Product by Red Hat
Red Hat Openshift AI 3.5
27 known vulnerabilities in Red Hat Openshift AI 3.5 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-18951 | Red Hat OpenShift AI 3.3: Privilege Defined With Unsafe Actions | 8.8 | |
| High | CVE-2026-74860 | Libxml2: double-free/uaf in libxml2 python bindings | 8.5 | |
| High | CVE-2026-18982 | Red Hat OpenShift AI: Execution with Unnecessary Privileges | 8.8 | |
| High | CVE-2026-18617 | Red Hat OpenShift AI: Improperly Controlled Modification of Dynamically-Determined Object Attributes | 8.8 | |
| High | CVE-2026-18608 | Red Hat OpenShift AI: Execution with Unnecessary Privileges | 8.7 | |
| High | CVE-2026-18618 | Red Hat OpenShift AI: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-56211 | Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames | 7.1 | |
| High | CVE-2026-15467 | Red Hat OpenShift AI: Incorrect Privilege Assignment | 8.1 | |
| High | CVE-2026-18611 | Red Hat OpenShift AI: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 7.5 | |
| High | CVE-2026-56208 | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | 7.6 | |
| High | CVE-2026-58015 | GNOME GLib: Path Traversal | 5.9 | |
| High | CVE-2026-56209 | Red Hat: Out-of-bounds Write | 7.1 | |
| High | CVE-2026-58014 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | 7.3 | |
| High | CVE-2026-15581 | Red Hat OpenShift AI: Missing Authentication for Critical Function | 8.0 | |
| High | CVE-2026-56210 | Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id | 7.1 | |
| High | CVE-2026-18620 | Red Hat OpenShift AI: Authorization Bypass Through User-Controlled Key | 7.1 | |
| Medium | CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 | |
| Medium | CVE-2026-86332 | Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user | 6.5 | |
| High | CVE-2026-58013 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | 6.5 | |
| High | CVE-2026-58012 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | 6.5 | |
| High | CVE-2026-58010 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | 6.5 | |
| High | CVE-2026-58011 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | 6.5 | |
| Medium | CVE-2026-15588 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | 5.3 | |
| High | CVE-2026-16118 | Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c | 7.1 | |
| Medium | CVE-2026-55653 | Red Hat: Double Free | 4.3 |