RH
Product
Red Hat OpenStack Platform 13 (Queens)
by Red Hat · last CVE Oct 29, 2026
32
CVEs
0
On KEV
8.8
Max CVSS
20
New 30D
Severity mix
Critical 0High 10Medium 22Low 0
Watch

Add Red Hat OpenStack Platform 13 (Queens) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93006
New
6.8–Oct 29
Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
Affected: All versions, or not specified
CVE-2026-93008
New
6.8–Oct 29
Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
Affected: All versions, or not specified
CVE-2026-86849
6.5
0%
Oct 14
Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto
Affected: All versions, or not specified
CVE-2026-86856
6.5
0%
Oct 14
Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver
Affected: All versions, or not specified
CVE-2026-86847
6.5
0%
Oct 14
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
Affected: All versions, or not specified
CVE-2026-86846
6.5
0%
Oct 14
Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto
Affected: All versions, or not specified
CVE-2026-86845
6.5
0%
Oct 14
Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
Affected: All versions, or not specified
CVE-2026-86566
6.5
0%
Oct 14
Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)
Affected: All versions, or not specified
CVE-2026-86561
6.5
0%
Oct 14
Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup
Affected: All versions, or not specified
CVE-2021-4472
6.5
0%
Nov 26
Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature
Affected: All versions, or not specified
CVE-2024-2182
6.5
1%
Mar 12
Ovn: insufficient validation of bfd packets may lead to denial of service
Affected: All versions, or not specified
CVE-2026-93683
6.4
0%
Oct 14
Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou
Affected: All versions, or not specified
CVE-2023-1932
6.1
0%
Nov 7
Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
Affected: All versions, or not specified
CVE-2026-34956
5.9
0%
May 5
Openvswitch: open vswitch: denial of service via malformed ftp epasv command
Affected: All versions, or not specified
CVE-2023-1633
5.5
0%
Sep 24
Insecure barbican configuration file leaking credential
Affected: All versions, or not specified
CVE-2026-93007
New
5.3–Oct 29
Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
Affected: All versions, or not specified
CVE-2026-93011
New
5.3–Oct 29
Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms
Affected: All versions, or not specified
CVE-2023-3153
5.3
1%
Oct 4
Service monitor mac flow is not rate limited
Affected: All versions, or not specified
CVE-2024-7319
5.0
0%
Aug 2
Openstack-heat: incomplete fix for cve-2023-1625
Affected: All versions, or not specified
CVE-2023-1625
5.0
1%
Sep 24
Information leak in api
Affected: All versions, or not specified
CVE-2026-93009
New
4.3–Oct 29
Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder
Affected: All versions, or not specified
CVE-2026-93010
New
4.3–Oct 29
Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
Affected: All versions, or not specified
Showing 22