Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-88264	Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs	5.6 Moyenne	10 sept. 2026
CVE-2026-84042	Crun: crun: rootful krun with passt executes container payload as host root	7.8 Élevée	10 sept. 2026
CVE-2026-87876	Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler…	3.0 Faible	9 sept. 2026
CVE-2026-87875	Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound	4.3 Moyenne	9 sept. 2026
CVE-2026-87853	Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation	7.5 Élevée	9 sept. 2026
CVE-2026-86564	A flaw was found in DPDK lib/vhost	3.3 Faible	8 sept. 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 Élevée	8 sept. 2026
CVE-2026-86469	Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	5.3 Moyenne	7 sept. 2026
CVE-2026-81666	Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems	6.5 Moyenne	4 sept. 2026
CVE-2026-81665	A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly	7.5 Élevée	4 sept. 2026
CVE-2026-78409	Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks	7.0 Élevée	2 sept. 2026
CVE-2026-78410	Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection	7.8 Élevée	2 sept. 2026
CVE-2026-78408	Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority	7.9 Élevée	2 sept. 2026
CVE-2026-49329	A flaw was found in openshift/oauth-server	7.5 Élevée	1 sept. 2026
CVE-2026-18743	A flaw was found in popt	2.5 Faible	1 sept. 2026
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Moyenne	28 août 2026
CVE-2026-17113	A flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed…	6.0 Moyenne	24 août 2026
CVE-2026-19685	Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)	7.1 Élevée	24 août 2026
CVE-2026-78367	Rpm: rpmbuild gettarspec() crafted tar member name → macro injection	7.0 Élevée	24 août 2026
CVE-2026-77176	A flaw was found in Kata Containers	8.1 Élevée	20 août 2026
CVE-2026-77014	Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses	5.3 Moyenne	20 août 2026
CVE-2026-19582	In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary…	0.0 Non notée	20 août 2026
CVE-2026-43961	Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution	7.8 Élevée	19 août 2026
CVE-2026-66792	A flaw was found in the multicloud-operators-subscription component	9.9 Critique	17 août 2026
CVE-2026-13002	A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service	4.4 Moyenne	14 août 2026

Autres produits Red Hat