KU
Vendor
Kubevirt
20
CVEs
0
On KEV
0
New 30D
Products
KU9.9
Kubevirt
Kubevirt
18 CVEs0 on KEV0 new
CD6.8
Containerized Data Importer
Kubevirt
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13434 | KU Kubevirt Kubevirt | 4.9 | Jun 26 | Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled |
| CVE-2026-13322 | KU Kubevirt Kubevirt | 3.8 | Jun 26 | Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service |
| CVE-2026-13318 | KU Kubevirt Kubevirt | 6.4 | Jun 25 | Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip |
| CVE-2026-13218 | KU Kubevirt Kubevirt | 4.2 | Jun 25 | Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher |
| CVE-2026-13208 | KU Kubevirt Kubevirt | 6.5 | Jun 24 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body |
| CVE-2026-13201 | KU Kubevirt Kubevirt | 7.3 | Jun 24 | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption |
| CVE-2025-64324 | KU Kubevirt Kubevirt | 7.7 | Nov 18 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2025-64437 | KU Kubevirt Kubevirt | 5.0 | Nov 7 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2025-64436 | KU Kubevirt Kubevirt | 5.3 | Nov 7 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2025-64435 | KU Kubevirt Kubevirt | 5.3 | Nov 7 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2025-64434 | KU Kubevirt Kubevirt | 6.3 | Nov 7 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2025-64433 | KU Kubevirt Kubevirt | 6.5 | Nov 7 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2025-64432 | KU Kubevirt Kubevirt | 4.7 | Nov 7 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2024-33394 | KU Kubevirt Kubevirt | 5.9 | May 2 | An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component |
| CVE-2023-26484 | KU Kubevirt Kubevirt | 8.2 | Mar 15 | KubeVirt is a virtual machine management add-on for Kubernetes |
| CVE-2022-1798 | KU Kubevirt Kubevirt | 6.5 | Sep 15 | A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host… |
| CVE-2020-1701 | KU Kubevirt Kubevirt | 6.5 | May 27 | A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler |
| CVE-2020-14316 | KU Kubevirt Kubevirt | 9.9 | Jul 29 | A flaw was found in kubevirt 0.29 and earlier |
| CVE-2019-10175 | CO Containerized-data-importer Kubevirt | 6.5 | Jun 28 | A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has… |
| CVE-2019-3841 | CD Containerized Data Importer Kubevirt | 6.8 | Mar 25 | Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries |