Product by Red Hat
Red Hat Openshift Virtualization 4
27 known vulnerabilities in Red Hat Openshift Virtualization 4 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| High | CVE-2026-92982 | Red Hat Ansible Automation Platform 2.6: Improper Neutralization of Special Elements Used in a Template Engine | 8.5 | |
| High | CVE-2024-3727 | Containers/image: digest type does not guarantee valid type | 8.3 | |
| High | CVE-2026-17527 | Red Hat: Authorization Bypass Through User-Controlled Key | 7.7 | |
| High | CVE-2026-9804 | Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read | 7.7 | |
| Medium | CVE-2026-102623 | Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume | 6.5 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| High | CVE-2024-4467 | Qemu-kvm: 'qemu-img info' leads to host file read/write | 7.8 | |
| High | CVE-2025-14459 | Virt-cdi-controller: unauthorized pvc cloning via dataimportcron | 8.5 | |
| High | CVE-2026-13325 | Red Hat OpenShift Virtualization 4: Missing Authentication for Critical Function | 8.5 | |
| Medium | CVE-2026-79705 | Red Hat: Path Traversal | 4.5 | |
| Medium | CVE-2024-31420 | Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes | 6.5 | |
| High | CVE-2023-3089 | Ocp & fips mode | 7.0 | |
| Medium | CVE-2026-13318 | Red Hat OpenShift Virtualization 4: Server-Side Request Forgery (SSRF) | 6.4 | |
| Medium | CVE-2026-13208 | Red Hat OpenShift Virtualization 4: Improper Authentication | 6.5 | |
| Medium | CVE-2026-19730 | podman quadlet install --replace does not fully replace the old file | 4.2 | |
| Medium | CVE-2026-79699 | Red Hat: Link Following | 4.4 | |
| Medium | CVE-2025-14525 | Kubevirt: kubevirt: vm administration denial of service via guest agent | 6.4 | |
| Medium | CVE-2026-13434 | Red Hat OpenShift Virtualization 4: Improper Input Validation | 4.9 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 | |
| Medium | CVE-2025-57848 | Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions | 6.4 | |
| Medium | CVE-2025-7195 | Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd | 6.4 | |
| Medium | CVE-2026-6383 | Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation | 5.4 | |
| Medium | CVE-2026-13218 | Red Hat OpenShift Virtualization 4: UNIX Symbolic Link (Symlink) Following | 4.2 | |
| Low | CVE-2026-13322 | Red Hat OpenShift Virtualization 4: Allocation of Resources Without Limits or Throttling | 3.8 |