# Red Hat OpenShift Container Platform 4. Every CVE that names Red Hat OpenShift Container Platform 4 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Libxml2: unbounded relaxng include recursion leading to stack overflow](https://agentprime.io/advisories/CVE-2026-0989.md) `CVE-2026-0989` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing](https://agentprime.io/advisories/CVE-2026-0990.md) `CVE-2026-0990` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames](https://agentprime.io/advisories/CVE-2025-14104.md) `CVE-2025-14104` · CVE record: util-linux util-linux and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Memory corruption - [Grub2: use-after-free in net_set_vlan](https://agentprime.io/advisories/CVE-2025-54770.md) `CVE-2025-54770` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for normal_exit command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61664.md) `CVE-2025-61664` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for normal commands may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61663.md) `CVE-2025-61663` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: grub2: out-of-bounds write via malicious usb device](https://agentprime.io/advisories/CVE-2025-61661.md) `CVE-2025-61661` · CVE record: GNU grub2 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: use-after-free in grub_file_close()](https://agentprime.io/advisories/CVE-2025-54771.md) `CVE-2025-54771` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Samba: command injection in wins server hook script](https://agentprime.io/advisories/CVE-2025-10230.md) `CVE-2025-10230` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.40 · Not analysed yet · Published 7 Nov 2025 · Tags: Command injection - [Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode](https://agentprime.io/advisories/CVE-2025-12464.md) `CVE-2025-12464` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Memory corruption - [Luksmeta: data corruption when handling luks1 partitions with luksmeta](https://agentprime.io/advisories/CVE-2025-11568.md) `CVE-2025-11568` · CVE record: Latchset luksmeta and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284 - [Samba: vfs_streams_xattr uninitialized memory write possible](https://agentprime.io/advisories/CVE-2025-9640.md) `CVE-2025-9640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [Libxslt: type confusion in exsltfuncresultcompfunction of libxslt](https://agentprime.io/advisories/CVE-2025-11731.md) `CVE-2025-11731` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.1 Low · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption - [Libxslt: use-after-free with key data stored cross-rvt](https://agentprime.io/advisories/CVE-2025-10911.md) `CVE-2025-10911` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libssh: memory exhaustion via repeated key exchange in libssh](https://agentprime.io/advisories/CVE-2025-8277.md) `CVE-2025-8277` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2025 · Tags: Denial of service - [Libssh: write beyond bounds in binary to base64 conversion functions](https://agentprime.io/advisories/CVE-2025-4877.md) `CVE-2025-4877` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Memory corruption - [Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service](https://agentprime.io/advisories/CVE-2025-5449.md) `CVE-2025-5449` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: Memory corruption - [Libssh: null pointer dereference in libssh kex session id calculation](https://agentprime.io/advisories/CVE-2025-8114.md) `CVE-2025-8114` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Memory corruption - [Libssh: use of uninitialized variable in privatekey_from_file()](https://agentprime.io/advisories/CVE-2025-4878.md) `CVE-2025-4878` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.6 Low · Not analysed yet · Published 22 Jul 2025 · Tags: Memory corruption - [Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write](https://agentprime.io/advisories/CVE-2025-7519.md) `CVE-2025-7519` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 14 Jul 2025 · Tags: Memory corruption - [Gnutls: null pointer dereference in \_gnutls_figure_common_ciphersuite()](https://agentprime.io/advisories/CVE-2025-6395.md) `CVE-2025-6395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes](https://agentprime.io/advisories/CVE-2025-7424.md) `CVE-2025-7424` · CVE record: GNOME libxslt and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls certtool template parsing](https://agentprime.io/advisories/CVE-2025-32990.md) `CVE-2025-32990` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls sct extension parsing](https://agentprime.io/advisories/CVE-2025-32989.md) `CVE-2025-32989` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Weak cryptography or TLS - [Gnutls: vulnerability in gnutls othername san export](https://agentprime.io/advisories/CVE-2025-32988.md) `CVE-2025-32988` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Libssh: invalid return code for chacha20 poly1305 with openssl backend](https://agentprime.io/advisories/CVE-2025-5987.md) `CVE-2025-5987` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-393 - [Libssh: double free vulnerability in libssh key export functions](https://agentprime.io/advisories/CVE-2025-5351.md) `CVE-2025-5351` · CVE record: libssh libssh and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: Memory corruption - [Libssh: