Kubernetes vulnerabilitiesNone on the known-exploited list.
Kubernetes has 94 published vulnerabilities across 20 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Kubernetes, with 57. If you run Kubernetes software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Kubernetes products have the most vulnerabilities?
Kubernetes leads with 57 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Kubernetes vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Kubernetes's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Kubernetes flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 87%CVE-2018-1002105Critical
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection...
- 75%CVE-2019-11248High
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port.
- 70%CVE-2018-18264High
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.
- 57%CVE-2023-5044High
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
- 19%CVE-2022-0811High
A flaw was found in CRI-O in the way it set kernel options for a pod.
- 17%CVE-2019-1002100Medium
In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g.
- 13%CVE-2023-3676High
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes.
- 13%CVE-2017-1002101Critical
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions)...
- 13%CVE-2019-1002101Medium
The kubectl cp command allows copying files between containers and the user machine.
All Kubernetes products we track.
17 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Kuberneteskubernetes57 vulnerabilities419 versions
- Cri-Ocri-o10 vulnerabilities190 versions
- Ingress-Nginxingress-nginx8 vulnerabilities119 versions
- Minikubeminikube3 vulnerabilities115 versions
- Javajava2 vulnerabilities23 versions
- Apiserverapiserver1 vulnerability11 versions
- Aws-IAM-Authenticatoraws-iam-authenticator1 vulnerability14 versions
- Container Storage Interface Snapshottercontainer_storage_interface_snapshotter1 vulnerability21 versions
- Csi Proxycsi_proxy1 vulnerability11 versions
- External-Provisionerexternal-provisioner1 vulnerability21 versions
- External-Resizerexternal-resizer1 vulnerability4 versions
- External-Snapshotterexternal-snapshotter1 vulnerability13 versions
- Kube-State-Metricskube-state-metrics1 vulnerability19 versions
- Nginx Ingress Controllernginx_ingress_controller1 vulnerability26 versions
- Operationsoperations1 vulnerability95 versions
- Secrets Store Csi Driversecrets_store_csi_driver1 vulnerability19 versions
- Secrets-Store-Csi-Driversecrets-store-csi-driver1 vulnerability40 versions
This directory lists the 17 Kubernetes products with at least one tracked version, of 20 in our catalogue.
Running Kubernetes? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
- Matched to
- Kubernetes on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 94 published vulnerabilities across 20 products and 1,160 versions from Kubernetes.
None of Kubernetes's vulnerabilities is on the list of flaws known to be exploited today.
Kubernetes, with 57 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Kubernetes products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.