Skip to content
Kkubevirt
Products
| Product | CVEs | Exploited | Latest |
| kubevirt | 8 | – | Nov 18, 2025 |
Exploited and recent CVEs
-
CVE-2025-64324
High 8.5
KubeVirt Vulnerable to Arbitrary Host File Read and Write
0.2%
-
CVE-2025-64433
Medium 6.5
KubeVirt Arbitrary Container File Read
0.5%
-
CVE-2025-64437
Medium 5.0
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
0.2%
-
CVE-2025-64436
Medium 6.9
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
0.3%
-
CVE-2025-64435
Medium 5.3
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
0.4%
-
CVE-2025-64434
Medium 4.7
KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing
0.2%
-
CVE-2025-64432
Medium 4.7
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
0.1%
-
CVE-2023-26484
High 8.2
On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs
0.6%