Kubernetes kubelet
7 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-1767 | <=v1.32.2 | This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-9042 | <=v1.29.12 ; v1.30 – v1.30.8 ; v1.31 – v1.31.4 ; … | This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions liste | MEDIUM 5.9 | 1.4 % | ||
| CVE-2025-0426 | 1.32.0 – 1.32.1 ; 1.31.0 – 1.31.5 ; 1.30.0 – 1.30.9 | A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read | MEDIUM 6.2 | 0.4 % | ||
| CVE-2024-10220 | ≤ 1.28.11 ; 1.29.0 – 1.29.6 ; 1.30.0 – 1.30.2 | Arbitrary command execution through gitRepo volume | HIGH 8.1 | 3.0 % | ||
| CVE-2023-5528 | v1.28.0 – v1.28.3 ; v1.27.0 – v1.27.7 ; v1.26.0 – v1.26.10 ; … | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation | HIGH 8.8 | 4.1 % | ||
| CVE-2023-3955 | v1.28.0 ; v1.27.0 – v1.27.4 ; v1.26.0 – v1.26.7 ; … | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | HIGH 8.8 | 4.0 % | ||
| CVE-2023-3676 | v1.28.0 ; v1.27.0 – v1.27.4 ; v1.26.0 – v1.26.7 ; … | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | HIGH 8.8 | 13 % |