Known vulnerabilities in Multicluster Engine for Kubernetes

Software CPE: cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Multicluster Engine for Kubernetes Multicluster Engine for Kubernetes is affected by 224 known vulnerabilities: 42 high, 138 medium, 44 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140599 - Resource exhaustion
CVE-2026-32280
CWE-400 Medium
No
No
2.6.12 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 64 more
#VU134886 - Improper input validation
CVE-2026-53488
CWE-20 High
No
No
2.10.4 19.06.2026 SB2026061902
SB2026070980
SB2026070981
and 5 more
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
2.6.12 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 68 more
#VU118221 - Incorrect Default Permissions
CVE-2025-7195
CWE-276 Low
No
No
2.6, 2.8.4 10.11.2025 SB2025111053
SB2025120350
SB2025120351
and 8 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
2.8.4, 2.10.1 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 172 more
#VU117441 - Improper input validation
CVE-2025-53547
CWE-20 Low
No
No
2.7.6 22.10.2025 SB2025102218
SB2025102244
SB2025102245
and 4 more
#VU116130 - Improper input validation
CVE-2025-9288
CWE-20 Medium
No
No
2.6, 2.7.6 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115762 - Improper input validation
CVE-2025-9287
CWE-20 Medium
No
No
2.6, 2.7.6 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU114987 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-9566
CWE-59 Low
No
No
2.7.6 08.09.2025 SB20250908111
SB20250908113
SB20250908114
and 25 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907
CWE-362 Low
No
No
2.8.4, 2.10.1 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 48 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783
CWE-330 Medium
Available
No
2.6, 2.7.6, 2.8.3 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395
CWE-476 Medium
No
No
2.7.6 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990
CWE-476 Low
No
No
2.7.6 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112993 - Double Free
CVE-2025-32988
CWE-415 Medium
No
No
2.7.6 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 73 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989
CWE-122 High
No
No
2.7.6 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081
CWE-522 Medium
No
No
2.7.6, 2.8.3 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU100566 - Off-by-one Error
CVE-2024-52533
CWE-193 High
No
No
2.6.8, 2.7.6, 2.8.3 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
2.8.4 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU64274 - Out-of-bounds read
CVE-2022-29458
CWE-125 Medium
No
No
2.7.6, 2.8.3 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
2.6, 2.8.4 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more


Showing elements 1 - 20 out of 224