KU
Product
Kubernetes
59
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 15Medium 34Low 5
Watch
Add Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5528 | 8.8 | Nov 14 | A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes Affected: 1.8.0 before 1.25.16; 1.26.0 before 1.26.11; 1.27.0 before 1.27.8; 1.28.0 before 1.28.4 |
| CVE-2023-3955 | 8.8 | Oct 31 | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes Affected: before 1.24.17; 1.25.0 before 1.25.13; 1.26.0 before 1.26.8; 1.27.0 before 1.27.5; 1.28.0 before 1.28.1 |
| CVE-2023-3676 | 8.8 | Oct 31 | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes Affected: before 1.24.17; 1.25.0 before 1.25.13; 1.26.0 before 1.26.8; 1.27.0 before 1.27.5; 1.28.0 before 1.28.1 |
| CVE-2022-3294 | 8.8 | Mar 1 | Users may have access to secure endpoints in the control plane network Affected: before 1.22.16; 1.23.0 before 1.23.14; 1.24.0 before 1.24.8; 1.25.0 before 1.25.4 |
| CVE-2020-8558 | 8.8 | Jul 27 | The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP… Affected: 1.1.0 through 1.16.10; 1.17.0 through 1.17.6; 1.18.0 through 1.18.3 |
| CVE-2019-11248 | 8.2 | Aug 29 | The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port Affected: before 1.12.10; 1.13.0; 1.13.0; 1.13.0; 1.13.0; 1.13.0; +34 more |
| CVE-2021-25741 | 8.1 | Sep 20 | A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume,… Affected: through 1.19.14; 1.20.0 through 1.20.10; 1.21.0 through 1.21.4; 1.22.0 through 1.22.1 |
| CVE-2019-11247 | 8.1 | Aug 29 | The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced Affected: 1.7.0 through 1.12.10; 1.13.0 before 1.13.9; 1.14.0 before 1.14.5; 1.15.0 before 1.15.2; 1.12.11 |
| CVE-2019-11243 | 8.1 | Apr 22 | In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token,… Affected: 1.12.0 through 1.12.4; 1.13.0 |
| CVE-2016-7075 | 8.1 | Sep 10 | It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields Affected: All versions, or not specified |
| CVE-2021-25749 | 7.8 | May 24 | Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true Affected: 1.20.0 through 1.21.0; 1.22.0 before 1.22.14; 1.23.0 before 1.23.11; 1.24.0 before 1.24.5 |
| CVE-2019-11245 | 7.8 | Aug 29 | In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously… Affected: 1.13.6; 1.14.2 |
| CVE-2016-1905 | 7.7 | Feb 3 | The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object Affected: All versions, or not specified |
| CVE-2019-11253 | 7.5 | Oct 17 | Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send… Affected: 1.1.0 through 1.12.10; 1.13.0 before 1.13.12; 1.14.0 before 1.14.8; 1.15.0 before 1.15.5; 1.16.0 before 1.16.2 |
| CVE-2019-9946 | 7.5 | Apr 2 | Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes Affected: before 1.11.9; 1.12.0 before 1.12.7; 1.13.0 before 1.13.5; 1.13.6; 1.14.0; 1.14.0; +6 more |
Showing 15