Skip to contentRed Hat Openshift vulnerabilities
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: grub2: out-of-bounds write via malicious usb deviceCVE-2025-61661Fix available4.8 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in grub_file_close()CVE-2025-54771Fix available4.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeCVE-2025-12464Fix available6.2 Medium
- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsCVE-2025-13327Fix available6.3 Medium
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.0 +2 moreOpenshift-ai: trusty ai grants all authenticated users to list pods in any namespaceCVE-2025-121035.0 Medium
- red hat openshift virtualization 4, rhel-8-cnv-4.12, rhel-9-cnv-4.14 +4 more +6 moreContainer-native-virtualization: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578486.4 Medium
- latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLuksmeta: data corruption when handling luks1 partitions with luksmetaCVE-2025-11568Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: vfs_streams_xattr uninitialized memory write possibleCVE-2025-9640Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: command injection in wins server hook scriptCVE-2025-10230Public exploitFix availableEPSS 39.8%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibxslt: type confusion in exsltfuncresultcompfunction of libxsltCVE-2025-11731Fix available3.1 Low
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsCVE-2025-11561Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-freeCVE-2025-11234Fix available7.5 High
- opendatahub-io opendatahub-operator, red hat openshift ai 2.16, openshift ai 2.19 +3 more +5 moreOpenshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster adminCVE-2025-10725Public exploit9.9 Critical
- red hat openshift ai 2.16, openshift ai 2.19, openshift ai 2.21 +2 more +4 moreOpenshift-ai: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578526.4 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvtCVE-2025-10911Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: memory exhaustion via repeated key exchange in libsshCVE-2025-8277Fix available3.1 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructureCVE-2025-11065Fix available5.3 Medium
- red hat openshift container platform 4Cri-o: large /etc/passwd file may lead to denial of serviceCVE-2025-44375.7 Medium
- red hat mirror registry for red hat openshiftMirror-registry: host header injection in mirror-registryCVE-2025-77776.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callbackCVE-2025-8860Fix available3.3 Low
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-6020CVE-2025-8941Fix available7.8 High
- operator-framework operator-sdk, red hat multicluster engine for kubernetes, multicluster engine for kubernetes 2.6 +26 more +28 moreOperator-sdk: privilege escalation due to incorrect permissions of /etc/passwdCVE-2025-7195Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreNetavark: podman: netavark may resolve hostnames to unexpected hostsCVE-2025-8283Fix available3.7 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: null pointer dereference in libssh kex session id calculationCVE-2025-8114Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolkit: xml policy file with a large number of nested elements may lead to out-of-bounds writeCVE-2025-7519Fix available6.7 Medium
- red hat ceph storage 7, discovery 2, enterprise linux 10 +11 more +13 moreGnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()CVE-2025-6395Fix available6.5 Medium
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodesCVE-2025-7424Fix available7.5 High
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrCVE-2025-7425Fix available7.8 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timingCVE-2026-42246Fix available7.6 High
- libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreLibssh: invalid return code for chacha20 poly1305 with openssl backendCVE-2025-5987Fix available8.1 High
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: integer overflow in libssh sftp server packet length validation leading to denial of serviceCVE-2025-5449Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libsshCVE-2025-5372Fix available5.0 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: double free vulnerability in libssh key export functionsCVE-2025-5351Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: use of uninitialized variable in privatekey_from_file()CVE-2025-4878Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: write beyond bounds in binary to base64 conversion functionsCVE-2025-4877Fix available4.5 Medium
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: podman missing tls verificationCVE-2025-6032Fix available8.3 High
- red hat openshift ai (rhoai), openshift ai 2.16 +1 moreTrustyai-explainability: command injection via lmevaljob crCVE-2025-61935.9 Medium
- red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1, discovery 2 +33 more +35 moreLinux-pam: linux-pam directory traversalCVE-2025-6020Public exploitFix available7.8 High
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- red hat builds for red hat openshift, custom metric autoscaler operator for red hat openshift, multicluster global hub +24 more +26 moreGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultsCVE-2025-8556Fix available3.7 Low
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: reading past eof may be triggered for piped file streamsCVE-2025-5918Fix available3.9 Low
- Show moreLoading…