Login Request a demo
KU
Vendor
Kubernetes
27 products with CVEs on record
131
CVEs
0
On KEV
2
New 30D
Products
KU
Kubernetes
Kubernetes
9.8
64 CVEs0 on KEV2 new
IN
ingress-nginx
kubernetes
9.8
21 CVEs0 on KEV0 new
CR
Cri-o
Kubernetes
8.8
10 CVEs0 on KEV0 new
KU
kubelet
Kubernetes
8.1
4 CVEs0 on KEV0 new
IB
Image Builder
Kubernetes
9.8
3 CVEs0 on KEV0 new
MI
Minikube
Kubernetes
9.8
3 CVEs0 on KEV0 new
AP
Apiserver
Kubernetes
8.3
2 CVEs0 on KEV0 new
JA
Java
Kubernetes
9.1
2 CVEs0 on KEV0 new
KU
kube-apiserver
Kubernetes
8.0
2 CVEs0 on KEV0 new
NI
Nginx Ingress Controller
Kubernetes
8.8
2 CVEs0 on KEV0 new
SS
Secrets Store Csi Driver
Kubernetes
6.5
2 CVEs0 on KEV0 new
AR
Argo-cd
Kubernetes
6.3
1 CVEs0 on KEV0 new
AW
Aws-iam-authenticator
Kubernetes
8.8
1 CVEs0 on KEV0 new
AZ
azure-file-csi-driver
Kubernetes
6.5
1 CVEs0 on KEV0 new
CS
Container Storage Interface Snapshotter
Kubernetes
6.5
1 CVEs0 on KEV0 new
CD
CSI Driver for NFS
Kubernetes
6.5
1 CVEs0 on KEV0 new
CP
Csi Proxy
Kubernetes
8.8
1 CVEs0 on KEV0 new
DA
Dashboard
Kubernetes
7.5
1 CVEs0 on KEV0 new
DE
Devtron
Kubernetes
8.8
1 CVEs0 on KEV0 new
EX
External-provisioner
Kubernetes
6.5
1 CVEs0 on KEV0 new
EX
External-resizer
Kubernetes
6.5
1 CVEs0 on KEV0 new
EX
External-snapshotter
Kubernetes
6.5
1 CVEs0 on KEV0 new
KU
Kube-state-metrics
Kubernetes
6.5
1 CVEs0 on KEV0 new
KU
kubernetes-client/java
Kubernetes
2.4
1 CVEs0 on KEV0 new
KC
Kubernetes CSharp Client
Kubernetes
6.8
1 CVEs0 on KEV0 new
OP
Operations
Kubernetes
8.8
1 CVEs0 on KEV0 new
SE
secrets-store-sync-controller
Kubernetes
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-2270
New
KU
Kubernetes
Kubernetes
5.9
0%
Oct 26StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
CVE-2026-76654
New
KU
Kubernetes
Kubernetes
5.8
0%
Oct 26Subpath symlinking on Windows nodes permits NTLM coercion
CVE-2026-19444
KU
Kubernetes
Kubernetes
6.5
0%
Sep 28Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
CVE-2026-15687
KU
kubernetes-client/java
Kubernetes
2.4
0%
Jul 23Path traversal via non-tar copyDirectoryFromPod
CVE-2026-3864
CD
CSI Driver for NFS
Kubernetes
6.5
1%
Mar 20CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
CVE-2026-4342
IN
ingress-nginx
Kubernetes
8.8
1%
Mar 19ingress-nginx comment-based nginx configuration injection
CVE-2026-3288
IN
ingress-nginx
Kubernetes
8.8
7%
Mar 9ingress-nginx rewrite-target nginx configuration injection
CVE-2025-15566
IN
ingress-nginx
Kubernetes
8.8
1%
Feb 6ingress-nginx auth-proxy-set-headers nginx configuration injection
CVE-2026-24514
IN
ingress-nginx
Kubernetes
6.5
1%
Feb 3ingress-nginx Admission Controller denial of service
CVE-2026-24513
IN
ingress-nginx
Kubernetes
3.1
0%
Feb 3ingress-nginx auth-url protection bypass
CVE-2026-24512
IN
ingress-nginx
Kubernetes
8.8
1%
Feb 3ingress-nginx auth-method nginx configuration injection
CVE-2026-1580
IN
ingress-nginx
Kubernetes
8.8
1%
Feb 3ingress-nginx auth-method nginx configuration injection
CVE-2025-13281
KU
Kubernetes
Kubernetes
5.8
0%
Dec 14Portworx Half-Blind SSRF in kube-controller-manager
CVE-2025-9708
KC
Kubernetes CSharp Client
Kubernetes
6.8
0%
Sep 16Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks
CVE-2025-7445
SE
secrets-store-sync-controller
Kubernetes
6.5
0%
Sep 5Kubernetes secrets-store-sync-controller discloses service account tokens in logs
CVE-2025-5187
KU
Kubernetes
Kubernetes
6.7
1%
Aug 27Nodes can delete themselves by adding an OwnerReference
CVE-2025-7342
IB
Image Builder
Kubernetes
7.5
0%
Aug 17VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override
CVE-2025-4563
KU
Kubernetes
Kubernetes
2.7
1%
Jun 23Nodes can bypass dynamic resource allocation authorization checks
CVE-2025-24514
IN
ingress-nginx
kubernetes
8.8
37%
Mar 24ingress-nginx controller - configuration injection via unsanitized auth-url annotation
CVE-2025-24513
IN
ingress-nginx
kubernetes
4.8
3%
Mar 24ingress-nginx controller - auth secret file path traversal vulnerability
CVE-2025-1098
IN
ingress-nginx
kubernetes
8.8
86%
Mar 24ingress-nginx controller - configuration injection via unsanitized mirror annotations
CVE-2025-1097
IN
ingress-nginx
kubernetes
8.8
37%
Mar 24ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
CVE-2025-1974
IN
ingress-nginx
kubernetes
9.8
99%
Mar 24ingress-nginx admission controller RCE escalation
CVE-2024-7598
KU
kube-apiserver
Kubernetes
3.1
0%
Mar 20Network restriction bypass via race condition during namespace termination
CVE-2025-1767
KU
Kubelet
Kubernetes
6.5
1%
Mar 13This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node
CVE-2024-9042
KU
Kubelet
Kubernetes
5.9
1%
Mar 13This CVE affects only Windows worker nodes
CVE-2025-0426
KU
kubelet
Kubernetes
6.2
0%
Feb 13A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node…
CVE-2024-10220
KU
kubelet
Kubernetes
8.1
3%
Nov 22Arbitrary command execution through gitRepo volume
CVE-2024-45794
DE
Devtron
Kubernetes
8.8
1%
Nov 7SQL Injection in CreateUser API in devtron
CVE-2023-32192
AP
Apiserver
Kubernetes
8.3
0%
Oct 16Rancher API Server Cross-site Scripting Vulnerability
CVE-2024-9594
IB
Image Builder
Kubernetes
8.1
2%
Oct 15VM images built with Image Builder with some providers use default credentials during builds
CVE-2024-9486
IB
Image Builder
Kubernetes
9.8
2%
Oct 15VM images built with Image Builder and Proxmox provider use default credentials
CVE-2024-7646
IN
ingress-nginx
Kubernetes
8.8
27%
Aug 16A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass…
CVE-2024-5321
KU
Kubernetes
Kubernetes
6.1
0%
Jul 18Incorrect permissions on Windows containers logs
CVE-2024-5154
CR
Cri-o
Kubernetes
8.1
1%
Jun 12Cri-o: malicious container can create symlink on host
CVE-2024-3744
AZ
azure-file-csi-driver
Kubernetes
6.5
0%
May 15Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs
CVE-2024-3177
KU
Kubernetes
Kubernetes
2.7
2%
Apr 22Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
CVE-2024-31990
AR
Argo-cd
Kubernetes
6.3
0%
Apr 15Argo CD' API server does not enforce project sourceNamespaces
CVE-2023-5528
KU
Kubernetes
Kubernetes
8.8
4%
Nov 14A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes
CVE-2022-3172
AP
Apiserver
Kubernetes
8.2
2%
Nov 3A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL
CVE-2023-3893
CP
Csi Proxy
Kubernetes
8.8
2%
Nov 3A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on…
CVE-2023-3955
KU
Kubernetes
Kubernetes
8.8
4%
Oct 31A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes
CVE-2023-3676
KU
Kubernetes
Kubernetes
8.8
13%
Oct 31A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes
CVE-2021-25736
KU
Kubernetes
Kubernetes
6.3
1%
Oct 30Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer…
CVE-2023-5044
IN
Ingress-nginx
Kubernetes
8.8
60%
Oct 25Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
CVE-2023-5043
IN
Ingress-nginx
Kubernetes
8.8
3%
Oct 25Ingress nginx annotation injection causes arbitrary command execution
CVE-2022-4886
IN
Ingress-nginx
Kubernetes
6.5
2%
Oct 25Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
CVE-2023-1943
OP
Operations
Kubernetes
8.8
1%
Oct 12Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode
CVE-2022-4318
CR
Cri-o
Kubernetes
7.8
0%
Sep 25A vulnerability was found in cri-o
CVE-2023-1260
KU
Kube-apiserver
Kubernetes
8.0
2%
Sep 24An authentication bypass vulnerability was discovered in kube-apiserver
CVE-2022-3466
CR
Cri-o
Kubernetes
5.3
0%
Sep 15The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively,…
CVE-2023-2728
KU
Kubernetes
Kubernetes
6.5
2%
Jul 3Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers
CVE-2023-2727
KU
Kubernetes
Kubernetes
6.5
1%
Jul 3Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers
CVE-2023-2431
KU
Kubernetes
Kubernetes
5.5
0%
Jun 16A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement
CVE-2023-2878
SE
Secrets-store-csi-driver
Kubernetes
5.5
0%
Jun 7Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs
CVE-2023-1944
MI
Minikube
Kubernetes
7.8
0%
May 24This vulnerability enables ssh access to minikube container using a default password
CVE-2023-1174
MI
Minikube
Kubernetes
9.8
1%
May 24This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container
CVE-2021-25749
KU
Kubernetes
Kubernetes
7.8
0%
May 24Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true
CVE-2021-25748
IN
Ingress-nginx
Kubernetes
6.5
1%
May 24A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the…
CVE-2022-3294
KU
Kubernetes
Kubernetes
8.8
2%
Mar 1Users may have access to secure endpoints in the control plane network