Red Hat Openshift Container Platform 5

Vulnerabilities related to Red Hat Openshift Container Platform 5 167

• Medium 5.5 Vulnerability in libxml2 CVE-2026-76781 Sep 18, 01:17
• Medium 4.5 Path Traversal in buildah/copier Go package CVE-2026-79705 Sep 16, 02:17
• Medium 4.0 Vulnerability in sssd CVE-2026-90996 Sep 15, 01:17
• Medium 5.5 Vulnerability in SSSD CVE-2026-90995 Sep 15, 01:17
• Medium 4.0 Out-of-Bounds Read in sssd Vulnerability in sssd (CVE-2026-90994). Risk of unauthorized operations or information disclosure. CVE-2026-90994 Sep 15, 01:17
• Medium 4.0 Out-of-Bounds Read in sssd NSS responder Vulnerability in sssd NSS responder (CVE-2026-90463). Risk of unauthorized operations or information disclosure. CVE-2026-90463 Sep 15, 01:17
• Medium 6.2 Vulnerability in multipathd CVE-2026-89329 Sep 12, 04:17
• Medium 6.5 Vulnerability in PCS CVE-2026-84828 Sep 10, 21:16
• Medium 5.6 Vulnerability in crun CVE-2026-88265 Sep 10, 18:17
• Medium 5.6 Vulnerability in crun CVE-2026-88264 Sep 10, 18:17
• High 7.8 Privilege Escalation in crun Vulnerability in crun (CVE-2026-84042). Successful exploitation can lead to full system takeover. CVE-2026-84042 Sep 10, 18:17
• High 7.5 Vulnerability in SSSD's IdP authentication provider CVE-2026-87853 Sep 10, 02:17
• Medium 5.3 Vulnerability in GLib2 CVE-2026-86469 Sep 8, 01:17
• Medium 6.5 An integer overflow was found in Corosync's handling of membership commit token messages. The... Vulnerability reported (CVE-2026-81666). Risk of unauthorized operations or information disclosure. CVE-2026-81666 Sep 4, 19:17
• High 7.5 A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message... Vulnerability reported (CVE-2026-81665). Successful exploitation can lead to full system takeover. CVE-2026-81665 Sep 4, 18:17
• High 7.8 Vulnerability in util-linux CVE-2026-78410 Sep 3, 01:17
• High 7.0 The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory… Vulnerability reported (CVE-2026-78409). Successful exploitation can lead to full system takeover. CVE-2026-78409 Sep 3, 01:17
• High 7.9 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across… Vulnerability reported (CVE-2026-78408). Data can be tampered with by attackers. CVE-2026-78408 Sep 3, 01:17
• High 7.5 Vulnerability in openshift/oauth-server CVE-2026-49329 Sep 2, 01:16
• Medium 5.5 Vulnerability in libsolv CVE-2026-82327 Aug 29, 01:18
• High 7.1 NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca... Vulnerability reported (CVE-2026-19685). Confidential information can be exposed externally. CVE-2026-19685 Aug 25, 03:31
• High 8.1 Vulnerability in Kata Containers CVE-2026-77176 Aug 21, 02:19
• High 7.8 Code Injection in Vim's netrw plugin CVE-2026-43961 Aug 19, 23:17
• Medium 4.4 Vulnerability in Openshift Container Platform CVE-2026-13002 Aug 15, 01:16
• Medium 6.5 Vulnerability in Samba CVE-2026-58224 Aug 15, 00:32
• Medium 5.5 Vulnerability in libdm CVE-2026-19617 Aug 14, 15:31
• Medium 4.2 Vulnerability in github.com/containers/podman/v5 CVE-2026-19730 Aug 14, 03:17
• Medium 5.5 Use-After-Free in Hardened Images Vulnerability in Hardened Images (CVE-2026-19548). Risk of unauthorized operations or information disclosure. CVE-2026-19548 Aug 13, 01:16
• High 7.8 `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that... Vulnerability reported (CVE-2026-72693). Successful exploitation can lead to full system takeover. Exploitable via login. CVE-2026-72693 Aug 11, 18:32
• Medium 4.4 A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The... Vulnerability reported (CVE-2026-6426). Risk of unauthorized operations or information disclosure. CVE-2026-6426 Aug 11, 07:17