What’s Vulnerable › Products
Red Hat OpenShift Container Platform 5 vulnerabilities
1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 50 published in the last 12 months.
Check whether your Red Hat OpenShift Container Platform 5 version is affected
Latest Red Hat OpenShift Container Platform 5 vulnerabilities
- CVE-2026-114691 — Gcc: integer wrap in `std (CVSS 5.9)
- CVE-2026-114690 — Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std (CVSS 6.2)
- CVE-2026-118593 — Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099) (CVSS 5.9)
- CVE-2026-93009 — Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder (CVSS 4.3)
- CVE-2026-93010 — Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check (CVSS 4.3)
- CVE-2026-93006 — Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content (CVSS 6.8)
- CVE-2026-93007 — Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation (CVSS 5.3)
- CVE-2026-93011 — Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms (CVSS 5.3)
- CVE-2026-93008 — Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations (CVSS 6.8)
- CVE-2026-85498 — Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow (CVSS 3.5)
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
- CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
- CVE-2026-92824 — Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts (CVSS 6.2)
- CVE-2026-92823 — Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml (CVSS 6.2)
- CVE-2026-92822 — Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml (CVSS 6.2)
- CVE-2026-85231 — Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding (CVSS 6.5)
- CVE-2026-92982 — Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5)
- CVE-2026-104795 — Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution (CVSS 8.8)
- CVE-2026-75888 — Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch (CVSS 7.7)
- CVE-2026-93017 — Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader (CVSS 7.7)
- CVE-2026-107176 — Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret (CVSS 6.8)
- CVE-2026-62146 — Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket (CVSS 7.8)
- CVE-2026-102010 — Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if (CVSS 7.0)
- CVE-2026-94640 — Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service (CVSS 7.5)
- CVE-2026-95619 — Gcc: libstdc++ integer overflow in `new` operator (CVSS 7.7)