Known vulnerabilities in podman (Red Hat package)

Vendor: Red Hat Inc.
Software: podman (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:podman_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 157
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting podman (Red Hat package) podman (Red Hat package) is affected by 157 known vulnerabilities: 9 high, 101 medium, 47 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140600 - Improper input validation
CVE-2026-32281		 CWE-20 Medium
No
No
 4.9.4-20.el9_4.3, 5.8.2-3.el9_8, 5.8.2-3.el10_2 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 34 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.4.1-39.rhaos4.15.el8, 4.9.4-20.el9_4.3, 5.4.0-20.el9_6.3, 5.8.2-3.el9_8, 5.8.2-3.el10_2 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 65 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 4.9.4-20.el9_4.3, 5.4.0-20.el9_6.3, 5.8.2-3.el9_8, 5.8.2-3.el10_2 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 59 more
#VU125945 - Improper input validation
CVE-2026-34986		 CWE-20 Medium
No
No
 4.4.1-22.el9_2.11, 4.9.4-20.el9_4.3, 5.4.0-15.el10_0.1, 5.4.0-20.el9_6.3 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 68 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.11, 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.4.1-39.rhaos4.15.el8, 4.9.4-20.el9_4.2, 5.4.0-15.el10_0.1, 5.4.0-20.el9_6.3, 5.8.2-2.el9_8, 5.8.2-2.el10_2 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 130 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.11, 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.4.1-39.rhaos4.15.el8, 4.9.4-20.el9_4.2, 5.2.2-11.rhaos4.18.el8, 5.4.0-15.el10_0.1, 5.4.0-20.el9_6.2, 5.6.0-12.el10_1, 5.6.0-14.el9_7 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 140 more
#VU124033 - Improper input validation
CVE-2025-61728		 CWE-20 Medium
No
No
 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.11, 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.9.4-20.el9_4.2, 5.2.2-11.rhaos4.18.el8, 5.4.0-15.el10_0.1, 5.4.0-16.rhaos4.20.el9, 5.4.0-20.el9_6.2, 5.6.0-12.el10_1, 5.6.0-14.el9_7 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 45 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.11, 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.4.1-39.rhaos4.15.el8, 4.9.4-20.el9_4.2, 5.2.2-11.rhaos4.18.el8, 5.4.0-15.el10_0.1, 5.4.0-20.el9_6.2, 5.6.0-12.el10_1, 5.6.0-14.el9_7 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 5.2.2-11.rhaos4.18.el8 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 51 more
#VU121565 - Resource exhaustion
CVE-2025-65637		 CWE-400 Medium
No
No
 4.4.1-22.el9_2.5, 4.4.1-36.rhaos4.15.el8, 4.4.1-36.rhaos4.15.el9 15.01.2026 SB2026011525
SB20260116132
SB2026011920
and 32 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.11, 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.4.1-39.rhaos4.15.el8, 4.9.4-20.el9_4.2, 5.2.2-11.rhaos4.18.el8, 5.4.0-15.el10_0.1, 5.4.0-20.el9_6.2, 5.6.0-12.el10_1, 5.6.0-14.el9_7 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 144 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 5.4.0-15.el10_0, 5.4.0-18.el9_6, 5.6.0-11.el9_7, 5.6.0-11.el10_1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.5, 4.4.1-24.rhaos4.14.el8, 4.4.1-24.rhaos4.14.el9, 4.4.1-36.rhaos4.15.el8, 4.4.1-36.rhaos4.15.el9, 4.9.4-19.el9_4.5, 5.2.2-11.rhaos4.18.el8, 5.4.0-14.el10_0, 5.4.0-15.el9_6 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 172 more
#VU118106 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52565		 CWE-61 Low
No
No
 4.9.4-19.rhaos4.16.el8, 4.9.4-20.rhaos4.16.el9, 5.2.2-6.rhaos4.18.el8, 5.2.2-12.rhaos4.17.el8, 5.2.2-12.rhaos4.17.el9, 5.2.2-14.rhaos4.18.el9 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 38 more
#VU118105 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52881		 CWE-61 Low
No
No
 4.4.1-22.el9_2.5, 4.9.4-19.el9_4.5, 4.9.4-19.rhaos4.16.el8, 4.9.4-20.rhaos4.16.el9, 5.2.2-6.rhaos4.18.el8, 5.2.2-12.rhaos4.17.el8, 5.2.2-12.rhaos4.17.el9, 5.2.2-14.rhaos4.18.el9, 5.4.0-14.el10_0, 5.4.0-15.el9_6, 5.6.0-6.el10_1, 5.6.0-7.el9_7 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 62 more
#VU118104 - UNIX Symbolic Link (Symlink) Following
CVE-2025-31133		 CWE-61 Low
Available
No
 4.9.4-19.rhaos4.16.el8, 4.9.4-20.rhaos4.16.el9, 5.2.2-6.rhaos4.18.el8, 5.2.2-12.rhaos4.17.el8, 5.2.2-12.rhaos4.17.el9, 5.2.2-14.rhaos4.18.el9 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 34 more
#VU117706 - Creation of Temporary File With Insecure Permissions
CVE-2025-4953		 CWE-378 Low
No
No
 4.2.0-15.rhaos4.12.el9, 4.4.1-10.rhaos4.12.el8, 4.9.4-16.rhaos4.16.el8, 4.9.4-18.rhaos4.16.el9, 5.2.2-2.rhaos4.18.el8 28.10.2025 SB2025102851
SB2025102856
SB2025102857
and 8 more
#VU114987 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-9566		 CWE-59 Low
No
No
 4.2.0-6.el9_0.5, 4.4.1-22.el9_2.4, 4.9.4-18.el9_4.3, 5.4.0-13.el9_6, 5.4.0-13.el10_0, 5.6.0-6.el9_7 08.09.2025 SB20250908111
SB20250908113
SB20250908114
and 25 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907		 CWE-362 Low
No
No
 4.9.4-18.el9_4.4, 5.6.0-6.el9_7 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 48 more
#VU111945 - Improper Certificate Validation
CVE-2025-6032		 CWE-295 Medium
No
No
 4.9.4-14.rhaos4.16.el8, 4.9.4-16.rhaos4.16.el9, 4.9.4-18.el9_4.2, 5.2.2-8.rhaos4.17.el8, 5.2.2-8.rhaos4.17.el9, 5.2.2-9.rhaos4.18.el9, 5.4.0-6.rhaos4.19.el9, 5.4.0-12.el9_6, 5.4.0-12.el10_0 25.06.2025 SB2025062534
SB2025062541
SB2025062542
and 25 more


Showing elements 1 - 20 out of 157