Red Hat Red Hat OpenShift Container Platform 4
340 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-109411 | | Samba: access control bypass via vfs_ceph_rgw case-insensitive open | HIGH 8.1 | |||
| CVE-2026-116497 | | Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-115449 | | Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest | LOW 3.5 | 0.2 % | ||
| CVE-2026-115424 | | Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-114236 | | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | LOW 3.3 | 0.1 % | ||
| CVE-2026-92824 | | Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | MEDIUM 6.2 | 0.1 % | ||
| CVE-2026-92823 | | Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-92822 | | Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-114038 | | Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-16460 | | Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization | HIGH 7.4 | 0.1 % | ||
| CVE-2026-89096 | | Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-85977 | | Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-85231 | | Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-89098 | | Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-111555 | | Luksmeta: missing slot-range validation permits out-of-gap device i/o | MEDIUM 6.0 | 0.1 % | ||
| CVE-2026-104715 | | Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass | HIGH 7.8 | 0.3 % | ||
| CVE-2026-92982 | | Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection | HIGH 8.5 | 0.5 % | ||
| CVE-2026-86849 | | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-86856 | | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86847 | | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86846 | | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86845 | | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86566 | | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86848 | | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto | HIGH 8.8 | 0.1 % | ||
| CVE-2026-86567 | | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | HIGH 8.8 | 0.1 % | ||
| CVE-2026-100236 | | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | HIGH 8.6 | 0.3 % | ||
| CVE-2026-86565 | | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write | HIGH 8.2 | 0.2 % | ||
| CVE-2026-86563 | | Dpdk: dpdk: double offset bug in vhost log mapping calculation | HIGH 7.8 | 0.2 % | ||
| CVE-2026-86562 | | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | HIGH 7.8 | 0.2 % | ||
| CVE-2026-86561 | | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-93683 | | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-109968 | | Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-109971 | | Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool | MEDIUM 4.7 | 0.2 % | ||
| CVE-2026-109970 | | Clevis: clevis: pkcs#11 token pin written to world-readable file | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-109969 | | Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-110036 | | Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices | LOW 3.3 | 0.2 % | ||
| CVE-2026-109976 | | Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-107935 | | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-107565 | | Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-107176 | | Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-107161 | | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients | HIGH 7.5 | 0.3 % | ||
| CVE-2026-107174 | | Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction | MEDIUM 6.4 | 0.3 % | ||
| CVE-2026-80048 | | Sssd: sssd-kcm: local denial of service via excessive memory preallocation | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-104045 | | Sssd: sssd: denial of service via race condition in autofs responder | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-104046 | | Sssd: sssd: denial of service via incomplete identity provider authentication requests | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-104048 | | Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation | HIGH 8.1 | 0.3 % | ||
| CVE-2026-104047 | | Sssd: sssd: information disclosure via query injection in entra id lookups | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-76061 | | Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-88252 | | Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-104044 | | Sssd: sssd: denial of service via crafted passkey kerberos authentication request | MEDIUM 6.2 | 0.1 % | ||
| CVE-2026-104043 | | Sssd: sssd: denial of service via undersized packet parsing in nss responder | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-104042 | | Sssd: sssd: denial of service via out-of-bounds read in pam responder | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-104041 | | Sssd: sssd: denial of service via unbounded negative cache growth | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-104040 | | Sssd: sssd: information disclosure via odata injection in entra id lookups | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-104039 | | Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-104038 | | Sssd: sssd: denial of service via missing sid extension in certificate mapping | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-104037 | | Sssd: sssd: denial of service via packet length underflow in autofs responder | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-92821 | | Sssd: sssd: access control bypass via premature ldap access rule evaluation | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-104036 | | Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin | MEDIUM 5.8 | 0.1 % | ||
| CVE-2026-104035 | | Sssd: sssd: denial of service via memory exhaustion in kcm responder | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-104034 | | Sssd: sssd: denial of service via use-after-free in kcm ticket renewal | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-104033 | | Sssd: sssd: access control bypass via improper ldap shadow expiration check | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-104032 | | Sssd: sssd: denial of service via unprivileged autofs cache invalidation | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-104031 | | Sssd: sssd: denial of service via memory exhaustion in autofs responder | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-104029 | | Sssd: sssd: denial of service via out-of-bounds read in autofs responder | LOW 3.3 | 0.1 % | ||
