# Red Hat OpenShift Container Platform 4. Every CVE that names Red Hat OpenShift Container Platform 4 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Sssd: sssd-kcm: local denial of service via excessive memory preallocation](https://agentprime.io/advisories/CVE-2026-80048.md) `CVE-2026-80048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via race condition in autofs responder](https://agentprime.io/advisories/CVE-2026-104045.md) `CVE-2026-104045` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via incomplete identity provider authentication requests](https://agentprime.io/advisories/CVE-2026-104046.md) `CVE-2026-104046` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation](https://agentprime.io/advisories/CVE-2026-104048.md) `CVE-2026-104048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1025 - [Sssd: sssd: information disclosure via query injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104047.md) `CVE-2026-104047` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass](https://agentprime.io/advisories/CVE-2026-76061.md) `CVE-2026-76061` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal - [Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion](https://agentprime.io/advisories/CVE-2026-88252.md) `CVE-2026-88252` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via crafted passkey kerberos authentication request](https://agentprime.io/advisories/CVE-2026-104044.md) `CVE-2026-104044` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via undersized packet parsing in nss responder](https://agentprime.io/advisories/CVE-2026-104043.md) `CVE-2026-104043` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read in pam responder](https://agentprime.io/advisories/CVE-2026-104042.md) `CVE-2026-104042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via unbounded negative cache growth](https://agentprime.io/advisories/CVE-2026-104041.md) `CVE-2026-104041` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: information disclosure via odata injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104040.md) `CVE-2026-104040` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder](https://agentprime.io/advisories/CVE-2026-104039.md) `CVE-2026-104039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via missing sid extension in certificate mapping](https://agentprime.io/advisories/CVE-2026-104038.md) `CVE-2026-104038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via packet length underflow in autofs responder](https://agentprime.io/advisories/CVE-2026-104037.md) `CVE-2026-104037` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via premature ldap access rule evaluation](https://agentprime.io/advisories/CVE-2026-92821.md) `CVE-2026-92821` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-393 - [Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin](https://agentprime.io/advisories/CVE-2026-104036.md) `CVE-2026-104036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via memory exhaustion in kcm responder](https://agentprime.io/advisories/CVE-2026-104035.md) `CVE-2026-104035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via use-after-free in kcm ticket renewal](https://agentprime.io/advisories/CVE-2026-104034.md) `CVE-2026-104034` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via improper ldap shadow expiration check](https://agentprime.io/advisories/CVE-2026-104033.md) `CVE-2026-104033` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193 - [Sssd: sssd: denial of service via unprivileged autofs cache invalidation](https://agentprime.io/advisories/CVE-2026-104032.md) `CVE-2026-104032` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-408 - [Sssd: sssd: denial of service via memory exhaustion in autofs responder](https://agentprime.io/advisories/CVE-2026-104031.md) `CVE-2026-104031` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via out-of-bounds read in autofs responder](https://agentprime.io/advisories/CVE-2026-104029.md) `CVE-2026-104029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read during passkey parsing](https://agentprime.io/advisories/CVE-2026-104030.md) `CVE-2026-104030` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction](https://agentprime.io/advisories/CVE-2026-101295.md) `CVE-2026-101295` · CVE record: Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 and 2 more · CVSS 7.3 High · Not analysed yet · Published 30 Sept 2026 · Tags: Path traversal - [Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if](https://agentprime.io/advisories/CVE-2026-102010.md) `CVE-2026-102010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 28 Sept 2026 · Tags: Memory corruption - [Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape](https://agentprime.io/advisories/CVE-2026-93834.md) `CVE-2026-93834` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Memory corruption - [Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding](https://agentprime.io/advisories/CVE-2026-75886.md) `CVE-2026-75886` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-441 - [Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization](https://agentprime.io/advisories/CVE-2026-90462.md) `CVE-2026-90462` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-280 - [Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service](https://agentprime.io/advisories/CVE-2026-94640.md) `CVE-2026-94640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service - [Gcc: libstdc++ integer overflow in \`new\` operator](https://agentprime.io/advisories/CVE-2026-95619.md) `CVE-2026-95619` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption - [Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu](https://agentprime.io/advisories/CVE-2026-95508.md) `CVE-2026-95508` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption - [Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed](https://agentprime.io/advisories/CVE-2026-75939.md) `CVE-2026-75939` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 and 1 more · CVSS 7.4 High · Not analysed yet · Published 21 Sept 2026 · Tags: Weak cryptography or TLS - [Cri-o: cri-o checkpoint restore bypasses destination security context](https://agentprime.io/advisories/CVE-2026-92574.md) `CVE-2026-92574` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Privilege escalation - [Cri-o: cri-o: insufficient validation during container checkpoint restore](https://agentprime.io/advisories/CVE-2026-15801.md) `CVE-2026-15801` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 8.0 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal - [Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram](https://agentprime.io/advisories/CVE-2026-81627.md) `CVE-2026-81627` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute](https://agentprime.io/advisories/CVE-2026-76781.md) `CVE-2026-76781` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption - [Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion](https://agentprime.io/advisories/CVE-2026-42784.md) `CVE-2026-42784` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 4 more · CVSS 7.4 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS - [Podman: arbitrary file write when importing oci archive](https://agentprime.io/advisories/CVE-2025-11395.md) `CVE-2025-11395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-277 - [Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory](https://agentprime.io/advisories/CVE-2026-79699.md) `CVE-2026-79699` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Path traversal - [Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers](https://agentprime.io/advisories/CVE-2026-79705.md) `CVE-2026-79705` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Path traversal - [Sssd: sssd: denial of service in nss responder via crafted zero-length requests](https://agentprime.io/advisories/CVE-2026-90996.md) `CVE-2026-90996` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: local denial of service due to null pointer dereference in pam responder](https://agentprime.io/advisories/CVE-2026-90995.md) `CVE-2026-90995` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via malformed pam v1 requests](https://agentprime.io/advisories/CVE-2026-90994.md) `CVE-2026-90994` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Sssd: local oob read in nss service request parsers (\`sss_nss_protocol_parse_svc_name\` / \`sss_nss_protocol_parse_svc_port\`)](https://agentprime.io/advisories/CVE-2026-90463.md) `CVE-2026-90463` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [Device-mapper-multipath: local denial of service via blocking ipc send operations](https://agentprime.io/advisories/CVE-2026-89329.md) `CVE-2026-89329` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-1322 - [Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token](https://agentprime.io/advisories/CVE-2026-84828.md) `CVE-2026-84828` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control - [Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown](https://agentprime.io/advisories/CVE-2026-88265.md) `CVE-2026-88265` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal - [Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs](https://agentprime.io/advisories/CVE-2026-88264.md) `CVE-2026-88264` · CVE record: containers crun and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal - [Crun: crun: rootful krun with passt executes container payload as host root](https://agentprime.io/advisories/CVE-2026-84042.md) `CVE-2026-84042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation - [Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)](https://agentprime.io/advisories/CVE-2026-87876.md) `CVE-2026-87876` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.0 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-178 - [Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound](https://agentprime.io/advisories/CVE-2026-87875.md) `CVE-2026-87875` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption - [Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation](https://agentprime.io/advisories/CVE-2026-87853.md) `CVE-2026-87853` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-187 - [Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler](https://agentprime.io/advisories/CVE-2026-86564.md) `CVE-2026-86564` · CVE record: Red Hat Fast Datapath for RHEL 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption - [Glib2: toctou symlink race in \`g_file_create_replace_destination\` fallback path](https://agentprime.io/advisories/CVE-2026-86469.md) `CVE-2026-86469` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal - [Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems](https://agentprime.io/advisories/CVE-2026-81666.md) `CVE-2026-81666` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly](https://agentprime.io/advisories/CVE-2026-81665.md) `CVE-2026-81665` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks](https://agentprime.io/advisories/CVE-2026-78409.md) `CVE-2026-78409` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal - [Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection](https://agentprime.io/advisories/CVE-2026-78410.md) `CVE-2026-78410` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Race condition - [Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority](https://agentprime.io/advisories/CVE-2026-78408.md) `CVE-2026-78408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.9 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-775 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .