Known vulnerabilities in envoy - page 2

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 140
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 140 known vulnerabilities: 17 high, 103 medium, 20 low Critical High Medium Low

Vulnerabilities (140)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135119 - Resource exhaustion
CWE-400 Medium
No
No
1.35.13, 1.37.0, 1.38.0 24.06.2026 SB2026062441
#VU135105 - Heap-based Buffer Overflow
CVE-2026-48706
CWE-122 Medium
No
No
1.35.12, 1.36.8, 1.37.4, 1.38.2 24.06.2026 SB2026062440
#VU145838 - Improper Certificate Validation
CVE-2022-21656
CWE-295 Low
No
No
1.20.2 22.02.2022 SB2022022248
#VU145839 - Always-Incorrect Control Flow Implementation
CVE-2022-21655
CWE-670 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145840 - Configuration
CVE-2022-21654
CWE-16 Low
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145848 - Use After Free
CVE-2021-43826
CWE-416 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145847 - Use After Free
CVE-2021-43825
CWE-416 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145846 - NULL Pointer Dereference
CVE-2021-43824
CWE-476 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145849 - Improper input validation
CVE-2021-29492
CWE-20 Medium
No
No
1.15.5, 1.16.4, 1.17.3, 1.18.3 11.05.2021 SB2021051176
#VU145850 - Integer overflow
CVE-2021-28682
CWE-190 Medium
No
No
1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 16.04.2021 SB2021041642
#VU145851 - Uncaught Exception
CVE-2021-28683
CWE-248 Medium
No
No
1.16.3, 1.17.2, 1.18.0 16.04.2021 SB2021041642
#VU145852 - Reachable Assertion
CVE-2021-29258
CWE-617 Medium
No
No
1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 16.04.2021 SB2021041642
#VU145853 - Improper Access Control
CVE-2021-21378
CWE-284 High
No
No
1.17.1 09.03.2021 SB2021030980
#VU145855 - Improper input validation
CWE-20 Medium
No
No
1.16.1 17.12.2020 SB2020121750
#VU145854 - Improper input validation
CWE-20 Medium
No
No
1.13.7, 1.14.6, 1.15.3, 1.16.1 17.12.2020 SB2020121750
#VU145856 - Improper input validation
CVE-2020-25017
CWE-20 Medium
No
No
1.12.7, 1.13.5, 1.14.5, 1.15.1 29.09.2020 SB2020092920
#VU145857 - Resource exhaustion
CVE-2020-8663
CWE-400 Medium
No
No
1.12.5, 1.13.3, 1.14.3 30.06.2020 SB2020063045
#VU145859 - Heap-based Buffer Overflow
CVE-2019-18801
CWE-122 Medium
No
No
1.12.2 10.12.2019 SB20191210104
#VU145858 - Improper input validation
CVE-2019-18838
CWE-20 Medium
No
No
1.12.2 10.12.2019 SB20191210104
#VU145860 - Resource exhaustion
CWE-400 Medium
No
No
1.11.2 08.11.2019 SB2019110836


Showing elements 21 - 40 out of 140