KU
Product
kubelet
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add kubelet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5528 | 8.8 | Nov 14 | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation Affected: v1.28.0 through v1.28.3; v1.27.0 through v1.27.7; v1.26.0 through v1.26.10; through v1.25.15 |
| CVE-2023-3955 | 8.8 | Oct 31 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation Affected: v1.28.0; v1.27.0 through v1.27.4; v1.26.0 through v1.26.7; v1.25.0 through v1.25.12; through v1.24.16 |
| CVE-2023-3676 | 8.8 | Oct 31 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation Affected: v1.28.0; v1.27.0 through v1.27.4; v1.26.0 through v1.26.7; v1.25.0 through v1.25.12; through v1.24.16 |
| CVE-2024-10220 | 8.1 | Nov 22 | Arbitrary command execution through gitRepo volume Affected: through 1.28.11; 1.29.0 through 1.29.6; 1.30.0 through 1.30.2 |
| CVE-2025-1767 | 6.5 | Mar 13 | This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node Affected: <=v1.32.2 |
| CVE-2025-0426 | 6.2 | Feb 13 | A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node… Affected: 1.32.0 through 1.32.1; 1.31.0 through 1.31.5; 1.30.0 through 1.30.9 |
| CVE-2024-9042 | 5.9 | Mar 13 | This CVE affects only Windows worker nodes Affected: <=v1.29.12; v1.30 through v1.30.8; v1.31 through v1.31.4; v1.32 through v1.32.0 |
Showing 7