CVE Tools
Track your stack

Kubernetes

73 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Kubernetes, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Kubernetes CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Kubernetes CVEs per month
MonthCVEs
2024-120
2025-010
2025-021
2025-032
2025-040
2025-050
2025-061
2025-070
2025-081
2025-091
2025-101
2025-110
2025-121
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-091
2026-102
2026-110

Severity

How the 73 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical45%
  • High1825%
  • Medium4258%
  • Low912%

Latest CVEs

The 15 most recently published vulnerabilities affecting Kubernetes.

  1. CVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation5.9
  2. CVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercion5.8
  3. CVE-2026-19444Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes6.5
  4. CVE-2025-13281Portworx Half-Blind SSRF in kube-controller-manager5.8
  5. CVE-2025-57870BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.10.0
  6. CVE-2025-9708Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks6.8
  7. CVE-2025-5187Nodes can delete themselves by adding an OwnerReference6.7
  8. CVE-2025-4563Nodes can bypass dynamic resource allocation authorization checks2.7
  9. CVE-2025-1767This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been d...6.5
  10. CVE-2024-9042This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.5.9
  11. CVE-2025-0426A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by...6.2
  12. CVE-2024-10220Arbitrary command execution through gitRepo volume8.1
  13. CVE-2024-5321Incorrect permissions on Windows containers logs6.1
  14. CVE-2024-5037Openshift/telemeter: iss check during jwt authentication can be bypassed7.5
  15. CVE-2024-3177Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin2.7

Product grouping is registry-driven, with AI assist and human review. How it works