CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,501 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,501
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:openshift. Show all products

266 CVEs, showing 101 to 150PreviousPage 3 of 6Next
CVESeverityTitlePublished
CVE-2026-12505High 7.8Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
Assigned by redhat
Jun 18, 2026
CVE-2026-54099High 8.8Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters
Assigned by redhat
Jun 22, 2026
CVE-2026-54100High 8.3Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft
Assigned by redhat
Jun 22, 2026
CVE-2026-55653Medium 4.3Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Assigned by redhat
Jun 23, 2026
CVE-2026-55655Medium 5.0Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
Assigned by redhat
Jun 23, 2026
CVE-2026-13757Medium 6.2P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
Assigned by redhat
Jun 29, 2026
CVE-2026-14164High 7.5Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
Assigned by redhat
Jun 30, 2026
CVE-2026-58014High 7.3Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Assigned by redhat
Jun 30, 2026
CVE-2026-58015Medium 5.9Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Assigned by redhat
Jun 30, 2026
CVE-2026-14474High 8.8Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
Assigned by redhat
Jul 7, 2026
CVE-2026-14476High 8.0Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
Assigned by redhat
Jul 7, 2026
CVE-2026-15028Low 3.9Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
Assigned by redhat
Jul 10, 2026
CVE-2026-15588Medium 5.3Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Assigned by redhat
Jul 20, 2026
CVE-2026-16313High 7.6Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
Assigned by redhat
Jul 28, 2026
CVE-2026-16524High 7.8Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection
Assigned by redhat
Jul 30, 2026
CVE-2026-16526High 8.8Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
Assigned by redhat
Jul 30, 2026
CVE-2026-16527High 7.3Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
Assigned by redhat
Jul 30, 2026
CVE-2026-16529High 7.5Pcp: pcp: denial of service due to signed integer overflow
Assigned by redhat
Jul 30, 2026
CVE-2026-16530Medium 6.5Pcp: pcp: remote denial of service and information leakage
Assigned by redhat
Jul 30, 2026
CVE-2026-16531Medium 5.3Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet
Assigned by redhat
Jul 30, 2026
CVE-2026-58218Medium 5.3Samba: dns signing dos via tkey name cache exhaustion
Assigned by redhat
Jul 30, 2026
CVE-2026-58222High 8.8Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
Assigned by redhat
Jul 30, 2026
CVE-2026-58216Medium 5.3Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash
Assigned by redhat
Jul 30, 2026
CVE-2026-68742Medium 5.5Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
Assigned by redhat
Aug 3, 2026
CVE-2026-18508Medium 4.4Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
Assigned by redhat
Aug 3, 2026
CVE-2026-18477Medium 4.4Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
Assigned by redhat
Aug 3, 2026
CVE-2026-68744Low 3.3Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
Assigned by redhat
Aug 4, 2026
CVE-2026-18739Low 2.5Popt-devel: popt-static: off-by-one in poptstuffargs
Assigned by redhat
Aug 4, 2026
CVE-2026-68743Medium 5.5Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
Assigned by redhat
Aug 4, 2026
CVE-2026-71225Medium 6.5Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
Assigned by redhat
Aug 5, 2026
CVE-2026-71226High 7.3Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
Assigned by redhat
Aug 5, 2026
CVE-2026-71227Medium 5.1Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
Assigned by redhat
Aug 5, 2026
CVE-2026-49331Medium 6.5Openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths
Assigned by redhat
Aug 5, 2026
CVE-2026-18839Low 2.2Popt-devel: popt-static: size_t underflow in singleoptionhelp
Assigned by redhat
Aug 5, 2026
CVE-2026-19079Medium 4.4Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation
Assigned by redhat
Aug 7, 2026
CVE-2026-18938Medium 6.2P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems
Assigned by redhat
Aug 7, 2026
CVE-2026-15816High 7.5Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
Assigned by redhat
Aug 7, 2026
CVE-2026-6426Medium 4.4Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access
Assigned by redhat
Aug 10, 2026
CVE-2026-72693High 7.8Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
Assigned by redhat
Aug 11, 2026
CVE-2026-50237High 7.4Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console
Assigned by redhat
Aug 11, 2026
CVE-2026-50236High 7.4Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console
Assigned by redhat
Aug 11, 2026
CVE-2026-19078Medium 4.3Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.
Assigned by redhat
Aug 11, 2026
CVE-2026-19548Medium 5.5Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
Assigned by redhat
Aug 12, 2026
CVE-2026-19730Medium 4.2Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives
Assigned by redhat
Aug 13, 2026
CVE-2026-19617Medium 5.5Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
Assigned by redhat
Aug 14, 2026
CVE-2026-58224Medium 6.5Samba: ctdb fails to do integrity checking of received packets
Assigned by redhat
Aug 14, 2026
CVE-2026-13002Medium 4.4Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing
Assigned by redhat
Aug 14, 2026
CVE-2026-66792Critical 9.9Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters
Assigned by redhat
Aug 17, 2026
CVE-2026-43961High 7.8Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
Assigned by redhat
Aug 19, 2026
CVE-2026-77014Medium 5.3Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
Assigned by redhat
Aug 20, 2026
PreviousPage 3 of 6Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.