Known vulnerabilities in OpenShift Virtualization - page 2

Software CPE: cpe:2.3:a:red_hat:openshift_virtualization:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Total vulnerabilities: 536
Public exploits: 38
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Virtualization OpenShift Virtualization is affected by 536 known vulnerabilities: 2 critical, 96 high, 233 medium, 205 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120256 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-45582
CWE-22 Low
No
No
4.19.17 23.12.2025 SB2025122320
SB2025122321
SB2026010502
and 19 more
#VU120021 - Use After Free
CVE-2025-68287
CWE-416 Low
No
No
4.19.17 16.12.2025 SB2025121664
SB2026011228
SB2026011256
and 36 more
#VU120020 - Use After Free
CVE-2025-68285
CWE-416 Low
No
No
4.19.17 16.12.2025 SB2025121663
SB2026011211
SB2026011212
and 105 more
#VU119115 - Out-of-bounds read
CVE-2025-66293
CWE-125 Medium
No
No
4.19.17 03.12.2025 SB2025120348
SB20251210187
SB2025121761
and 41 more
#VU118778 - Out-of-bounds read
CVE-2025-64720
CWE-125 Medium
No
No
4.19.17 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 40 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018
CWE-122 Critical
Available
No
4.19.17 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 46 more
#VU118400 - Out-of-bounds read
CVE-2025-40154
CWE-125 Low
No
No
4.19.17 12.11.2025 SB20251112102
SB2025121540
SB2025121750
and 56 more
#VU118388 - Use After Free
CVE-2025-40176
CWE-416 Low
No
No
4.19.17 12.11.2025 SB2025111290
SB2025112816
SB2025112817
and 28 more
#VU117610 - Insufficient Verification of Data Authenticity
CVE-2025-40778
CWE-345 Medium
Available
No
4.19.17 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 60 more
#VU117604 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2025-40780
CWE-337 Medium
No
No
4.19.17 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 41 more
#VU117258 - Use After Free
CVE-2025-39983
CWE-416 Low
No
No
4.19.17 15.10.2025 SB20251015106
SB2025111715
SB20251208117
and 3 more
#VU117255 - Use After Free
CVE-2025-39981
CWE-416 Low
No
No
4.19.17 15.10.2025 SB20251015104
SB2025111182
SB2025111858
and 29 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985
CWE-158 Low
No
No
4.19.17 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 26 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984
CWE-78 Low
No
No
4.19.17 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 28 more
#VU115751 - Resource exhaustion
CVE-2025-59375
CWE-400 Medium
No
No
4.19.17 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 108 more
#VU115645 - Improper input validation
CVE-2025-39806
CWE-20 Low
No
No
4.19.17 16.09.2025 SB20250916386
SB2025092303
SB2025092304
and 34 more
#VU112980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53905
CWE-22 High
No
No
4.19.17 16.07.2025 SB2025071691
SB2025071770
SB2025071771
and 23 more
#VU112979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53906
CWE-22 High
No
No
4.19.17 16.07.2025 SB2025071690
SB2025071770
SB2025071771
and 29 more
#VU89351 - Insufficient Verification of Data Authenticity
CVE-2024-34397
CWE-345 Low
No
No
4.12.20, 4.13.11 10.05.2024 SB2024051042
SB2024051043
SB2024051044
and 88 more
#VU6663 - Out-of-bounds read
CVE-2016-9840
CWE-125 Low
No
No
4.12.20 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 47 more


Showing elements 21 - 40 out of 536