CVE Tools
Track your stack

Red Hat Openshift Container Platform 4

377 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Openshift Container Platform 4, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Openshift Container Platform 4 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Openshift Container Platform 4 CVEs per month
MonthCVEs
2024-122
2025-017
2025-0215
2025-0312
2025-042
2025-056
2025-069
2025-0713
2025-084
2025-092
2025-104
2025-116
2025-124
2026-016
2026-027
2026-0315
2026-0421
2026-0513
2026-0623
2026-0727
2026-0827
2026-0938
2026-1079
2026-115

Severity

How the 377 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical72%
  • High10528%
  • Medium22860%
  • Low3710%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Openshift Container Platform 4.

  1. CVE-2026-123876Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation4.4
  2. CVE-2026-123037Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)6.7
  3. CVE-2026-82976Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret7.1
  4. CVE-2026-120831Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service6.5
  5. CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure7.4
  6. CVE-2026-120194Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step7.5
  7. CVE-2026-115456Gcc: out-of-bounds read in std::from_chars3.7
  8. CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++6.5
  9. CVE-2026-114691Gcc: integer wrap in `std5.9
  10. CVE-2026-114690Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std6.2
  11. CVE-2026-118593Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)5.9
  12. CVE-2026-93009Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder4.3
  13. CVE-2026-93010Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check4.3
  14. CVE-2026-93006Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content6.8
  15. CVE-2026-93007Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation5.3

Product grouping is registry-driven, with AI assist and human review. How it works