Vendor
Kubernetes
126 known vulnerabilities in products by Kubernetes, 0 of them actively exploited (CISA KEV).
Key figures
126
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-1974 | ingress-nginx admission controller RCE escalation | 9.8 | |
| High | CVE-2025-1098 | ingress-nginx controller - configuration injection via unsanitized mirror annotations | 8.8 | |
| High | CVE-2025-24514 | ingress-nginx controller - configuration injection via unsanitized auth-url annotation | 8.8 | |
| High | CVE-2025-1097 | ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation | 8.8 | |
| High | CVE-2026-3288 | ingress-nginx rewrite-target nginx configuration injection | 8.8 | |
| Critical | CVE-2018-1002105 | Kubernetes: security vulnerability | 9.8 | |
| High | CVE-2024-7646 | Kubernetes Ingress-nginx: Improper Input Validation | 8.8 | |
| High | CVE-2023-3676 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | |
| High | CVE-2022-0811 | CRI-O: Code Injection | 8.8 | |
| High | CVE-2023-5044 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation | 7.6 | |
| Critical | CVE-2017-1002101 | Kubernetes: security vulnerability | 8.8 | |
| Critical | CVE-2016-1906 | Kubernetes: Privilege Escalation | 9.8 | |
| High | CVE-2018-18264 | Kubernetes Dashboard: Authentication Bypass | 7.5 | |
| High | CVE-2021-25741 | Symlink Exchange Can Allow Host Filesystem Access | 8.8 | |
| High | CVE-2019-11253 | Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack | 7.5 | |
| High | CVE-2023-3955 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | |
| High | CVE-2019-11248 | Kubernetes kubelet exposes /debug/pprof info on healthz port | 6.5 | |
| Critical | CVE-2024-9486 | VM images built with Image Builder and Proxmox provider use default credentials | 9.8 | |
| Critical | CVE-2020-8570 | Kubernetes Java client libraries unvalidated path traversal in Copy implementation | 9.1 | |
| Critical | CVE-2017-1000056 | Kubernetes: Privilege Escalation | 9.8 | |
| High | CVE-2024-10220 | Arbitrary command execution through gitRepo volume | 8.1 | |
| Medium | CVE-2019-1002100 | Kubernetes: Denial of Service | 6.5 | |
| Medium | CVE-2019-1002101 | kubectl cp path traversal | 6.4 | |
| High | CVE-2023-5528 | Kubernetes Kubelet: Improper Input Validation | 7.2 | |
| High | CVE-2023-3893 | Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation | 8.8 |
Products
| Kubernetes | 64 | 0 |
| Kubernetes ingress-nginx | 21 | 0 |
| CRI-O | 10 | 0 |
| Kubernetes Kubelet | 7 | 0 |
| Kubernetes Ingress-nginx | 4 | 0 |
| Image Builder | 3 | 0 |
| Kube-apiserver | 3 | 0 |
| Kubernetes Minikube | 3 | 0 |