CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:openshift_container_platform. Show all products

103 CVEs, showing 51 to 100PreviousPage 2 of 3Next
CVESeverityTitlePublished
CVE-2026-5745Medium 5.5A flaw was found in libarchive.Apr 7, 2026
CVE-2026-4878Medium 6.7Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Assigned by redhat
Apr 9, 2026
CVE-2026-6245Medium 5.5A flaw was found in the System Security Services Daemon (SSSD).Apr 15, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-6843Medium 5.5A flaw was found in nano.Apr 22, 2026
CVE-2026-6844Medium 5.5A flaw was found in the `readelf` utility of the binutils package.Apr 22, 2026
CVE-2026-6845Medium 5.0A flaw was found in binutils, specifically within the `readelf` utility.Apr 22, 2026
CVE-2026-6846High 7.8A flaw was found in binutils.Apr 22, 2026
CVE-2026-6732High 7.5A flaw was found in libxml2.Apr 23, 2026
CVE-2026-7309Medium 4.3A flaw was found in the OpenShift Container Platform build system.Apr 28, 2026
CVE-2026-3833Medium 6.5Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Assigned by redhat
Apr 30, 2026
CVE-2026-3832Low 3.7Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
Assigned by redhat
Apr 30, 2026
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment
Assigned by redhat
Apr 30, 2026
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username
Assigned by redhat
May 7, 2026
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Assigned by redhat
May 18, 2026
CVE-2026-9150Medium 6.5A flaw was found in libsolv.May 20, 2026
CVE-2026-9149Medium 6.5A flaw was found in libsolv.May 21, 2026
CVE-2026-4480Critical 9.0A flaw was found in the Samba printing subsystem.May 26, 2026
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Assigned by redhat
May 26, 2026
CVE-2026-3012High 8.0Samba: group policy certificate enrollment uses http:// without validation
Assigned by redhat
May 27, 2026
CVE-2026-2340Medium 6.5Samba: vfs_worm does not block directory modification
Assigned by redhat
May 27, 2026
CVE-2026-1933High 7.1Samba: missing access check on reparse point operations
Assigned by redhat
May 27, 2026
CVE-2026-4408Critical 9.0Samba: remote code execution in samr
Assigned by redhat
May 28, 2026
CVE-2026-42965Medium 6.5A flaw was found in the OpenShift Router.May 29, 2026
CVE-2026-46579High 7.5A flaw was found in the OpenShift Router.May 29, 2026
CVE-2026-10533Medium 5.0A flaw was found in OpenShift Container Platform.Jun 1, 2026
CVE-2026-1784High 8.8The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy.Jun 2, 2026
CVE-2026-44495High 7.7Axios is a promise based HTTP client for the browser and Node.js.Jun 11, 2026
CVE-2026-54099High 8.8Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters
Assigned by redhat
Jun 22, 2026
CVE-2026-54100High 8.3Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft
Assigned by redhat
Jun 22, 2026
CVE-2026-12725Medium 5.9A heap-based buffer overflow was found in dnsmasq.Jun 22, 2026
CVE-2026-55653Medium 4.3Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Assigned by redhat
Jun 23, 2026
CVE-2026-13595Medium 5.3A flaw was found in the libblkid library of util-linux.Jun 29, 2026
CVE-2026-13757Medium 6.2P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
Assigned by redhat
Jun 29, 2026
CVE-2026-68742Medium 5.5Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
Assigned by redhat
Aug 3, 2026
CVE-2026-18508Medium 4.4Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
Assigned by redhat
Aug 3, 2026
CVE-2026-18477Medium 4.4Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
Assigned by redhat
Aug 3, 2026
CVE-2026-68744Low 3.3Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
Assigned by redhat
Aug 4, 2026
CVE-2026-68743Medium 5.5Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
Assigned by redhat
Aug 4, 2026
CVE-2026-71225Medium 6.5Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
Assigned by redhat
Aug 5, 2026
CVE-2026-71226High 7.3Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
Assigned by redhat
Aug 5, 2026
CVE-2026-71227Medium 5.1Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
Assigned by redhat
Aug 5, 2026
CVE-2026-19548Medium 5.5Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
Assigned by redhat
Aug 12, 2026
CVE-2026-19617Medium 5.5Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
Assigned by redhat
Aug 14, 2026
CVE-2026-13002Medium 4.4Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing
Assigned by redhat
Aug 14, 2026
CVE-2026-90995Medium 5.5Sssd: sssd: local denial of service due to null pointer dereference in pam responder
Assigned by redhat
Sep 14, 2026
CVE-2026-90996Medium 4.0Sssd: sssd: denial of service in nss responder via crafted zero-length requests
Assigned by redhat
Sep 14, 2026
CVE-2026-90462Medium 5.4Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
Assigned by redhat
Sep 22, 2026
CVE-2026-104040Medium 4.4Sssd: sssd: information disclosure via odata injection in entra id lookups
Assigned by redhat
Oct 6, 2026
CVE-2026-104047Medium 5.3Sssd: sssd: information disclosure via query injection in entra id lookups
Assigned by redhat
Oct 6, 2026
PreviousPage 2 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.