Most recent entries from all

bdu:2023-03213

2026-10-02T14:05:03.151759+00:00

bdu:2023-03213

certfr-2026-avi-0249 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

2026-10-02T14:05:03.151803+00:00

certfr-2026-avi-0249

EUVD-2026-216356

2026-10-02T14:05:03.151822+00:00

EUVD-2026-216356

fkie_cve-2023-2727

2026-10-02T14:05:03.151835+00:00

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

GHSA-qc2g-gmh6-95p4 — kube-apiserver vulnerable to policy bypass

2026-10-02T14:05:03.151863+00:00

Affected: Go: k8s.io/kubernetes

gsd-2023-2727

2026-10-02T14:05:03.151889+00:00

gsd-2023-2727

OESA-2023-1413 — kubernetes security update

2026-10-02T14:05:03.151901+00:00

Affected: openEuler:20.03-LTS-SP3: kubernetes

Container cluster management.

Security Fix(es):

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions sharing the same API group 2. Users have cluster-wide list or watch authorization on one of those custom resources. 3. The same users are not authorized to read another custom resource in the same API group.(CVE-2022-3162)

Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server's private network.(CVE-2022-3294)

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined…

openSUSE-SU-2024:13003-1 — kubernetes1.23-apiserver-1.23.17-4.1 on GA media

2026-10-02T14:05:03.151944+00:00

kubernetes1.23-apiserver-1.23.17-4.1 on GA media

RHSA-2023:5008 — Red Hat Security Advisory: Red Hat build of MicroShift 4.14.0 security update

2026-10-02T14:05:03.151963+00:00

kube-apiserver: PrivEsc kube-apiserver: Bypassing policies imposed by the ImagePolicyWebhook admission plugin kube-apiserver: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin golang: html/template: improper handling of HTML-like comments within script contexts golang: html/template: improper handling of special tags within script contexts golang: crypto/tls: panic when processing post-handshake message on QUIC connections golang: crypto/tls: lack of a limit on buffered post-handshake

SUSE-SU-2023:2543-1 — Security update for kubernetes1.23

2026-10-02T14:05:03.151991+00:00

Security update for kubernetes1.23

Withdrawn: UBUNTU-CVE-2023-2727

2026-10-02T14:05:03.152006+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes

WID-SEC-W-2023-1469 — Kubernetes: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

2026-10-02T14:05:03.152029+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kubernetes ausnutzen, um Sicherheitsvorkehrungen zu umgehen.