Known vulnerabilities in OpenShift Virtualization

Software CPE: cpe:2.3:a:red_hat:openshift_virtualization:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Total vulnerabilities: 536
Public exploits: 38
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Virtualization OpenShift Virtualization is affected by 536 known vulnerabilities: 2 critical, 96 high, 233 medium, 205 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118735 - Resource exhaustion
CVE-2025-6075
CWE-400 Low
No
No
4.19.17 24.11.2025 SB2025112495
SB2025112498
SB2025112569
and 26 more
#VU116973 - Heap-based Buffer Overflow
CVE-2025-11083
CWE-122 Low
No
No
4.19.17 14.10.2025 SB2025082140
SB2025101420
SB2025101421
and 41 more
#VU116971 - Improper input validation
CVE-2025-8291
CWE-20 Medium
No
No
4.19.17 14.10.2025 SB2025101418
SB2025101423
SB2025101424
and 47 more
#VU116213 - Out-of-bounds write
CVE-2025-9230
CWE-787 Medium
No
No
4.19.17 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU115172 - Return of Wrong Status Code
CVE-2025-5987
CWE-393 Low
No
No
4.19.17 12.09.2025 SB2025091207
SB2025091215
SB2025091222
and 17 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714
CWE-674 Medium
No
No
4.19.17 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 36 more
#VU115138 - Out-of-bounds read
CVE-2025-9086
CWE-125 Low
No
No
4.19.17 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU114944 - Improper Locking
CVE-2025-39697
CWE-667 Low
No
No
4.19.17 08.09.2025 SB2025090877
SB2025092303
SB2025092304
and 50 more
#VU113739 - Resource Management Errors
CVE-2025-6069
CWE-399 Medium
No
No
4.19.17 07.08.2025 SB2025080731
SB2025080736
SB2025080737
and 40 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395
CWE-476 Medium
No
No
4.19.17 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990
CWE-476 Low
No
No
4.19.17 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112993 - Double Free
CVE-2025-32988
CWE-415 Medium
No
No
4.19.17 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 73 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989
CWE-122 High
No
No
4.19.17 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU111062 - Permissions, Privileges, and Access Controls
CVE-2025-4598
CWE-264 Low
Available
No
4.19.17 11.06.2025 SB2025061128
SB2025061134
SB2025061152
and 19 more
#VU109432 - Memory corruption
CVE-2025-37891
CWE-119 Low
No
No
4.19.17 20.05.2025 SB2025052010
SB2025061637
SB2025061639
and 33 more
#VU108853 - Missing release of memory after effective lifetime
CVE-2025-37849
CWE-401 Low
No
No
4.19.17 09.05.2025 SB2025050961
SB2025061637
SB2025061639
and 54 more
#VU108246 - Use After Free
CVE-2025-23142
CWE-416 Low
No
No
4.19.17 02.05.2025 SB20250502151
SB2025061637
SB2025061639
and 44 more
#VU105087 - Improper input validation
CVE-2025-21795
CWE-20 Low
No
No
4.19.17 27.02.2025 SB20250227190
SB2025031281
SB2025031345
and 33 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
4.19.17 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU97633 - Out-of-bounds read
CVE-2024-5642
CWE-125 Low
No
No
4.19.17 20.09.2024 SB2024092093
SB2024092095
SB2024092096
and 14 more


Showing elements 1 - 20 out of 536