KKyverno

Products

Exploited and recent CVEs

• CVE-2026-122323 High 7.5 Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression 0.3%
• CVE-2026-122322 High 7.5 Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression 0.4%
• CVE-2026-122321 Critical 9.1 Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass 0.2%
• CVE-2026-122320 High 7.7 Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone 0.2%
• CVE-2026-122319 High 7.5 Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic 0.3%
• CVE-2026-122318 High 7.7 Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates 0.2%
• CVE-2026-122316 High 8.5 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting 0.2%
• CVE-2026-122315 High 7.5 Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic 0.4%
• CVE-2026-122314 High 7.5 Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic 0.3%
• CVE-2026-122313 Critical 9.9 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy 0.3%
• CVE-2026-122312 High 7.7 Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String 0.3%
• CVE-2026-122311 Critical 9.9 Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument 0.4%
• CVE-2026-122310 Critical 9.9 Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath 0.4%
• CVE-2026-122309 Medium 6.2 Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost 0.2%
• CVE-2026-122308 High 8.5 Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest 0.2%
• CVE-2026-122307 High 7.7 Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling 0.2%
• CVE-2026-122306 High 7.7 Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching 0.3%
• CVE-2026-122305 High 7.7 Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop 0.3%
• CVE-2026-122304 Critical 9.9 Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader 0.4%
• CVE-2026-122303 Critical 9.9 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy 0.3%
• CVE-2026-122302 Critical 9.8 Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check 0.3%
• CVE-2026-100707 High 7.7 Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path 0.5%
• CVE-2026-100706 Critical 9.9 kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath 0.6%
• CVE-2026-100705 High 7.6 Kyverno before 1.19.1 SSRF via legacy apiCall service executor 0.2%
• CVE-2026-100704 High 7.7 Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass 0.2%
• CVE-2026-100703 High 7.7 Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib 0.2%
• CVE-2026-84200 Critical 9.0 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions 0.3%
• CVE-2026-84199 High 7.7 Kyverno before 1.16.2 SSRF via APICall Feature 0.4%
• CVE-2026-84196 High 7.7 Kyverno before 1.18.0 Server-Side Request Forgery via apiCall 0.4%
• CVE-2026-84195 High 7.7 Kyverno before 1.16.4 Credential Leak via apiCall 0.4%