| CVE-2026-104030 | | Sssd: sssd: denial of service via out-of-bounds read during passkey parsing | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-101295 | | Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction | HIGH 7.3 | 0.1 % | ||
| CVE-2026-102010 | | Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if | HIGH 7.0 | 0.3 % | ||
| CVE-2026-93834 | | Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape | HIGH 8.8 | 0.4 % | ||
| CVE-2026-75886 | | Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding | HIGH 7.2 | 0.3 % | ||
| CVE-2026-90462 | | Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-94640 | | Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2026-95619 | | Gcc: libstdc++ integer overflow in `new` operator | HIGH 7.7 | 0.4 % | ||
| CVE-2026-95508 | | Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu | HIGH 7.4 | 0.6 % | ||
| CVE-2026-75939 | | Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed | HIGH 7.4 | 0.4 % | ||
| CVE-2026-92574 | | Cri-o: cri-o checkpoint restore bypasses destination security context | HIGH 8.8 | 0.7 % | ||
| CVE-2026-15801 | | Cri-o: cri-o: insufficient validation during container checkpoint restore | HIGH 8.0 | 0.5 % | ||
| CVE-2026-81627 | | Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram | HIGH 8.2 | 0.2 % | ||
| CVE-2026-76781 | | Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-42784 | | Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion | HIGH 7.4 | 0.3 % | ||
| CVE-2025-11395 | | Podman: arbitrary file write when importing oci archive | MEDIUM 5.5 | 0.4 % | ||
| CVE-2026-79699 | | Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-79705 | | Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers | MEDIUM 4.5 | 0.4 % | ||
| CVE-2026-90996 | | Sssd: sssd: denial of service in nss responder via crafted zero-length requests | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-90995 | | Sssd: sssd: local denial of service due to null pointer dereference in pam responder | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-90994 | | Sssd: sssd: denial of service via malformed pam v1 requests | MEDIUM 4.0 | 0.2 % | ||
| CVE-2026-90463 | | Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`) | MEDIUM 4.0 | 0.1 % | ||
| CVE-2026-89329 | | Device-mapper-multipath: local denial of service via blocking ipc send operations | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-84828 | | Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-88265 | | Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown | MEDIUM 5.6 | 0.1 % | ||
| CVE-2026-88264 | | Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs | MEDIUM 5.6 | 0.1 % | ||
| CVE-2026-84042 | | Crun: crun: rootful krun with passt executes container payload as host root | HIGH 7.8 | 0.1 % | ||
| CVE-2026-87876 | | Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up) | LOW 3.0 | 0.3 % | ||
| CVE-2026-87875 | | Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-87853 | | Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation | HIGH 7.5 | 0.3 % | ||
| CVE-2026-86564 | | Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler | LOW 3.3 | 0.1 % | ||
| CVE-2026-74860 | | Libxml2: double-free/uaf in libxml2 python bindings | HIGH 8.5 | 0.7 % | ||
| CVE-2026-86469 | | Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-81666 | | Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-81665 | | Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly | HIGH 7.5 | 0.4 % | ||
| CVE-2026-78409 | | Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks | HIGH 7.0 | 0.2 % | ||
| CVE-2026-78410 | | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | HIGH 7.8 | 0.2 % | ||
| CVE-2026-78408 | | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | HIGH 7.9 | 0.2 % | ||
| CVE-2026-18743 | | Popt-devel: popt-static: short realloc in poptconfigfiletostring | LOW 2.5 | 0.1 % | ||
| CVE-2026-82327 | | Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-17113 | | Cri-o: cri-o: unvalidated image env var causes daemon crash | MEDIUM 6.0 | 0.1 % | ||
| CVE-2026-19685 | | Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validat… | HIGH 7.1 | 0.2 % | ||
| CVE-2026-77176 | | Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy | HIGH 8.1 | 0.5 % | ||
| CVE-2026-77014 | | Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-43961 | | Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution | HIGH 7.8 | 0.2 % | ||
| CVE-2026-66792 | | Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-13002 | | Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-58224 | | Samba: ctdb fails to do integrity checking of received packets | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-19617 | | Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-19730 | | Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives | MEDIUM 4.2 | 0.1 % | ||
| CVE-2026-19548 | | Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-19078 | | Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter. | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-72693 | | Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login | HIGH 7.8 | 0.1 % | ||
| CVE-2026-6426 | | Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access | MEDIUM 4.4 | 0.4 % | ||
| CVE-2026-18938 | | P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems | MEDIUM 6.2 | 0.1 % | ||
| CVE-2026-19079 | | Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-18839 | | Popt-devel: popt-static: size_t underflow in singleoptionhelp | LOW 2.2 | 0.1 % | ||
| CVE-2026-49331 | | Openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-71227 | | Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-71226 | | Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path | HIGH 7.3 | 0.1 % | ||
| CVE-2026-71225 | | Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-68743 | | Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 | HIGH 7.1 | 0.1 % | ||
| CVE-2026-18739 | | Popt-devel: popt-static: off-by-one in poptstuffargs | LOW 2.5 | 0.1 % | ||
| CVE-2026-68744 | | Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply | LOW 3.3 | 0.1 % | ||
| CVE-2026-18477 | | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-18508 | | Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-68742 | | Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-58216 | | Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leadi… | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-58222 | | Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes | HIGH 8.8 | 0.8 % | ||
