Login Request a demo
KU
Vendor
Kubernetes
20 products with CVEs on record
106
CVEs
0
On KEV
2
New 30D
Products
KU
Kubernetes
Kubernetes
9.8
59 CVEs0 on KEV2 new
IN
ingress-nginx
Kubernetes
8.8
15 CVEs0 on KEV0 new
CR
Cri-o
Kubernetes
8.8
10 CVEs0 on KEV0 new
MI
Minikube
Kubernetes
9.8
3 CVEs0 on KEV0 new
JA
Java
Kubernetes
9.1
2 CVEs0 on KEV0 new
NI
Nginx Ingress Controller
Kubernetes
8.8
2 CVEs0 on KEV0 new
SS
Secrets Store Csi Driver
Kubernetes
6.5
2 CVEs0 on KEV0 new
AP
Apiserver
Kubernetes
8.2
1 CVEs0 on KEV0 new
AW
Aws-iam-authenticator
Kubernetes
8.8
1 CVEs0 on KEV0 new
CS
Container Storage Interface Snapshotter
Kubernetes
6.5
1 CVEs0 on KEV0 new
CD
CSI Driver for NFS
Kubernetes
6.5
1 CVEs0 on KEV0 new
CP
Csi Proxy
Kubernetes
8.8
1 CVEs0 on KEV0 new
DA
Dashboard
Kubernetes
7.5
1 CVEs0 on KEV0 new
EX
External-provisioner
Kubernetes
6.5
1 CVEs0 on KEV0 new
EX
External-resizer
Kubernetes
6.5
1 CVEs0 on KEV0 new
EX
External-snapshotter
Kubernetes
6.5
1 CVEs0 on KEV0 new
KU
Kube-apiserver
Kubernetes
8.0
1 CVEs0 on KEV0 new
KU
Kube-state-metrics
Kubernetes
6.5
1 CVEs0 on KEV0 new
KU
kubernetes-client/java
Kubernetes
2.4
1 CVEs0 on KEV0 new
OP
Operations
Kubernetes
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-2270
New
KU
Kubernetes
Kubernetes
5.9
0%
Oct 26StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
CVE-2026-76654
New
KU
Kubernetes
Kubernetes
5.8
0%
Oct 26Subpath symlinking on Windows nodes permits NTLM coercion
CVE-2026-19444
KU
Kubernetes
Kubernetes
6.5
0%
Sep 28Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
CVE-2026-15687
KU
kubernetes-client/java
Kubernetes
2.4
0%
Jul 23Path traversal via non-tar copyDirectoryFromPod
CVE-2026-3864
CD
CSI Driver for NFS
Kubernetes
6.5
1%
Mar 20CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
CVE-2026-4342
IN
ingress-nginx
Kubernetes
8.8
1%
Mar 19ingress-nginx comment-based nginx configuration injection
CVE-2026-3288
IN
ingress-nginx
Kubernetes
8.8
7%
Mar 9ingress-nginx rewrite-target nginx configuration injection
CVE-2025-15566
IN
ingress-nginx
Kubernetes
8.8
1%
Feb 6ingress-nginx auth-proxy-set-headers nginx configuration injection
CVE-2026-24514
IN
ingress-nginx
Kubernetes
6.5
1%
Feb 3ingress-nginx Admission Controller denial of service
CVE-2026-24513
IN
ingress-nginx
Kubernetes
3.1
0%
Feb 3ingress-nginx auth-url protection bypass
CVE-2026-24512
IN
ingress-nginx
Kubernetes
8.8
1%
Feb 3ingress-nginx auth-method nginx configuration injection
CVE-2026-1580
IN
ingress-nginx
Kubernetes
8.8
1%
Feb 3ingress-nginx auth-method nginx configuration injection
CVE-2024-5154
CR
Cri-o
Kubernetes
8.1
1%
Jun 12A flaw was found in cri-o
CVE-2023-5528
KU
Kubernetes
Kubernetes
8.8
4%
Nov 14A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes
CVE-2022-3172
AP
Apiserver
Kubernetes
8.2
2%
Nov 3A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL
CVE-2023-3893
CP
Csi Proxy
Kubernetes
8.8
2%
Nov 3A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on…
CVE-2023-3955
KU
Kubernetes
Kubernetes
8.8
4%
Oct 31A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes
CVE-2023-3676
KU
Kubernetes
Kubernetes
8.8
13%
Oct 31A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes
CVE-2021-25736
KU
Kubernetes
Kubernetes
6.3
1%
Oct 30Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer…
CVE-2023-5044
IN
Ingress-nginx
Kubernetes
8.8
60%
Oct 25Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
CVE-2023-5043
IN
Ingress-nginx
Kubernetes
8.8
3%
Oct 25Ingress nginx annotation injection causes arbitrary command execution
CVE-2022-4886
IN
Ingress-nginx
Kubernetes
6.5
2%
Oct 25Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
CVE-2023-1943
OP
Operations
Kubernetes
8.8
1%
Oct 12Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode
CVE-2022-4318
CR
Cri-o
Kubernetes
7.8
0%
Sep 25A vulnerability was found in cri-o
CVE-2023-1260
KU
Kube-apiserver
Kubernetes
8.0
2%
Sep 24An authentication bypass vulnerability was discovered in kube-apiserver
CVE-2022-3466
CR
Cri-o
Kubernetes
5.3
0%
Sep 15The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively,…
CVE-2023-2728
KU
Kubernetes
Kubernetes
6.5
2%
Jul 3Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers
CVE-2023-2727
KU
Kubernetes
Kubernetes
6.5
1%
Jul 3Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers
CVE-2023-2431
KU
Kubernetes
Kubernetes
5.5
0%
Jun 16A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement
CVE-2023-2878
SE
Secrets-store-csi-driver
Kubernetes
5.5
0%
Jun 7Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs
CVE-2023-1944
MI
Minikube
Kubernetes
7.8
0%
May 24This vulnerability enables ssh access to minikube container using a default password
CVE-2023-1174
MI
Minikube
Kubernetes
9.8
1%
May 24This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container
CVE-2021-25749
KU
Kubernetes
Kubernetes
7.8
0%
May 24Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true
CVE-2021-25748
IN
Ingress-nginx
Kubernetes
6.5
1%
May 24A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the…
CVE-2022-3294
KU
Kubernetes
Kubernetes
8.8
2%
Mar 1Users may have access to secure endpoints in the control plane network
CVE-2022-3162
KU
Kubernetes
Kubernetes
6.5
1%
Mar 1Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization
CVE-2022-2995
CR
Cri-o
Kubernetes
7.1
0%
Sep 19Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct…
CVE-2022-2385
AW
Aws-iam-authenticator
Kubernetes
8.8
1%
Jul 12A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges
CVE-2022-1708
CR
Cri-o
Kubernetes
7.5
3%
Jun 7A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API
CVE-2021-25746
IN
Ingress-nginx
Kubernetes
7.1
1%
May 6A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the…
CVE-2021-25745
IN
Ingress-nginx
Kubernetes
8.1
1%
May 6A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in…
CVE-2022-27652
CR
Cri-o
Kubernetes
5.3
0%
Apr 18A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions
CVE-2022-0811
CR
Cri-o
Kubernetes
8.8
19%
Mar 16A flaw was found in CRI-O in the way it set kernel options for a pod
CVE-2022-0532
CR
Cri-o
Kubernetes
4.2
1%
Feb 9An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier
CVE-2020-8562
KU
Kubernetes
Kubernetes
3.1
1%
Feb 1As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven…
CVE-2021-25743
KU
Kubernetes
Kubernetes
3.0
1%
Jan 7kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal
CVE-2021-25742
IN
Ingress-nginx
Kubernetes
7.1
2%
Oct 29A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster
CVE-2021-25738
JA
Java
Kubernetes
6.7
0%
Oct 11Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution
CVE-2021-25741
KU
Kubernetes
Kubernetes
8.1
8%
Sep 20A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume,…
CVE-2021-25740
KU
Kubernetes
Kubernetes
3.1
2%
Sep 20A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack
CVE-2020-8561
KU
Kubernetes
Kubernetes
4.1
2%
Sep 20A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to…
CVE-2021-25737
KU
Kubernetes
Kubernetes
4.8
1%
Sep 6A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node
CVE-2021-25735
KU
Kubernetes
Kubernetes
6.5
5%
Sep 6A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook
CVE-2020-8570
JA
Java
Kubernetes
9.1
4%
Jan 21Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod…
CVE-2020-8569
CS
Container Storage Interface Snapshotter
Kubernetes
6.5
2%
Jan 21Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing…
CVE-2020-8568
SS
Secrets Store Csi Driver
Kubernetes
6.5
1%
Jan 21Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to…
CVE-2020-8554
KU
Kubernetes
Kubernetes
5.0
9%
Jan 21Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address
CVE-2020-8566
KU
Kubernetes
Kubernetes
5.5
1%
Dec 7In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs
CVE-2020-8565
KU
Kubernetes
Kubernetes
5.5
1%
Dec 7In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files
CVE-2020-8564
KU
Kubernetes
Kubernetes
5.5
0%
Dec 7In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can…