Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,271All CVEsplus 19,140 rejected
- 466Last 24 hours2,763 in the last 7 days
- 16,921Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 5 | 3 | 0 | 13 | 105 |
| 2025 | 1 | 4 | 8 | 2 | 0 | 15 | 92 |
| 2024 | 1 | 2 | 3 | 1 | 0 | 7 | 77 |
| 2023 | 1 | 11 | 7 | 1 | 0 | 20 | 70 |
| 2022 | 0 | 3 | 0 | 2 | 0 | 5 | 50 |
| 2021 | 1 | 2 | 7 | 2 | 0 | 12 | 45 |
| 2020 | 0 | 0 | 15 | 0 | 0 | 15 | 33 |
| 2019 | 0 | 1 | 7 | 3 | 0 | 11 | 18 |
| 2018 | 1 | 3 | 2 | 0 | 0 | 6 | 7 |
| 2017 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-116472 | ingress-nginx mirror-target self-DOSKubernetes · ingress-nginx | Low2.7 |
| CVE-2026-2270 | StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationKubernetes · Kubernetes | Medium5.9 |
| CVE-2026-76654 | Subpath symlinking on Windows nodes permits NTLM coercionKubernetes · Kubernetes | Medium5.8 |
| CVE-2026-19444 | Kubernetes kubectl cp path traversal on Windows allows arbitrary file writesKubernetes · Kubernetes | Medium6.5 |
| CVE-2026-15687 | Path traversal via non-tar copyDirectoryFromPodKubernetes · kubernetes-client/java | Low2.7 |
| CVE-2026-3864 | CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS serverKubernetes · CSI Driver for NFS | Medium6.5 |
| CVE-2026-4342 | ingress-nginx comment-based nginx configuration injectionKubernetes · ingress-nginx | High8.8 |
| CVE-2026-3288 | ingress-nginx rewrite-target nginx configuration injectionKubernetes · ingress-nginx | High8.8 |
| CVE-2025-15566 | ingress-nginx auth-proxy-set-headers nginx configuration injectionKubernetes · ingress-nginx | High8.8 |
| CVE-2026-24514 | ingress-nginx Admission Controller denial of serviceKubernetes · ingress-nginx | Medium6.5 |
| CVE-2026-24513 | ingress-nginx auth-url protection bypassKubernetes · ingress-nginx | Low3.1 |
| CVE-2026-24512 | ingress-nginx auth-method nginx configuration injectionKubernetes · ingress-nginx | High8.8 |
| CVE-2026-1580 | ingress-nginx auth-method nginx configuration injectionKubernetes · ingress-nginx | High8.8 |
| CVE-2025-13281 | Portworx Half-Blind SSRF in kube-controller-managerKubernetes · Kubernetes | Medium5.8 |
| CVE-2025-9708 | Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacksKubernetes · Kubernetes CSharp Client | Medium6.8 |
| CVE-2025-7445 | Kubernetes secrets-store-sync-controller discloses service account tokens in logsKubernetes · secrets-store-sync-controller | Medium6.5 |
| CVE-2025-5187 | Nodes can delete themselves by adding an OwnerReferenceKubernetes · Kubernetes | Medium6.7 |
| CVE-2025-7342 | VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not overrideKubernetes · Image Builder | High7.5 |
| CVE-2025-4563 | Nodes can bypass dynamic resource allocation authorization checksKubernetes · Kubernetes | Low2.7 |
| CVE-2025-24514 | ingress-nginx controller - configuration injection via unsanitized auth-url annotationkubernetes · ingress-nginx | High8.8 |
| CVE-2025-24513 | ingress-nginx controller - auth secret file path traversal vulnerabilitykubernetes · ingress-nginx | Medium4.8 |
| CVE-2025-1098 | ingress-nginx controller - configuration injection via unsanitized mirror annotationskubernetes · ingress-nginx | High8.8 |
| CVE-2025-1097 | ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationkubernetes · ingress-nginx | High8.8 |
| CVE-2025-1974 | ingress-nginx admission controller RCE escalationkubernetes · ingress-nginx | Critical9.8 |
| CVE-2024-7598 | Network restriction bypass via race condition during namespace terminationKubernetes · kube-apiserver | Low3.1 |
| CVE-2025-1767 | This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the…Kubernetes · Kubelet | Medium6.5 |
| CVE-2024-9042 | This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.Kubernetes · Kubelet | Medium5.9 |
| CVE-2025-0426 | A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint…Kubernetes · kubelet | Medium6.2 |
| CVE-2024-10220 | Arbitrary command execution through gitRepo volumeKubernetes · kubelet | High8.1 |
| CVE-2024-9594 | VM images built with Image Builder with some providers use default credentials during buildsKubernetes · Image Builder | Medium6.3 |
| CVE-2024-9486 | VM images built with Image Builder and Proxmox provider use default credentialsKubernetes · Image Builder | Critical9.8 |
| CVE-2024-7646 | A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API…Kubernetes · ingress-nginx | High8.8 |
| CVE-2024-5321 | Incorrect permissions on Windows containers logsKubernetes · Kubernetes | Medium6.1 |
| CVE-2024-3744 | Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logsKubernetes · azure-file-csi-driver | Medium6.5 |
| CVE-2024-3177 | Bypassing mountable secrets policy imposed by the ServiceAccount admission pluginKubernetes · Kubernetes | Low2.7 |
| CVE-2023-5528 | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalationKubernetes · kubelet | High7.2 |
| CVE-2022-3172 | Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)Kubernetes · kube-apiserver | Medium5.1 |
| CVE-2023-3893 | Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalationKubernetes · csi-proxy | High8.8 |
| CVE-2023-3955 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationKubernetes · kubelet | High8.8 |
| CVE-2023-3676 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationKubernetes · kubelet | High8.8 |
| CVE-2021-25736 | Windows kube-proxy LoadBalancer contentionKubernetes · Kubernetes | Medium5.8 |
| CVE-2023-5044 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotationKubernetes · ingress-nginx | High7.6 |
| CVE-2023-5043 | Ingress nginx annotation injection causes arbitrary command executionKubernetes · ingress-nginx | High7.6 |
| CVE-2022-4886 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directiveKubernetes · ingress-nginx | High8.8 |
| CVE-2023-1943 | Privilege Escalation in kOps using GCE/GCP Provider in Gossip ModeKubernetes · kops | High8.0 |
| CVE-2023-2728 | Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission pluginKubernetes · Kubernetes | Medium6.5 |
| CVE-2023-2727 | Bypassing policies imposed by the ImagePolicyWebhook admission pluginKubernetes · Kubernetes | Medium6.5 |
| CVE-2023-2431 | Bypass of seccomp profile enforcementKubernetes · Kubernetes | Low3.4 |
| CVE-2023-2878 | Kubernetes secrets-store-csi-driver discloses service account tokens in logsKubernetes · secrets-store-csi-driver | Medium6.5 |
| CVE-2023-1944 | [minikube] ssh server with default passwordKubernetes · minikube | High8.4 |