Vulnerabilidades en Kyverno
26 resultadosAnálisis Vexday
Kyverno apresenta uma vulnerabilidade crítica registrada na base, mas sem evidência atual de exploração em ataques ativos (KEV negativo). A vulnerabilidade não é recente, sendo anterior aos últimos 90 dias, o que sugere risco estabilizado; no entanto, a classificação crítica exige atenção contínua ao patching.
CVE-2025-46342HIGHKyverno vulnerable to bypass of policy rules that use namespace selectors in match statementsEPSS 0.7%CVE-2026-4789CRITICALCVE-2026-4789EPSS 0.7%CVE-2023-42814LOWDenial of service from malicious image manifest in kyvernoEPSS 0.7%CVE-2023-42815LOWDenial of service from malicious image manifest in kyvernoEPSS 0.7%CVE-2023-42813MEDIUMDenial of service from malicious manifest in kyvernoEPSS 0.7%CVE-2024-48921HIGHKyverno's PolicyException objects can be created in any namespace by defaultEPSS 0.6%CVE-2026-41323HIGHKyverno: ServiceAccount token leaked to external servers via apiCall service URLEPSS 0.6%CVE-2026-23881HIGHKyverno Denial of Service via Context Variable Amplification in Policy EngineEPSS 0.6%CVE-2026-22039CRITICALKyverno Cross-Namespace Privilege Escalation via Policy apiCallEPSS 0.5%CVE-2023-34091MEDIUMKyverno resource with a deletionTimestamp may allow policy circumventionEPSS 0.5%CVE-2025-47281HIGHKyverno's Improper JMESPath Variable Evaluation Leads to Denial of ServiceEPSS 0.5%CVE-2023-33191MEDIUMkyverno seccomp control can be circumventedEPSS 0.5%CVE-2023-42816MEDIUMDenial of service from malicious signature in kyvernoEPSS 0.5%CVE-2026-54523CRITICALKyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-systemEPSS 0.4%CVE-2026-41485HIGHKyverno Controller Denial of Service via forEach Mutation PanicEPSS 0.4%CVE-2025-29778MEDIUMKyverno ignores subjectRegExp and IssuerRegExpEPSS 0.3%CVE-2026-40868HIGHkyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount tokenEPSS 0.3%CVE-2026-84195HIGHKyverno before 1.16.4 Credential Leak via apiCallEPSS 0.3%CVE-2026-41068HIGHKyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix)EPSS 0.3%CVE-2025-15613MEDIUMKyverno before v1.13.4 SSRF via Service CallEPSS 0.3%