Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4.18

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne 21 oct. 2026
CVE-2026-75888 A flaw was found in the OpenShift console 7.7 Élevée 12 oct. 2026
CVE-2026-93017 The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core… 7.7 Élevée 8 oct. 2026
CVE-2026-96577 A flaw was found in oc-mirror 7.1 Élevée 1 oct. 2026
CVE-2026-83589 A flaw was found in oauth-proxy 6.1 Moyenne 1 oct. 2026
CVE-2026-75887 A flaw was found in the OpenShift console 7.5 Élevée 23 sept. 2026
CVE-2026-75886 A flaw was found in openshift/console 7.2 Élevée 23 sept. 2026
CVE-2026-75939 A flaw was found in openshift/oc-mirror 7.4 Élevée 21 sept. 2026
CVE-2026-75885 A flaw was found in the OpenShift console 9.3 Critique 18 sept. 2026
CVE-2026-49329 A flaw was found in openshift/oauth-server 7.5 Élevée 1 sept. 2026
CVE-2026-50236 An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers 7.4 Élevée 11 août 2026
CVE-2026-50237 A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy 7.4 Élevée 11 août 2026
CVE-2026-15816 A flaw was found in dracut 7.5 Élevée 7 août 2026
CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export 7.6 Élevée 28 juil. 2026
CVE-2026-49332 A flaw was found in openshift/oauth-proxy 8.5 Élevée 28 juil. 2026
CVE-2026-16242 A flaw was found in the Konnectivity proxy-server configuration for hosted control planes 9.4 Critique 20 juil. 2026
CVE-2026-15809 A flaw was found in CRI-O 7.8 Élevée 15 juil. 2026
CVE-2026-14476 Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 8.0 Élevée 7 juil. 2026
CVE-2026-14474 Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 8.8 Élevée 7 juil. 2026
CVE-2026-58014 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" 7.3 Élevée 30 juin 2026
CVE-2026-14164 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 7.5 Élevée 30 juin 2026
CVE-2026-46331 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page… 7.8 Élevée 16 juin 2026
CVE-2026-6893 A flaw was found in dracut 7.5 Élevée 10 juin 2026
CVE-2026-46323 In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()… 7.8 Élevée 9 juin 2026
CVE-2025-10263 Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,… 9.1 Critique 9 juin 2026

Autres produits Red Hat