Known vulnerabilities in envoy - page 3

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 138 known vulnerabilities: 17 high, 102 medium, 19 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117943 - Out-of-bounds read
CVE-2024-25178
CWE-125 Medium
No
No
1.33.10, 1.34.8, 1.35.4 03.11.2025 SB2025110350
SB2025110351
SB2025110359
and 4 more
#VU117942 - Stack-based buffer overflow
CVE-2024-25176
CWE-121 High
No
No
1.33.10, 1.34.8, 1.35.4 03.11.2025 SB2025110350
SB2025110351
SB2025110359
and 4 more
#VU117941 - NULL Pointer Dereference
CVE-2024-25177
CWE-476 Low
No
No
1.33.10, 1.34.8, 1.35.4 03.11.2025 SB2025110350
SB2025110351
SB2025110365
and 3 more
#VU117423 - Use After Free
CVE-2025-62504
CWE-416 Medium
No
No
1.33.12, 1.34.10, 1.35.6, 1.36.2 21.10.2025 SB2025102158
#VU117306 - NULL Pointer Dereference
CVE-2025-62409
CWE-476 Medium
No
No
1.33.10, 1.34.9, 1.35.5, 1.36.1 16.10.2025 SB2025101625
#VU114763 - Insufficient Session Expiration
CVE-2025-55162
CWE-613 Low
No
No
1.32.10, 1.33.7, 1.34.5, 1.35.1 03.09.2025 SB2025090341
SB2025090352
#VU114762 - Use After Free
CVE-2025-54588
CWE-416 Medium
No
No
1.34.5, 1.35.1 03.09.2025 SB2025090341
SB2025090352
#VU112255 - Deserialization of Untrusted Data
CVE-2025-27818
CWE-502 Medium
No
No
1.33.10, 1.34.8, 1.35.4 04.07.2025 SB20250704102
SB2025070708
SB2025080519
and 16 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817
CWE-918 High
Available
No
1.33.10, 1.34.8, 1.35.4 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU105934 - Improper input validation
CVE-2025-30157
CWE-20 Medium
No
No
1.30.10, 1.31.6, 1.32.4, 1.33.1 21.03.2025 SB2025032123
#VU101889 - Improper input validation
CVE-2024-11407
CWE-20 Medium
No
No
1.33.10, 1.34.8, 1.35.4 20.12.2024 SB2024122036
SB2024122046
SB2024122057
and 10 more
#VU101847 - NULL Pointer Dereference
CVE-2024-53270
CWE-476 Medium
No
No
1.29.12, 1.30.9, 1.31.5, 1.32.3 19.12.2024 SB2024121911
SB2024121913
SB2025020519
#VU101846 - Resource Management Errors
CVE-2024-53271
CWE-399 Medium
No
No
1.31.5, 1.32.3 19.12.2024 SB2024121911
SB2024121913
#VU101845 - Improper input validation
CVE-2024-53269
CWE-20 Low
No
No
1.30.8, 1.31.4, 1.32.2 19.12.2024 SB2024121909
SB2024121913
#VU97627 - Resource Management Errors
CVE-2024-45807
CWE-399 Medium
No
No
1.31.2 20.09.2024 SB2024092014
SB2024092023
#VU97626 - Improper Output Neutralization for Logs
CVE-2024-45808
CWE-117 Medium
No
No
1.28.7, 1.29.9, 1.30.6, 1.31.2 20.09.2024 SB2024092014
SB2024092023
SB2024100826
#VU97625 - Improper input validation
CVE-2024-45806
CWE-20 Medium
No
No
1.28.7, 1.29.9, 1.30.6, 1.31.2 20.09.2024 SB2024092014
SB2024092023
SB2024100825
and 1 more
#VU97624 - NULL Pointer Dereference
CVE-2024-45809
CWE-476 Medium
No
No
1.29.9, 1.30.6, 1.31.2 20.09.2024 SB2024092014
SB2024092023
#VU97623 - Resource Management Errors
CVE-2024-45810
CWE-399 Medium
No
No
1.28.7, 1.29.9, 1.30.6, 1.31.2 20.09.2024 SB2024092014
SB2024092023
SB2024100826
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
1.28.6, 1.29.8, 1.30.5, 1.31.1 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more


Showing elements 41 - 60 out of 138