Known vulnerabilities in Kata Containers

Software CPE: cpe:2.3:a:katacontainers:kata_containers:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kata Containers Kata Containers is affected by 14 known vulnerabilities: 2 high, 4 medium, 8 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144581 - Improper Validation of Unsafe Equivalence in Input
CVE-2026-77176
CWE-1289 Medium
No
No
4.1.0 21.08.2026 SB2026082176
#VU139373 - Missing Authorization
CVE-2026-64676
CWE-862 Low
No
No
4.0.0 26.07.2026 SB2026072603
#VU139372 - Out-of-bounds write
CWE-787 Low
No
No
4.0.0 26.07.2026 SB2026072603
#VU139371 - Improper Access Control
CWE-284 Low
No
No
4.0.0 26.07.2026 SB2026072603
#VU139370 - Improper input validation
CVE-2026-50540
CWE-20 Medium
No
No
4.0.0 26.07.2026 SB2026072603
SB2026082069
#VU132140 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-47243
CWE-22 Low
No
No
3.31.0 22.05.2026 SB2026052275
SB20260529204
SB20260529205
and 1 more
#VU132138 - Argument Injection or Modification
CVE-2026-44210
CWE-88 Medium
No
No
3.31.0 22.05.2026 SB2026052275
#VU132136 - Improper Access Control
CVE-2026-41326
CWE-284 High
No
No
1.9.3, 3.29.0 22.05.2026 SB2026052272
SB2026061741
#VU132135 - Improper Access Control
CVE-2026-24834
CWE-284 Low
No
No
3.27.0 22.05.2026 SB2026052273
SB2026070655
#VU132134 - Exposure of resource to wrong sphere
CVE-2026-24054
CWE-668 Low
No
No
3.26.0 22.05.2026 SB2026052260
SB2026052261
SB2026052262
and 6 more
#VU132133 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-58354
CWE-754 Low
No
No
1.9.3, 3.21.0 22.05.2026 SB2026052272
#VU61110 - Use of Uninitialized Resource
CVE-2022-0847
CWE-908 Low
Available
Exploited
2.5.0 08.03.2022 SB2022030808
SB2022031019
SB2022031026
and 27 more
#VU33996 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-2024
CWE-59 Medium
No
No
1.11.0 05.08.2020 SB2020051944
#VU33995 -
CVE-2020-2025
High
No
No
1.11.0 05.08.2020 SB2020051944