Red Hat Openshift Container Platform
191 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Red Hat Openshift Container Platform, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Openshift Container Platform CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 4 |
| 2024-11 | 4 |
| 2024-12 | 4 |
| 2025-01 | 11 |
| 2025-02 | 15 |
| 2025-03 | 2 |
| 2025-04 | 3 |
| 2025-05 | 6 |
| 2025-06 | 10 |
| 2025-07 | 8 |
| 2025-08 | 1 |
| 2025-09 | 3 |
| 2025-10 | 4 |
| 2025-11 | 10 |
| 2025-12 | 2 |
| 2026-01 | 2 |
| 2026-02 | 1 |
| 2026-03 | 13 |
| 2026-04 | 11 |
| 2026-05 | 2 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 191 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical11
- High68
- Medium95
- Low17
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Openshift Container Platform.
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing7.8
- CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb frags8.8
- CVE-2026-3832Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response3.7
- CVE-2026-3833Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison6.5
- CVE-2026-33812Excessive memory allocation when decoding malicious SFNT in golang.org/x/image6.1
- CVE-2026-5807Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations7.5
- CVE-2026-34757LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure5.1
- CVE-2026-32281Inefficient policy validation in crypto/x5097.5
- CVE-2026-27140Code execution vulnerability in SWIG code generation in cmd/go8.8
- CVE-2026-33810Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2
- CVE-2026-32282TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4
- CVE-2026-39316CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer4.0
- CVE-2026-35536In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters.7.2
- CVE-2026-4046iconv crash due to assertion failure with untrusted input7.5
- CVE-2026-5121Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing7.5
Product grouping is registry-driven, with AI assist and human review. How it works