Kyverno vulnerabilities

Products

• Kyverno 53

Newest

• kyverno Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression CVE-2026-122323 8.7 HighNovember 5, 2026
• kyverno Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression CVE-2026-122322 8.7 HighNovember 5, 2026
• kyverno Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass CVE-2026-122321 8.5 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone CVE-2026-122320 8.3 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic CVE-2026-122319 8.7 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates CVE-2026-122318 7.2 HighNovember 5, 2026
• kyverno Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting CVE-2026-122316 8.4 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic CVE-2026-122315 8.7 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic CVE-2026-122314 8.7 HighNovember 5, 2026
• kyverno Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy CVE-2026-122313 9.4 CriticalNovember 5, 2026
• kyverno Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String CVE-2026-122312 8.3 HighNovember 5, 2026
• kyverno Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument CVE-2026-122311 9.4 CriticalNovember 5, 2026
• kyverno Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath CVE-2026-122310 9.4 CriticalNovember 5, 2026
• kyverno Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost CVE-2026-122309 8.2 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest CVE-2026-122308 8.4 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling CVE-2026-122307 8.3 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching CVE-2026-122306 8.3 HighNovember 5, 2026
• kyverno Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop CVE-2026-122305 8.3 HighNovember 5, 2026
• kyverno Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader CVE-2026-122304 9.4 CriticalNovember 5, 2026
• kyverno Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy CVE-2026-122303 9.4 CriticalNovember 5, 2026
• kyverno Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check CVE-2026-122302 9.3 CriticalNovember 5, 2026
• kyverno Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path CVE-2026-100707 Fix available 8.3 HighSeptember 26, 2026
• kyverno kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath CVE-2026-100706 Fix available 9.4 CriticalSeptember 26, 2026
• kyverno Kyverno before 1.19.1 SSRF via legacy apiCall service executor CVE-2026-100705 Fix available 8.3 HighSeptember 26, 2026
• kyverno Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass CVE-2026-100704 Fix available 8.3 HighSeptember 26, 2026
• kyverno Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib CVE-2026-100703 Fix available 8.3 HighSeptember 26, 2026
• kyverno Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system CVE-2026-54523 Public exploitFix available 9.6 CriticalAugust 26, 2026
• kyverno, kyverno policy-reporter-ui +1 more Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component CVE-2026-44245 Fix available 6.1 MediumMay 6, 2026
• kyverno Kyverno Controller Denial of Service via forEach Mutation Panic CVE-2026-41485 Fix available 7.7 HighApril 24, 2026
• kyverno Kyverno before 1.16.4 Credential Leak via apiCall CVE-2026-84195 Fix available 8.3 HighApril 16, 2026
• kyverno Kyverno: ServiceAccount token leaked to external servers via apiCall service URL CVE-2026-41323 Fix available 8.1 HighApril 16, 2026
• kyverno Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) CVE-2026-41068 Fix available 7.7 HighApril 16, 2026
• kyverno kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token CVE-2026-40868 Fix available 8.1 HighApril 14, 2026
• kyverno Kyverno before 1.16.2 SSRF via APICall Feature CVE-2026-84199 Fix available 6.9 MediumApril 14, 2026
• kyverno Kyverno before 1.18.0 Server-Side Request Forgery via apiCall CVE-2026-84196 Fix available 8.3 HighApril 14, 2026
• kyverno CVE-2026-4789 CVE-2026-4789 Fix available 9.8 CriticalMarch 30, 2026
• kyverno Kyverno Denial of Service via Context Variable Amplification in Policy Engine CVE-2026-23881 Fix available 7.7 HighJanuary 27, 2026
• kyverno Kyverno Cross-Namespace Privilege Escalation via Policy apiCall CVE-2026-22039 Fix available 10.0 CriticalJanuary 27, 2026
• kyverno Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions CVE-2026-84200 Fix available 9.4 CriticalJanuary 6, 2026
• kyverno Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service CVE-2025-47281 Fix available 7.7 HighJuly 22, 2025
• kyverno Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements CVE-2025-46342 Fix available 8.6 HighApril 29, 2025
• kyverno Kyverno before v1.13.4 SSRF via Service Call CVE-2025-15613 Fix available 6.9 MediumApril 15, 2025
• kyverno Kyverno ignores subjectRegExp and IssuerRegExp CVE-2025-29778 Fix available 5.8 MediumMarch 24, 2025
• kyverno Kyverno's PolicyException objects can be created in any namespace by default CVE-2024-48921 Fix available 8.7 HighOctober 29, 2024
• kyverno Attacker can cause Kyverno user to unintentionally consume insecure image CVE-2023-47630 Fix available 7.1 HighNovember 14, 2023
• kyverno Denial of service from malicious manifest in kyverno CVE-2023-42813 Fix available 6.1 MediumNovember 13, 2023
• kyverno Denial of service from malicious image manifest in kyverno CVE-2023-42814 Fix available 3.1 LowNovember 13, 2023
• kyverno Denial of service from malicious image manifest in kyverno CVE-2023-42815 Fix available 3.1 LowNovember 13, 2023
• kyverno Denial of service from malicious signature in kyverno CVE-2023-42816 Fix available 6.1 MediumNovember 13, 2023
• kyverno Kyverno resource with a deletionTimestamp may allow policy circumvention CVE-2023-34091 Fix available 6.5 MediumJune 1, 2023
• Show olderLoading…