Red Hat Openshift Container Platform For ARM64 vulnerabilities

8 CVEs affecting Red Hat Openshift Container Platform For ARM64, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4424, published 2026-03-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-6021, published 2025-06-12. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a…
CVE-2024-9676, published 2024-10-15. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of…
CVE-2026-4424, published 2026-03-19. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions…
CVE-2023-5625, published 2023-11-01. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all…
CVE-2024-1725, published 2024-03-07. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's…
CVE-2023-3089, published 2023-07-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
CVE-2025-13601, published 2025-11-26. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of…
CVE-2022-4318, published 2023-09-25. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.