kubevirt

Products

ProductCVEsExploitedLatest
kubevirt8–Nov 18, 2025

Exploited and recent CVEs

  • CVE-2025-64324 High 8.5 KubeVirt Vulnerable to Arbitrary Host File Read and Write 0.2%
  • CVE-2025-64433 Medium 6.5 KubeVirt Arbitrary Container File Read 0.5%
  • CVE-2025-64437 Medium 5.0 KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes 0.2%
  • CVE-2025-64436 Medium 6.9 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes 0.3%
  • CVE-2025-64435 Medium 5.3 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation 0.4%
  • CVE-2025-64434 Medium 4.7 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing 0.2%
  • CVE-2025-64432 Medium 4.7 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer 0.1%
  • CVE-2023-26484 High 8.2 On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs 0.6%