CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,479 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,479
Show in the list
Critical, last 7 days
360
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:openshift. Show all products

269 CVEs, showing 151 to 200PreviousPage 4 of 6Next
CVESeverityTitlePublished
CVE-2026-66792Critical 9.9Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters
Assigned by redhat
Aug 17, 2026
CVE-2026-43961High 7.8Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
Assigned by redhat
Aug 19, 2026
CVE-2026-77014Medium 5.3Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
Assigned by redhat
Aug 20, 2026
CVE-2026-77176High 8.1Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy
Assigned by redhat
Aug 20, 2026
CVE-2026-19685High 7.1Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)
Assigned by redhat
Aug 24, 2026
CVE-2026-17113Medium 6.0Cri-o: cri-o: unvalidated image env var causes daemon crash
Assigned by redhat
Aug 24, 2026
CVE-2026-82327Medium 5.5Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data
Assigned by redhat
Aug 28, 2026
CVE-2026-18743Low 2.5Popt-devel: popt-static: short realloc in poptconfigfiletostring
Assigned by redhat
Sep 1, 2026
CVE-2026-49329High 7.5Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints
Assigned by redhat
Sep 1, 2026
CVE-2026-78408High 7.9Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
Assigned by redhat
Sep 2, 2026
CVE-2026-78410High 7.8Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
Assigned by redhat
Sep 2, 2026
CVE-2026-78409High 7.0Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks
Assigned by redhat
Sep 2, 2026
CVE-2026-81665High 7.5Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly
Assigned by redhat
Sep 4, 2026
CVE-2026-81666Medium 6.5Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems
Assigned by redhat
Sep 4, 2026
CVE-2026-86469Medium 5.3Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path
Assigned by redhat
Sep 7, 2026
CVE-2026-74860High 8.5Libxml2: double-free/uaf in libxml2 python bindings
Assigned by redhat
Sep 8, 2026
CVE-2026-86564Low 3.3Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler
Assigned by redhat
Sep 8, 2026
CVE-2026-87853High 7.5Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation
Assigned by redhat
Sep 9, 2026
CVE-2026-87875Medium 4.3Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
Assigned by redhat
Sep 9, 2026
CVE-2026-87876Low 3.0Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)
Assigned by redhat
Sep 9, 2026
CVE-2026-84042High 7.8Crun: crun: rootful krun with passt executes container payload as host root
Assigned by redhat
Sep 10, 2026
CVE-2026-88264Medium 5.6Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
Assigned by redhat
Sep 10, 2026
CVE-2026-88265Medium 5.6Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown
Assigned by redhat
Sep 10, 2026
CVE-2026-84828
Healthcare
Medium 6.5Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
Assigned by redhat
Sep 10, 2026
CVE-2026-89329Medium 6.2Device-mapper-multipath: local denial of service via blocking ipc send operations
Assigned by redhat
Sep 11, 2026
CVE-2026-90463Medium 4.0Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)
Assigned by redhat
Sep 14, 2026
CVE-2026-90994Medium 4.0Sssd: sssd: denial of service via malformed pam v1 requests
Assigned by redhat
Sep 14, 2026
CVE-2026-90995Medium 5.5Sssd: sssd: local denial of service due to null pointer dereference in pam responder
Assigned by redhat
Sep 14, 2026
CVE-2026-90996Medium 4.0Sssd: sssd: denial of service in nss responder via crafted zero-length requests
Assigned by redhat
Sep 14, 2026
CVE-2026-79705Medium 4.5Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers
Assigned by redhat
Sep 15, 2026
CVE-2026-79699Medium 4.4Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory
Assigned by redhat
Sep 15, 2026
CVE-2025-11395Medium 5.5Podman: arbitrary file write when importing oci archive
Assigned by redhat
Sep 15, 2026
CVE-2026-42784High 7.4Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
Assigned by redhat
Sep 16, 2026
CVE-2026-76781Medium 5.5Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute
Assigned by redhat
Sep 17, 2026
CVE-2026-81627High 8.2Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
Assigned by redhat
Sep 18, 2026
CVE-2026-75885Critical 9.3Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
Assigned by redhat
Sep 18, 2026
CVE-2026-15801High 8.0Cri-o: cri-o: insufficient validation during container checkpoint restore
Assigned by redhat
Sep 21, 2026
CVE-2026-92574High 8.8Cri-o: cri-o checkpoint restore bypasses destination security context
Assigned by redhat
Sep 21, 2026
CVE-2026-75939High 7.4Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed
Assigned by redhat
Sep 21, 2026
CVE-2026-95508High 7.4Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu
Assigned by redhat
Sep 22, 2026
CVE-2026-95619High 7.7Gcc: libstdc++ integer overflow in `new` operator
Assigned by redhat
Sep 22, 2026
CVE-2026-94640High 7.5Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
Assigned by redhat
Sep 22, 2026
CVE-2026-90462Medium 5.4Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
Assigned by redhat
Sep 22, 2026
CVE-2026-75886High 7.2Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding
Assigned by redhat
Sep 23, 2026
CVE-2026-75887High 7.5Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
Assigned by redhat
Sep 23, 2026
CVE-2026-93834High 8.8Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
Assigned by redhat
Sep 25, 2026
CVE-2026-87114High 7.1Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo
Assigned by redhat
Sep 28, 2026
CVE-2026-102010High 7.0Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Assigned by redhat
Sep 28, 2026
CVE-2026-62146High 7.8Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket
Assigned by redhat
Sep 30, 2026
CVE-2026-101295High 7.3Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction
Assigned by redhat
Sep 30, 2026
PreviousPage 4 of 6Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.