Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-16242	A flaw was found in the Konnectivity proxy-server configuration for hosted control planes	9.4 Critical	Jul 20, 2026
CVE-2026-48863	Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service	7.5 High	Jul 16, 2026
CVE-2026-3842	A flaw was found in QEMU	7.8 High	Jul 16, 2026
CVE-2026-15809	A flaw was found in CRI-O	7.8 High	Jul 15, 2026
CVE-2026-15028	Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header	3.9 Low	Jul 10, 2026
CVE-2026-14476	Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass	8.0 High	Jul 7, 2026
CVE-2026-14474	Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation	8.8 High	Jul 7, 2026
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Medium	Jun 30, 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 High	Jun 30, 2026
CVE-2026-12610	Sssd: use-after-free crash in sssd' 'sssd_pam' process	6.4 Medium	Jun 30, 2026
CVE-2026-14164	Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()	7.5 High	Jun 30, 2026
CVE-2026-13757	P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing	6.2 Medium	Jun 29, 2026
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 High	Jun 29, 2026
CVE-2026-54371	attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that…	8.4 High	Jun 29, 2026
CVE-2026-54369	acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions…	8.4 High	Jun 29, 2026
CVE-2026-13595	Util-linux: util-linux: heap use-after-free in libblkid nested partition probing	6.8 Medium	Jun 29, 2026
CVE-2026-49851	Mistune is a Python Markdown parser with renderers and plugins	8.7 High	Jun 24, 2026
CVE-2026-12969	Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation	5.3 Medium	Jun 23, 2026
CVE-2026-55654	Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	3.7 Low	Jun 23, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-12725	Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	5.9 Medium	Jun 22, 2026
CVE-2026-54100	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform	8.3 High	Jun 22, 2026
CVE-2026-54099	Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters	8.8 High	Jun 22, 2026
CVE-2026-3195	A flaw was found in QEMU	7.4 High	Jun 19, 2026

Other Red Hat products