What’s Vulnerable › Products
Red Hat OpenShift Container Platform 4.18 vulnerabilities
560 known vulnerabilities, 8 confirmed exploited in the wild (CISA KEV), 227 published in the last 12 months.
Check whether your Red Hat OpenShift Container Platform 4.18 version is affected
Exploited Red Hat OpenShift Container Platform 4.18 vulnerabilities
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
- CVE-2021-3560 — Red Hat Polkit Incorrect Authorization Vulnerability
- CVE-2019-1003029 — Jenkins Script Security Plugin Sandbox Bypass Vulnerability
- CVE-2019-1003030 — Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
- CVE-2018-1000861 — Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
- CVE-2019-7609 — Kibana Arbitrary Code Execution
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
Latest Red Hat OpenShift Container Platform 4.18 vulnerabilities
- CVE-2026-116497 — Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon (CVSS 5.5)
- CVE-2026-115449 — Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest (CVSS 3.5)
- CVE-2026-115424 — Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination (CVSS 5.5)
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
- CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
- CVE-2026-92824 — Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts (CVSS 6.2)
- CVE-2026-92823 — Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml (CVSS 6.2)
- CVE-2026-92822 — Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml (CVSS 6.2)
- CVE-2026-114038 — Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string (CVSS 5.1)
- CVE-2026-89096 — Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd (CVSS 5.9)
- CVE-2026-85977 — Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding (CVSS 5.3)
- CVE-2026-85231 — Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding (CVSS 6.5)
- CVE-2026-89098 — Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd (CVSS 5.5)
- CVE-2026-111555 — Luksmeta: missing slot-range validation permits out-of-gap device i/o (CVSS 6.0)
- CVE-2026-104715 — Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass (CVSS 7.8)
- CVE-2026-92982 — Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5)
- CVE-2026-86856 — Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver (CVSS 6.5)
- CVE-2026-86849 — Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto (CVSS 6.5)
- CVE-2026-86848 — Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto (CVSS 8.8)
- CVE-2026-86847 — Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup (CVSS 6.5)
- CVE-2026-86846 — Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto (CVSS 6.5)
- CVE-2026-86845 — Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup (CVSS 6.5)
- CVE-2026-86567 — Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap (CVSS 8.8)
- CVE-2026-86566 — Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) (CVSS 6.5)
- CVE-2026-86565 — Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write (CVSS 8.2)