RH
Product
Red Hat Container Native Virtualization 4.22
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Red Hat Container Native Virtualization 4.22 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33186 | 9.1 | Mar 20 | gRPC-Go has an authorization bypass via missing leading slash in :path Affected: All versions, or not specified |
| CVE-2026-13622 | 8.8 | Aug 12 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host Affected: All versions, or not specified |
| CVE-2026-17527 | 7.7 | Jul 27 | Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone Affected: All versions, or not specified |
| CVE-2026-13201 | 7.3 | Jun 24 | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
Showing 5