incorrect return code handling in ssh_kdf() in libssh](https://agentprime.io/advisories/CVE-2025-5372.md) `CVE-2025-5372` · CVE record: libssh libssh and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-682 - [Libarchive: reading past eof may be triggered for piped file streams](https://agentprime.io/advisories/CVE-2025-5918.md) `CVE-2025-5918` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c](https://agentprime.io/advisories/CVE-2025-5917.md) `CVE-2025-5917` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c](https://agentprime.io/advisories/CVE-2025-5916.md) `CVE-2025-5916` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5915.md) `CVE-2025-5915` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session](https://agentprime.io/advisories/CVE-2025-0620.md) `CVE-2025-0620` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: Information disclosure - [Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump](https://agentprime.io/advisories/CVE-2025-4598.md) `CVE-2025-4598` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-364 - [Coreutils: heap buffer under-read in gnu coreutils sort via key specification](https://agentprime.io/advisories/CVE-2025-5278.md) `CVE-2025-5278` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md) `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm](https://agentprime.io/advisories/CVE-2025-4382.md) `CVE-2025-4382` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 9 May 2025 · Tags: Authentication bypass - [Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions](https://agentprime.io/advisories/CVE-2025-3576.md) `CVE-2025-3576` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Weak cryptography or TLS - [Rust-openssl: rust-openssl use-after-free in \`md::fetch\` and \`cipher::fetch\`](https://agentprime.io/advisories/CVE-2025-3416.md) `CVE-2025-3416` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat](https://agentprime.io/advisories/CVE-2025-0686.md) `CVE-2025-0686` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data](https://agentprime.io/advisories/CVE-2025-0685.md) `CVE-2025-0685` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data](https://agentprime.io/advisories/CVE-2025-0684.md) `CVE-2025-0684` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data](https://agentprime.io/advisories/CVE-2025-0678.md) `CVE-2025-0678` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)](https://agentprime.io/advisories/CVE-2024-45782.md) `CVE-2024-45782` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: fs/bfs: integer overflow in the bfs parser.](https://agentprime.io/advisories/CVE-2024-45778.md) `CVE-2024-45778` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser](https://agentprime.io/advisories/CVE-2024-45779.md) `CVE-2024-45779` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: fs/tar: integer overflow causes heap oob write](https://agentprime.io/advisories/CVE-2024-45780.md) `CVE-2024-45780` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution](https://agentprime.io/advisories/CVE-2025-0689.md) `CVE-2025-0689` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write](https://agentprime.io/advisories/CVE-2025-1125.md) `CVE-2025-1125` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 3 Mar 2025 · Tags: Memory corruption - [Openssh: denial-of-service in openssh](https://agentprime.io/advisories/CVE-2025-26466.md) `CVE-2025-26466` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · EPSS 0.39 · Not analysed yet · Published 28 Feb 2025 · Tags: Denial of service - [Grub2: read: integer overflow may lead to out-of-bounds write](https://agentprime.io/advisories/CVE-2025-0690.md) `CVE-2025-0690` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 24 Feb 2025 · Tags: Memory corruption - [Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks](https://agentprime.io/advisories/CVE-2025-0677.md) `CVE-2025-0677` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption - [Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled](https://agentprime.io/advisories/CVE-2025-1118.md) `CVE-2025-1118` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: CWE-501 - [Grub2: grub-core/gettext: integer overflow leads to heap oob write.](https://agentprime.io/advisories/CVE-2024-45777.md) `CVE-2024-45777` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption - [Grub2: command/gpg: use-after-free due to hooks not being removed on module unload](https://agentprime.io/advisories/CVE-2025-0622.md) `CVE-2025-0622` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Grub2: fs/hfs+: refcount can be decremented twice](https://agentprime.io/advisories/CVE-2024-45783.md) `CVE-2024-45783` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-911 - [Grub2: fs/ufs: oob write in the heap](https://agentprime.io/advisories/CVE-2024-45781.md) `CVE-2024-45781` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.](https://agentprime.io/advisories/CVE-2024-45776.md) `CVE-2024-45776` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Grub2: commands/extcmd: missing check for failed allocation](https://agentprime.io/advisories/CVE-2024-45775.md) `CVE-2024-45775` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-252 - [Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled](https://agentprime.io/advisories/CVE-2025-26465.md) `CVE-2025-26465` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-390 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .