51 entries matching kubernetes — updated 2026-11-03 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-120091 | Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Servic | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-120306 | Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on t | CRITICAL | 9.9 | 30%ile | NVD | 2026-11-01 |
| CVE-2026-120307 | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's | CRITICAL | 9.9 | 42%ile | NVD | 2026-11-01 |
| CVE-2026-62284 | OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfi | HIGH | 8.6 | 43%ile | NVD | 2026-10-30 |
| CVE-2026-119572 | Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX pr | HIGH | 7.0 | 8%ile | NVD | 2026-10-30 |
| CVE-2026-63121 | Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versions | MEDIUM | 6.3 | 9%ile | NVD | 2026-10-30 |
| CVE-2026-119573 | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cr | LOW | 2.1 | 20%ile | NVD | 2026-10-30 |
| CVE-2026-119115 | Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) | HIGH | 8.4 | 6%ile | NVD | 2026-10-29 |
| CVE-2026-118760 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1 | MEDIUM | 6.5 | 29%ile | NVD | 2026-10-29 |
| CVE-2026-103506 | An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required | HIGH | 8.9 | 19%ile | NVD | 2026-10-28 |
| CVE-2026-59185 | identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on ` | HIGH | 8.5 | 25%ile | NVD | 2026-10-28 |
| CVE-2026-83938 | Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-78661 | Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net | HIGH | 7.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-78659 | HTTP/2 server memory exhaustion due to Trailer headers in net/http | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-78660 | HTTP/2 transport accepts malformed framing-related headers in net/http | HIGH | 7.5 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-78669 | Excessive CPU consumption from repeated initial window changes in net/http | HIGH | 7.5 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-97032 | HTTP/2 server crash due to HPACK encoder race in net/http | HIGH | 7.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-2270 | StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation | MEDIUM | 5.9 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-61801 | github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-56855 | Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh | HIGH | 7.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-78662 | Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh | HIGH | 7.5 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-19444 | Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-50516 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 9.4 | 58%ile | Microsoft | 2026-08-11 |
| CVE-2026-73499 | etcd: Watch API authorization bypass via open-ended range requests | UNKNOWN | — | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-73500 | etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-56163 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | UNKNOWN | — | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-32193 | Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-10722 | cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow | LOW | 3.3 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-39821 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | CRITICAL | 10.0 | 79%ile | Microsoft | 2026-05-12 |
| CVE-2026-39830 | Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-39834 | Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh | CRITICAL | 9.1 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-33814 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | HIGH | 7.5 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-39829 | Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh | HIGH | 7.5 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-46597 | Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh | HIGH | 7.5 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-25680 | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-39827 | Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-39828 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh | MEDIUM | 6.3 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-25681 | Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-27136 | Invoking duplicate attributes can cause XSS in golang.org/x/net/html | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-42502 | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-42506 | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | MEDIUM | 6.1 | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-39835 | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-39824 | Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows | LOW | 3.3 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2025-65637 | A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line pa | MEDIUM | 5.9 | 50%ile | Microsoft | 2025-12-09 |
| CVE-2025-13281 | Portworx Half-Blind SSRF in kube-controller-manager | MEDIUM | 5.8 | 33%ile | Microsoft | 2025-12-09 |
| CVE-2025-52881 | runc: LSM labels can be bypassed with malicious config using dummy procfs files | HIGH | 7.3 | 57%ile | Microsoft | 2025-11-11 |
| CVE-2025-64432 | KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer | MEDIUM | 4.7 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-31133 | runc container escape via "masked path" abuse due to mount race conditions | UNKNOWN | — | 69%ile | Microsoft | 2025-11-11 |
| CVE-2025-52565 | container escape due to /dev/console mount and related races | UNKNOWN | — | 57%ile | Microsoft | 2025-11-11 |
| CVE-2025-47291 | containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. | HIGH | 7.5 | 22%ile | Microsoft | 2025-05-13 |
| CVE-2024-0132 | NVIDIA: CVE-2024-0132 Container Toolkit 1.16.1 and Earlier Time-of-check Time-of Use Vulnerability | HIGH | 8.3 | 99%ile | Microsoft | 2024-10-08 |