Known vulnerabilities in apiserver

Vendor: Kubernetes
Software: apiserver
Software CPE: cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apiserver apiserver is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115217 - Incorrect Authorization
CVE-2025-5187
CWE-863 Low
No
No
1.31.12, 1.32.8, 1.33.4 15.09.2025 SB2025091545
SB2025091548
SB2025091549
and 15 more
#VU88934 - Permissions, Privileges, and Access Controls
CVE-2024-3177
CWE-264 Low
No
No
1.27.13, 1.28.9, 1.29.4 23.04.2024 SB2024042334
SB2024042342
SB2024042343
and 17 more
#VU77526 - Permissions, Privileges, and Access Controls
CVE-2023-2728
CWE-264 Medium
Available
No
1.24.15, 1.25.11, 1.26.6, 1.27.3 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU77525 - Permissions, Privileges, and Access Controls
CVE-2023-2727
CWE-264 Medium
No
No
1.24.15, 1.25.11, 1.26.6, 1.27.3 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU71364 - Improper Access Control
CVE-2022-3162
CWE-284 Low
No
No
1.22.16, 1.23.14, 1.24.8, 1.25.4 19.01.2023 SB2023011938
SB2023011939
SB2023020908
and 17 more