Vulnerabilidades en Kyverno
52 resultadosCVE-2025-46342HIGHKyverno vulnerable to bypass of policy rules that use namespace selectors in match statementsEPSS 0.8%CVE-2026-4789CRITICALCVE-2026-4789EPSS 0.7%CVE-2023-42815LOWDenial of service from malicious image manifest in kyvernoEPSS 0.7%CVE-2023-42814LOWDenial of service from malicious image manifest in kyvernoEPSS 0.7%CVE-2023-42813MEDIUMDenial of service from malicious manifest in kyvernoEPSS 0.7%CVE-2026-23881HIGHKyverno Denial of Service via Context Variable Amplification in Policy EngineEPSS 0.6%CVE-2026-100706CRITICALkyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPathEPSS 0.6%CVE-2026-22039CRITICALKyverno Cross-Namespace Privilege Escalation via Policy apiCallEPSS 0.6%CVE-2024-48921HIGHKyverno's PolicyException objects can be created in any namespace by defaultEPSS 0.6%CVE-2026-41323HIGHKyverno: ServiceAccount token leaked to external servers via apiCall service URLEPSS 0.6%CVE-2025-47281HIGHKyverno's Improper JMESPath Variable Evaluation Leads to Denial of ServiceEPSS 0.6%CVE-2023-34091MEDIUMKyverno resource with a deletionTimestamp may allow policy circumventionEPSS 0.5%CVE-2023-33191MEDIUMkyverno seccomp control can be circumventedEPSS 0.5%CVE-2026-54523CRITICALKyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-systemEPSS 0.5%CVE-2026-100707HIGHKyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded PathEPSS 0.5%CVE-2023-42816MEDIUMDenial of service from malicious signature in kyvernoEPSS 0.5%CVE-2026-122311CRITICALKyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argumentEPSS 0.4%CVE-2026-122315HIGHKyverno before 1.19.2 Image Verification Bypass via Attestation Type PanicEPSS 0.4%CVE-2026-122322HIGHKyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation DecompressionEPSS 0.4%CVE-2026-122304CRITICALKyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context LoaderEPSS 0.4%