KU
Product
Kubernetes
64
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 15Medium 37Low 7
Watch
Add Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1002100 | 5.5 | Jun 2 | In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to… Affected: 1.5.0 through 1.5.9; 1.6.0 through 1.6.14; 1.7.0 through 1.7.17; 1.8.0 through 1.8.15; 1.9.0 through 1.9.5 |
| CVE-2015-7528 | 5.3 | Apr 11 | Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name Affected: through 1.2.0 |
| CVE-2020-8554 | 5.0 | Jan 21 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address Affected: All versions, or not specified |
| CVE-2019-11244 | 5.0 | Apr 22 | In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable… Affected: 1.8.0 through 1.14.1 |
| CVE-2021-25737 | 4.8 | Sep 6 | A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node Affected: 1.16.0 before 1.18.19; 1.19.0 before 1.19.10; 1.20.0 before 1.20.7; 1.21.0 |
| CVE-2020-8552 | 4.3 | Mar 27 | The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API… Affected: through 1.15.9; 1.16.0 through 1.16.6; 1.17.0 through 1.17.2 |
| CVE-2020-8561 | 4.1 | Sep 20 | A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to… Affected: 1.20.11; 1.21.5; 1.22.2 |
| CVE-2020-8562 | 3.1 | Feb 1 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven… Affected: through 1.18.18; 1.19.0 through 1.19.10; 1.20.0 through 1.20.6; 1.21.0 |
| CVE-2021-25740 | 3.1 | Sep 20 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack Affected: All versions, or not specified |
| CVE-2015-7561 | 3.1 | Aug 7 | Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image Affected: All versions, or not specified |
| CVE-2021-25743 | 3.0 | Jan 7 | kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal Affected: through 1.25.0; 1.26.0; 1.26.0; 1.26.0 |
| CVE-2025-4563 | 2.7 | Jun 23 | Nodes can bypass dynamic resource allocation authorization checks Affected: v1.32.0 - v1.32.5; v1.33.0 - v1.33.1 |
| CVE-2024-3177 | 2.7 | Apr 22 | Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin Affected: through 1.27.12; v1.28.0 - v1.28.8; v1.29.0 - v1.29.3 |
| CVE-2018-1002102 | 2.6 | Dec 5 | Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from… Affected: 1.10.0 through 1.13.13; 1.14.0; 1.14.0 |