| CVE-2026-58218 | | Samba: dns signing dos via tkey name cache exhaustion | MEDIUM 5.3 | 0.8 % | ||
| CVE-2026-16531 | | Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-16530 | | Pcp: pcp: remote denial of service and information leakage | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-16529 | | Pcp: pcp: denial of service due to signed integer overflow | HIGH 7.5 | 0.5 % | ||
| CVE-2026-16527 | | Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules | HIGH 7.3 | 0.6 % | ||
| CVE-2026-16526 | | Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-16524 | | Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection | HIGH 7.8 | 0.7 % | ||
| CVE-2026-18220 | | Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-18107 | | Criu: criu: container escape via rseq critical section hijack during checkpoint/restore | HIGH 7.8 | 0.2 % | ||
| CVE-2026-15003 | | Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service | MEDIUM 5.6 | 0.2 % | ||
| CVE-2026-16730 | | Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-6390 | | Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-16517 | | Libarchive: libarchive: signed integer overflow in archive_write_zip_header | LOW 2.9 | 0.1 % | ||
| CVE-2026-16461 | | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-15812 | | Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-15811 | | Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes | MEDIUM 5.8 | 0.1 % | ||
| CVE-2026-16277 | | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-12080 | | Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys | HIGH 7.3 | 0.1 % | ||
| CVE-2026-15813 | | Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-16242 | | Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates | CRITICAL 9.4 | 0.9 % | ||
| CVE-2026-48863 | | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2026-3842 | | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | HIGH 7.8 | 0.2 % | ||
| CVE-2026-15809 | | Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env | HIGH 7.8 | 0.2 % | ||
| CVE-2026-15028 | | Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header | LOW 3.9 | 0.2 % | ||
| CVE-2026-12610 | | Sssd: use-after-free crash in sssd' 'sssd_pam' process | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-13757 | | P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-13595 | | Util-linux: util-linux: heap use-after-free in libblkid nested partition probing | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-12969 | | Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-55654 | | Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel te… | LOW 3.7 | 0.7 % | ||
| CVE-2026-12725 | | Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies | MEDIUM 5.9 | 0.5 % | ||
| CVE-2026-54100 | | Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft | HIGH 8.3 | 0.3 % | ||
| CVE-2026-54099 | | Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters | HIGH 8.8 | 0.1 % | ||
| CVE-2026-3195 | | Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730) | HIGH 7.4 | 0.2 % | ||
| CVE-2026-3196 | | Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-12505 | | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | HIGH 7.8 | 0.2 % | ||
| CVE-2026-10649 | | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression | HIGH 8.6 | 0.6 % | ||
| CVE-2026-42014 | | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-48914 | | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | MEDIUM 6.7 | 0.2 % | ||
| CVE-2026-11850 | | Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read | MEDIUM 5.0 | 0.3 % | ||
| CVE-2026-3238 | | Samba: denial of service against ad dc wins server | HIGH 7.5 | 2.7 % | ||
| CVE-2026-10843 | | Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws | HIGH 7.2 | 0.3 % | ||
| CVE-2026-10805 | | Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend | MEDIUM 6.7 | 0.2 % | ||
| CVE-2026-5419 | | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | LOW 3.7 | 0.5 % | ||
| CVE-2026-10533 | | Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation | MEDIUM 5.0 | 0.2 % | ||
| CVE-2026-42965 | | Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation | HIGH 7.7 | 0.4 % | ||
| CVE-2026-42015 | | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-42012 | | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-4480 | | Samba: samba: remote code execution in printing subsystem via unescaped job description | CRITICAL 9.8 | 14 % | ||
| CVE-2026-9149 | | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-9150 | | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-34956 | | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-3832 | | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response | LOW 3.7 | 0.8 % | ||
| CVE-2026-7309 | | Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-5367 | | Ovn: ovn: information disclosure via crafted dhcpv6 packets | HIGH 8.6 | 0.9 % | ||
| CVE-2026-6732 | | Libxml2: libxml2: denial of service via crafted xsd-validated document | HIGH 7.5 | 0.6 % | ||
| CVE-2026-6862 | | Efivar: efivar: denial of service due to stack overflow in device path node parsing | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-6846 | | Binutils: binutils: arbitrary code execution via malformed xcoff object file processing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-6844 | | Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-6843 | | Nano: nano: format string vulnerability leads to denial of service | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-6845 | | Binutils: binutils: denial of service via crafted elf file | MEDIUM 5.0 | 0.1 % | ||
| CVE-2026-6842 | | Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions | LOW 2.5 | 0.1 % | ||
| CVE-2026-6507 | | Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing | HIGH 7.5 | 0.5 % | ||
| CVE-2026-6245 | | Sssd: out-of-bounds read in the sssd | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-1584 | | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder | HIGH 7.5 | 1.3 % | ||
| CVE-2025-14821 | | Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows | HIGH 7.8 | 0.1 % | ||
| CVE-2026-5745 | | Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive | MEDIUM 5.5 | 0.2 % |