.md) `CVE-2026-6732` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Efivar: efivar: denial of service due to stack overflow in device path node parsing](https://agentprime.io/advisories/CVE-2026-6862.md) `CVE-2026-6862` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service - [Binutils: binutils: arbitrary code execution via malformed xcoff object file processing](https://agentprime.io/advisories/CVE-2026-6846.md) `CVE-2026-6846` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files](https://agentprime.io/advisories/CVE-2026-6844.md) `CVE-2026-6844` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service - [Nano: nano: format string vulnerability leads to denial of service](https://agentprime.io/advisories/CVE-2026-6843.md) `CVE-2026-6843` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [Binutils: binutils: denial of service via crafted elf file](https://agentprime.io/advisories/CVE-2026-6845.md) `CVE-2026-6845` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions](https://agentprime.io/advisories/CVE-2026-6842.md) `CVE-2026-6842` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 22 Apr 2026 · Tags: Broken access control - [Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing](https://agentprime.io/advisories/CVE-2026-6507.md) `CVE-2026-6507` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption - [Sssd: out-of-bounds read in the sssd](https://agentprime.io/advisories/CVE-2026-6245.md) `CVE-2026-6245` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder](https://agentprime.io/advisories/CVE-2026-1584.md) `CVE-2026-1584` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption - [Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows](https://agentprime.io/advisories/CVE-2025-14821.md) `CVE-2025-14821` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-427 - [Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive](https://agentprime.io/advisories/CVE-2026-5745.md) `CVE-2026-5745` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Memory corruption - [Util-linux: util-linux: access control bypass due to improper hostname canonicalization](https://agentprime.io/advisories/CVE-2026-3184.md) `CVE-2026-3184` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-289 - [Corosync: corosync: denial of service via integer overflow in join message validation](https://agentprime.io/advisories/CVE-2026-35092.md) `CVE-2026-35092` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Corosync: corosync: denial of service and information disclosure via crafted udp packet](https://agentprime.io/advisories/CVE-2026-35091.md) `CVE-2026-35091` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-253 - [Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization](https://agentprime.io/advisories/CVE-2026-4948.md) `CVE-2026-4948` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-279 - [Libssh: libssh: denial of service via improper configuration file handling](https://agentprime.io/advisories/CVE-2026-0965.md) `CVE-2026-0965` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Path traversal - [Libssh: libssh: denial of service via inefficient regular expression processing](https://agentprime.io/advisories/CVE-2026-0967.md) `CVE-2026-0967` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service - [Libssh: libssh: denial of service due to malformed sftp message](https://agentprime.io/advisories/CVE-2026-0968.md) `CVE-2026-0968` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Libssh: improper sanitation of paths received from scp servers](https://agentprime.io/advisories/CVE-2026-0964.md) `CVE-2026-0964` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Path traversal - [Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()](https://agentprime.io/advisories/CVE-2026-0966.md) `CVE-2026-0966` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [P11-kit: null dereference via c_derivekey with specific null parameters](https://agentprime.io/advisories/CVE-2026-2100.md) `CVE-2026-2100` · CVE record: p11-glue p11-kit and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Polkit: polkit: denial of service via unbounded input processing through standard input](https://agentprime.io/advisories/CVE-2026-4897.md) `CVE-2026-4897` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service - [Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library](https://agentprime.io/advisories/CVE-2026-4647.md) `CVE-2026-4647` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: denial of service via malformed iso file processing](https://agentprime.io/advisories/CVE-2026-4426.md) `CVE-2026-4426` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-1335 - [Binutils: gnu binutils: information disclosure via specially crafted xcoff object file](https://agentprime.io/advisories/CVE-2026-3441.md) `CVE-2026-3441` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Memory corruption - [Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker](https://agentprime.io/advisories/CVE-2026-3442.md) `CVE-2026-3442` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Memory corruption - [Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method](https://agentprime.io/advisories/CVE-2026-4105.md) `CVE-2026-4105` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Broken access control - [Nfs-utils: rpc.mountd in the nfs-utils privilege escalation](https://agentprime.io/advisories/CVE-2025-12801.md) `CVE-2025-12801` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-279 - [Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing](https://agentprime.io/advisories/CVE-2026-2243.md) `CVE-2026-2243` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Memory corruption - [Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq](https://agentprime.io/advisories/CVE-2026-0665.md) `CVE-2026-0665` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Memory corruption - [Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback](https://agentprime.io/advisories/CVE-2025-8860.md) `CVE-2025-8860` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-212 - [Qemu-kvm: unbounded allocation in virtio-crypto](https://agentprime.io/advisories/CVE-2025-14876.md) `CVE-2025-14876` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Denial of service - [Kernel: secure boot does not automatically enable kernel lockdown](https://agentprime.io/advisories/CVE-2025-1272.md) `CVE-2025-1272` · CVE record: Fedora Project Fedora Linux and 4 more · CVSS 7.7 High · Not analysed yet · Published 18 Feb 2026 · Tags: Authentication bypass - [Libxml2: memory leak leading to local denial of service in xmllint interactive shell](https://agentprime.io/advisories/CVE-2026-1757.md) `CVE-2026-1757` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service - [Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function](https://agentprime.io/advisories/CVE-2025-9820.md) `CVE-2025-9820` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Memory corruption - [Networkmanager: networkmanager file access](https://agentprime.io/advisories/CVE-2025-9615.md) `CVE-2025-9615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-281 - [Libxml2: libxml2: denial of service via crafted xml catalogs](https://agentprime.io/advisories/CVE-2026-0992.md) `CVE-2026-0992` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 2.9 Low · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .