Red Hat Openshift Container Platform 4.12 vulnerabilities

35 CVEs affecting Red Hat Openshift Container Platform 4.12, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-75887, published 2026-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-7387, published 2024-09-17. Critical severity, CVSS 9.1. EPSS: 2.3% chance of exploitation in the next 30 days. A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder…
CVE-2025-49796, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input…
CVE-2024-1394, published 2024-03-21. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in…
CVE-2024-3154, published 2024-04-26. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the…
CVE-2025-0624, published 2025-02-19. High severity, CVSS 7.6. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer…
CVE-2025-9566, published 2025-09-05. High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days. There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a…
CVE-2026-33846, published 2026-05-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and…
CVE-2024-45496, published 2024-09-17. Critical severity, CVSS 9.9. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone…
CVE-2026-5260, published 2026-05-26. High severity, CVSS 8.2. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a…
CVE-2024-1139, published 2024-04-25. High severity, CVSS 7.7. EPSS: 0.9% chance of exploitation in the next 30 days. A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a…

Latest

CVE-2026-75887, published 2026-09-23. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json`…
CVE-2026-75885, published 2026-09-18. Critical severity, CVSS 9.3. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead…
CVE-2026-50237, published 2026-08-11. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the…
CVE-2026-16313, published 2026-07-28. High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A…
CVE-2026-49332, published 2026-07-28. High severity, CVSS 8.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not strip underscore-variant keys (X_Forwarded_User)…
CVE-2026-15809, published 2026-07-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can…
CVE-2026-14476, published 2026-07-07. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with…
CVE-2026-14474, published 2026-07-07. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated…
CVE-2025-10263, published 2026-06-09. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C,…