Red Hat Openshift Ai 3.2 vulnerabilities

4 CVEs affecting Red Hat Openshift Ai 3.2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15588, published 2026-07-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-14164, published 2026-06-30. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking…
CVE-2026-15588, published 2026-07-20. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data…
CVE-2026-12912, published 2026-06-29. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images…
CVE-2026-16118, published 2026-07-17. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME…