Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-76061	A flaw was found in CRI-O's `bind_mount_prefix` handling	5.5 Medium	Oct 6, 2026
CVE-2026-88252	Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion	4.7 Medium	Oct 6, 2026
CVE-2026-104044	Sssd: sssd: denial of service via crafted passkey kerberos authentication request	6.2 Medium	Oct 6, 2026
CVE-2026-104043	Sssd: sssd: denial of service via undersized packet parsing in nss responder	5.5 Medium	Oct 6, 2026
CVE-2026-104042	Sssd: sssd: denial of service via out-of-bounds read in pam responder	5.5 Medium	Oct 6, 2026
CVE-2026-104041	Sssd: sssd: denial of service via unbounded negative cache growth	5.5 Medium	Oct 6, 2026
CVE-2026-104040	Sssd: sssd: information disclosure via odata injection in entra id lookups	4.4 Medium	Oct 6, 2026
CVE-2026-104039	Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder	4.7 Medium	Oct 6, 2026
CVE-2026-104038	Sssd: sssd: denial of service via missing sid extension in certificate mapping	5.9 Medium	Oct 6, 2026
CVE-2026-104037	Sssd: sssd: denial of service via packet length underflow in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-92821	Sssd: sssd: access control bypass via premature ldap access rule evaluation	6.8 Medium	Oct 6, 2026
CVE-2026-104036	Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin	5.8 Medium	Oct 6, 2026
CVE-2026-104035	Sssd: sssd: denial of service via memory exhaustion in kcm responder	5.5 Medium	Oct 6, 2026
CVE-2026-104034	Sssd: sssd: denial of service via use-after-free in kcm ticket renewal	4.7 Medium	Oct 6, 2026
CVE-2026-104033	Sssd: sssd: access control bypass via improper ldap shadow expiration check	5.4 Medium	Oct 6, 2026
CVE-2026-104032	Sssd: sssd: denial of service via unprivileged autofs cache invalidation	5.5 Medium	Oct 6, 2026
CVE-2026-104031	Sssd: sssd: denial of service via memory exhaustion in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-104029	A flaw was found in SSSD	3.3 Low	Oct 5, 2026
CVE-2026-104030	Sssd: sssd: denial of service via out-of-bounds read during passkey parsing	5.5 Medium	Oct 5, 2026
CVE-2026-96577	A flaw was found in oc-mirror	7.1 High	Oct 1, 2026
CVE-2026-83589	A flaw was found in oauth-proxy	6.1 Medium	Oct 1, 2026
CVE-2026-101295	Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction	7.3 High	Sep 30, 2026
CVE-2026-62146	A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite…	7.8 High	Sep 30, 2026
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 High	Sep 28, 2026
CVE-2026-87114	A flaw was found in kube-compare	7.1 High	Sep 28, 2026

Other Red Hat products