# Red Hat OpenShift Container Platform 5. Every CVE that names Red Hat OpenShift Container Platform 5 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module](https://agentprime.io/advisories/CVE-2026-16445.md) `CVE-2026-16445` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection - [Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting](https://agentprime.io/advisories/CVE-2026-16461.md) `CVE-2026-16461` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()](https://agentprime.io/advisories/CVE-2026-16277.md) `CVE-2026-16277` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption - [Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys](https://agentprime.io/advisories/CVE-2026-12080.md) `CVE-2026-12080` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.3 High · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-61 - [Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation](https://agentprime.io/advisories/CVE-2026-15813.md) `CVE-2026-15813` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption - [Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env](https://agentprime.io/advisories/CVE-2026-15809.md) `CVE-2026-15809` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-116 - [Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header](https://agentprime.io/advisories/CVE-2026-15028.md) `CVE-2026-15028` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 10 Jul 2026 · Tags: Memory corruption - [Sssd: use-after-free crash in sssd' 'sssd_pam' process](https://agentprime.io/advisories/CVE-2026-12610.md) `CVE-2026-12610` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing](https://agentprime.io/advisories/CVE-2026-13757.md) `CVE-2026-13757` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service - [Util-linux: util-linux: heap use-after-free in libblkid nested partition probing](https://agentprime.io/advisories/CVE-2026-13595.md) `CVE-2026-13595` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions](https://agentprime.io/advisories/CVE-2026-55655.md) `CVE-2026-55655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-923 - [Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service](https://agentprime.io/advisories/CVE-2026-55653.md) `CVE-2026-55653` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies](https://agentprime.io/advisories/CVE-2026-12725.md) `CVE-2026-12725` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Memory corruption - [Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall](https://agentprime.io/advisories/CVE-2026-12505.md) `CVE-2026-12505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Privilege escalation - [Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression](https://agentprime.io/advisories/CVE-2026-10649.md) `CVE-2026-10649` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling](https://agentprime.io/advisories/CVE-2026-48914.md) `CVE-2026-48914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Memory corruption - [Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read](https://agentprime.io/advisories/CVE-2026-11850.md) `CVE-2026-11850` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Memory corruption - [Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws](https://agentprime.io/advisories/CVE-2026-10843.md) `CVE-2026-10843` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.2 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation - [Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend](https://agentprime.io/advisories/CVE-2026-10805.md) `CVE-2026-10805` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection - [Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal](https://agentprime.io/advisories/CVE-2026-5419.md) `CVE-2026-5419` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-208 - [Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation](https://agentprime.io/advisories/CVE-2026-42965.md) `CVE-2026-42965` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.7 High · Not analysed yet · Published 29 May 2026 · Tags: Server-side request forgery (SSRF) Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .