How many envoyproxy envoy CVEs are in CISA KEV?

Yes — 1 of envoyproxy envoy's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of envoyproxy envoy are affected?

789 distinct envoyproxy envoy versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in envoyproxy envoy CVEs?

envoyproxy envoy's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation).

How many critical envoyproxy envoy vulnerabilities are there?

envoyproxy envoy has 11 critical and 76 high-severity CVEs.

What is the average severity of envoyproxy envoy CVEs?

The average CVSS base score across envoyproxy envoy's scored CVEs is 7.4.

envoyproxy envoy Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: envoyproxy envoy vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

envoyproxy envoy Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

envoyproxy envoy has 114 published CVE records since 2019, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 56 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting envoyproxy envoy, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of envoyproxy envoy's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical11

High76

Medium26

Low1

In CISA’s Known Exploited Vulnerabilities catalog

One of envoyproxy envoy's CVEs is confirmed exploited in the wild.

Public exploits

56 of envoyproxy envoy's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every envoyproxy envoy version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.7.082 CVEs
1.8.082 CVEs
1.9.082 CVEs
1.0.081 CVEs
1.1.081 CVEs
1.2.081 CVEs
1.3.081 CVEs
1.4.081 CVEs
1.5.081 CVEs
1.6.081 CVEs
1.10.080 CVEs
1.11.080 CVEs

Common weakness types

The CWE weakness categories most often found in envoyproxy envoy CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many envoyproxy envoy CVEs were published each year.

2019

2020

2021

2022

2023

2024

2025

Other envoyproxy products

Browse vulnerabilities for other products by envoyproxy.

github.com/envoyproxy/envoy11 CVEs gateway10 CVEs github.com/envoyproxy/gateway10 CVEs envoy-setec1 CVEs

All envoyproxy vulnerabilities

Frequently asked questions

Common questions about envoyproxy envoy vulnerabilities.

How many CVEs does envoyproxy envoy have?: envoyproxy envoy has 114 published CVE records since 2019.
How many envoyproxy envoy CVEs are in CISA KEV?: Yes — 1 of envoyproxy envoy's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for envoyproxy envoy vulnerabilities?: Yes — 56 of envoyproxy envoy's CVEs have a known public exploit.
Which versions of envoyproxy envoy are affected?: 789 distinct envoyproxy envoy versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in envoyproxy envoy CVEs?: envoyproxy envoy's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation).
How many critical envoyproxy envoy vulnerabilities are there?: envoyproxy envoy has 11 critical and 76 high-severity CVEs.
What is the average severity of envoyproxy envoy CVEs?: The average CVSS base score across envoyproxy envoy's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track envoyproxy envoy vulnerabilities

Monitor new envoyproxy envoy vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Version ranges

1.37.0 <= v < 1.37.513 CVEs
1.38.0 <= v < 1.38.313 CVEs
1.36.0 <= v < 1.36.911 CVEs
1.19.0 <= v < 1.19.18 CVEs
1.19.0 <= v <= 1.19.08 CVEs
1.18.0 <= v < 1.18.47 CVEs
1.20.0 <= v < 1.20.27 CVEs
1.28.0 <= v < 1.28.47 CVEs
1.29.0 <= v < 1.29.57 CVEs
1.30.0 <= v < 1.30.27 CVEs
1.36.0 <= v < 1.36.77 CVEs
1.37.0 <= v < 1.37.37 CVEs
1.38.0 <= v < 1.38.17 CVEs
< 1.22.96 CVEs
1.17.0 <= v < 1.17.46 CVEs
1.19.0 <= v < 1.19.36 CVEs
1.21.0 <= v < 1.21.16 CVEs
1.23.0 <= v < 1.23.66 CVEs
1.24.0 <= v < 1.24.46 CVEs
1.25.0 <= v < 1.25.36 CVEs
< 1.18.65 CVEs
< 1.22.15 CVEs
< 1.27.65 CVEs
< 1.34.135 CVEs
< 1.35.115 CVEs
1.26.0 <= v < 1.26.75 CVEs
1.27.0 <= v < 1.27.35 CVEs
1.28.0 <= v < 1.28.15 CVEs
1.29.0 <= v < 1.29.15 CVEs
1.31.0 <= v < 1.31.25 CVEs
1.35.0 <= v < 1.35.85 CVEs
1.35.0 <= v < 1.35.95 CVEs
1.36.0 <= v < 1.36.55 CVEs
1.37.0 <= v < 1.37.15 CVEs
1.37.0 <= v <= 1.37.05 CVEs
< 1.12.54 CVEs
<= 1.12.44 CVEs
1.16.0 <= v < 1.16.54 CVEs
1.23.0 <= v < 1.23.124 CVEs
1.24.0 <= v < 1.24.104 CVEs
1.25.0 <= v < 1.25.94 CVEs
1.26.0 <= v < 1.26.44 CVEs
1.29.0 <= v < 1.29.94 CVEs
1.30.0 <= v < 1.30.64 CVEs
< 1.28.73 CVEs
< 1.33.133 CVEs
<= 1.12.13 CVEs
1.13.2 <= v < 1.13.33 CVEs
1.13.2 <= v <= 1.13.23 CVEs
1.14.2 <= v < 1.14.33 CVEs
1.14.2 <= v <= 1.14.23 CVEs
1.16.2 <= v < 1.16.33 CVEs
1.16.2 <= v <= 1.16.23 CVEs
1.17.1 <= v < 1.17.23 CVEs
1.17.1 <= v <= 1.17.13 CVEs
1.34.0 <= v < 1.34.113 CVEs
1.34.0 <= v < 1.35.133 CVEs
1.35.0 <= v < 1.35.73 CVEs
1.36.0 <= v < 1.36.33 CVEs
< 1.16.12 CVEs
< 1.16.52 CVEs
< 1.26.72 CVEs
< 1.35.132 CVEs
<= 1.9.02 CVEs
1.13.0 <= v < 1.13.42 CVEs
1.14.0 <= v < 1.14.42 CVEs
1.14.6 <= v < 1.14.72 CVEs
1.14.6 <= v <= 1.14.62 CVEs
1.15.3 <= v < 1.15.42 CVEs
1.15.3 <= v <= 1.15.32 CVEs
1.18.0 <= v < 1.35.132 CVEs
1.28.0 <= v <= 1.28.32 CVEs
1.29.0 <= v <= 1.29.42 CVEs
1.30.0 <= v <= 1.30.12 CVEs
1.31.0 <= v < 1.31.52 CVEs
1.32.0 <= v < 1.32.32 CVEs
1.34.0 <= v < 1.34.52 CVEs
1.35.0 <= v < 1.35.12 CVEs
1.35.0 <= v < 1.35.112 CVEs
1.35.0 <= v <= 1.35.02 CVEs
< 1.12.31 CVE
< 1.12.61 CVE
< 1.12.71 CVE
< 1.14.21 CVE
< 1.15.51 CVE
< 1.18.41 CVE
< 1.20.21 CVE
< 1.23.111 CVE
< 1.26.81 CVE
< 1.27.71 CVE
< 1.29.121 CVE
< 1.30.101 CVE
< 1.31.21 CVE
< 1.31.81 CVE
< 1.32.101 CVE
< 1.33.101 CVE
< 1.33.111 CVE
< 1.33.121 CVE
<= 1.0.91 CVE
<= 1.11.11 CVE
<= 1.14.11 CVE
<= 1.16.41 CVE
<= 1.18.21 CVE
<= 1.27.51 CVE
<= 9.01 CVE
>= 1.29.0, < 1.29.21 CVE
>= 1.31.0, < 1.31.21 CVE
1.0.0 <= v <= 1.0.01 CVE
1.1.0 <= v <= 1.1.01 CVE
1.10.0 <= v <= 1.10.01 CVE
1.11.0 <= v <= 1.11.01 CVE
1.11.1 <= v <= 1.11.11 CVE
1.11.2 <= v <= 1.11.21 CVE
1.12.0 <= v <= 1.12.01 CVE
1.13.0 <= v < 1.13.11 CVE
1.13.0 <= v < 1.13.31 CVE
1.13.0 <= v < 1.27.51 CVE
1.13.0 <= v <= 1.13.21 CVE
1.14.0 <= v < 1.14.31 CVE
1.14.0 <= v <= 1.14.21 CVE
1.15.0 <= v < 1.15.11 CVE
1.16.0 <= v < 1.16.41 CVE
1.17.0 <= v < 1.17.11 CVE
1.17.0 <= v < 1.17.31 CVE
1.17.0 <= v <= 1.17.01 CVE
1.18.0 <= v < 1.18.31 CVE
1.18.0 <= v < 1.27.61 CVE
1.18.0 <= v <= 1.27.51 CVE
1.2.0 <= v <= 1.2.01 CVE
1.21.0 <= v <= 1.21.01 CVE
1.23.0 <= v < 1.35.111 CVE
1.23.0 <= v < 1.35.131 CVE
1.24.0 <= v < 1.24.91 CVE
1.24.10 <= v <= 1.24.101 CVE
1.25.0 <= v < 1.25.81 CVE
1.25.9 <= v <= 1.25.91 CVE
1.26.0 <= v < 1.26.31 CVE
1.26.0 <= v < 1.35.131 CVE
1.26.4 <= v <= 1.26.41 CVE
1.27.0 <= v < 1.27.41 CVE
1.27.0 <= v <= 1.27.01 CVE
1.27.6 <= v <= 1.27.61 CVE
1.28.0 <= v < 1.28.21 CVE
1.28.0 <= v < 1.28.31 CVE
1.28.0 <= v < 1.28.51 CVE
1.28.4 <= v <= 1.28.41 CVE
1.29.0 <= v < 1.29.21 CVE
1.29.0 <= v < 1.29.31 CVE
1.29.0 <= v < 1.29.41 CVE
1.29.0 <= v < 1.29.71 CVE
1.29.0 <= v <= 1.29.01 CVE
1.29.1 <= v <= 1.29.11 CVE
1.29.6 <= v <= 1.29.61 CVE
1.3.0 <= v <= 1.3.01 CVE
1.30.0 <= v < 1.30.11 CVE
1.30.0 <= v < 1.30.41 CVE
1.30.0 <= v < 1.30.81 CVE
1.30.0 <= v < 1.30.91 CVE
1.30.0 <= v <= 1.30.01 CVE
1.30.3 <= v <= 1.30.31 CVE
1.31.0 <= v < 1.31.41 CVE
1.31.0 <= v < 1.31.61 CVE
1.32.0 <= v < 1.32.21 CVE
1.32.0 <= v < 1.32.41 CVE
1.32.0 <= v < 1.32.61 CVE
1.32.0 <= v <= 1.32.31 CVE
1.33.0 <= v < 1.33.11 CVE
1.33.0 <= v < 1.33.31 CVE
1.33.0 <= v < 1.33.71 CVE
1.33.0 <= v <= 1.33.01 CVE
1.33.0 <= v <= 1.33.71 CVE
1.34.0 <= v < 1.34.11 CVE
1.34.0 <= v < 1.34.101 CVE
1.34.0 <= v < 1.34.91 CVE
1.34.0 <= v <= 1.34.01 CVE
1.35.0 <= v < 1.35.131 CVE
1.35.0 <= v < 1.35.51 CVE
1.35.0 <= v < 1.35.61 CVE
1.36.0 <= v < 1.36.11 CVE
1.36.0 <= v < 1.36.21 CVE
1.36.0 <= v <= 1.36.01 CVE
1.38.0 <= v <= 1.38.01 CVE
1.4.0 <= v <= 1.4.01 CVE
1.5.0 <= v <= 1.5.01 CVE
1.6.0 <= v <= 1.6.01 CVE
1.7.0 <= v < 1.18.61 CVE
1.7.0 <= v <= 1.7.01 CVE
1.7.1 <= v <= 1.7.11 CVE
1.8.0 <= v <= 1.8.01 CVE
1.9.0 <= v <= 1.9.01 CVE
1.9.1 <= v <= 1.9.11 CVE
2d69e30 <= v < 3b5acb21 CVE

Fixed in

0ebfcfe5b0484b89ca85b761da9e05ce75dbda8d13 CVEs
1.37.513 CVEs
1.38.313 CVEs
f97695a50e11f5ff6719e129a466bf9204b64a7f13 CVEs
1.36.911 CVEs
57198c441a298a75097c690726d90974549a977811 CVEs
1.35.1310 CVEs
adb998f2875986005be294d10231a9c9a497e30d10 CVEs
1.18.48 CVEs
1.19.18 CVEs
1.20.28 CVEs
4aaf9593152c6996b9da384c8918e9ad4f0abd4d8 CVEs
bef18019d8fc33a4ed6aca3679aff2100241ac5e8 CVEs
1.28.47 CVEs
1.29.57 CVEs
1.30.27 CVEs
1.35.117 CVEs
1.36.77 CVEs
1.37.37 CVEs
1.38.17 CVEs
0de60452be1fa329c16076916b6bfe1f672aeed46 CVEs
1.16.56 CVEs
1.17.46 CVEs
1.18.66 CVEs
1.19.36 CVEs
1.21.16 CVEs
1.22.96 CVEs
1.23.66 CVEs
1.24.46 CVEs
1.25.36 CVEs
1.27.66 CVEs
6392d12242234948b15a0fecee629f9cf8b76cee6 CVEs
a17cdcdfad24de101e95716b77549ba689824f256 CVEs
a79ca225f1ed924b855dff8a26bd7f7cdb84e6946 CVEs
af50070ee60866874b0a9383daf9364e884ded226 CVEs
b2064ed660934383cece8c8d60393d5b0720ae4d6 CVEs
d3d04156c3b05f8b4532d44e602fdd1b430c64bb6 CVEs
e99d61c4596573fbea8b8a9def8b160e138a40186 CVEs
0de8b2b94c75dbe8c2f897058e16d23d959783fa5 CVEs
0fd81ee7ffcd7cfc864094b24dc9b5c3ade89ff25 CVEs
1.22.15 CVEs
1.26.75 CVEs
1.27.35 CVEs
1.28.15 CVEs
1.29.15 CVEs
1.31.25 CVEs
1.34.135 CVEs
1.35.85 CVEs
1.35.95 CVEs
1.36.55 CVEs
1.37.15 CVEs
41749943780b54b70b510b1b1a4805ae529e174a5 CVEs
4fda4d79d06e1bd59e591be3f3482234950836485 CVEs
5ef4e4cea57f63e7e2970b9c1ad696278db927d65 CVEs
72ec3eed50b4154cb6d2251667b4c1c1ddfaa2665 CVEs
75e220883447543d35571aecae826d7b1a2646b95 CVEs
7c0fda3dc457de6ee4585e8129e3f5728d65f3675 CVEs
a0e580408ef4568b0a16c6663b6d8ae0c46aba6a5 CVEs
ae27fb5280d30e1400b7e9c9cbd448bfcd4ad9f55 CVEs
cc4a75482810de4b84c301d13deb551bd31473395 CVEs
1.12.54 CVEs
1.13.34 CVEs
1.14.34 CVEs
1.23.124 CVEs
1.24.104 CVEs
1.25.94 CVEs
1.26.44 CVEs
1.29.94 CVEs
1.30.64 CVEs
5adb03f52a6399fe5a31fdb603d5009d8d59cdb94 CVEs
7b2609e12147377b0420bfa4453762e377f218f34 CVEs
810bfcb8cae456e3a5e6541a0ee853185e2586f74 CVEs
94aa5f7f82fb543e7fbc011ea398ac12cc3968174 CVEs
9689bc57f80fe56dbb16a4e0d632cde5363d18114 CVEs
cfa32deca25ac57c2bbecdad72807a9b13493fc14 CVEs
1.16.33 CVEs
1.17.23 CVEs
1.28.73 CVEs
1.33.133 CVEs
1.34.113 CVEs
1.35.73 CVEs
1.36.33 CVEs
4848d6d548438b50d6d78187a7cfbe61e02d8b853 CVEs
0717f49fef0dac3818cd7cdc52bf18e0ae1f7a2c2 CVEs
1.13.42 CVEs
1.14.42 CVEs
1.14.72 CVEs
1.15.42 CVEs
1.16.12 CVEs
1.31.52 CVEs
1.32.32 CVEs
1.34.52 CVEs
1.35.12 CVEs
58bd599ebd5918d4d005de60954fcd2cb00abd952 CVEs
688c4bbe47f4d05bb8ed268f5172bb026cf032422 CVEs
6e9539d0366baf85baf9acb3e618cb3384765f132 CVEs
74c221751138e5add71e0738d40092434b76a7cf2 CVEs
7e251c0145bb32a1ca7d7199ac0727765538d9422 CVEs
89fee998e13fd53a26df1c492bc0f9bf0fabc5be2 CVEs
923c4111bb48405ac96ef050c4f59ebbad3d77612 CVEs
ab5b508735aac42f2855099285de9c79258e51662 CVEs
d3a90a03b6b3bc0f5e821d7b544464cb28320d2f2 CVEs
f2a676793ef8c5ea9d1df9e1e806826c8f1fd51e2 CVEs
0b7452dd17625093ff1646b6b22b36f35bd9ee561 CVE
0f0984b04e4879f843a3370ad85163951b393d931 CVE
1.12.31 CVE
1.12.61 CVE
1.12.71 CVE
1.13.11 CVE
1.14.21 CVE
1.15.11 CVE
1.15.51 CVE
1.16.41 CVE
1.17.11 CVE
1.17.31 CVE
1.18.31 CVE
1.23.111 CVE
1.24.91 CVE
1.25.81 CVE
1.26.31 CVE
1.26.81 CVE
1.27.41 CVE
1.27.51 CVE
1.27.71 CVE
1.28.21 CVE
1.28.31 CVE
1.28.51 CVE
1.29.121 CVE
1.29.21 CVE
1.29.31 CVE
1.29.41 CVE
1.29.71 CVE
1.30.11 CVE
1.30.101 CVE
1.30.41 CVE
1.30.81 CVE
1.30.91 CVE
1.31.41 CVE
1.31.61 CVE
1.31.81 CVE
1.32.101 CVE
1.32.21 CVE
1.32.41 CVE
1.32.61 CVE
1.33.11 CVE
1.33.101 CVE
1.33.111 CVE
1.33.121 CVE
1.33.31 CVE
1.33.71 CVE
1.34.11 CVE
1.34.101 CVE
1.34.91 CVE
1.35.51 CVE
1.35.61 CVE
1.36.11 CVE
1.36.21 CVE
10e1e425fd84cc2cde985179655da08f68c9cb301 CVE
1257d4e845ff7c5075b03d7ccbfa4767aa2952791 CVE
148de954ed3585d8b4298b424aa24916d0de61361 CVE
1d7aa735c778acc1fb29f0130f2f01cc89acea6e1 CVE
1dbcf4d36b57c50b3887fda69e991b88eec80dd51 CVE
1f244452f6f6b47d31dc16de8b0d868b179d684e1 CVE
2092d65bd4d476be8235ea541e5d25c096b513e61 CVE
32113313a357829ba3a5dce0795b6780bf8cbf4d1 CVE
3b5acb21 CVE
46bf743b97d0d3f01ff437b2f10cc0bd9cdfe6e41 CVE
5022e0b6cadc236414e98c74d611c9566ca398b81 CVE
5c3dc559371181d5baa4a7533c36f2370fc975811 CVE
623479e875619a71adc2ad0ea3cfc9f67a79e7651 CVE
63ec332cbacd277f8937b4eca71f8e1629e4c1f71 CVE
66d96c5f712d95a57b9b99ec3c31860a5738a3441 CVE
670a4a60080f5889d9f7c022a009dcf25f1062ca1 CVE
7ec45b636f1a7ad2d3755a549355e0991ee6196a1 CVE
84dd90f2220ca8661b67d7efa1f93d67e12182221 CVE
8b0d0de9e7d601989121cbb42efc170c342f55c31 CVE
8eef22b927682e9ff6f59cf9f26e440b41219fe61 CVE
9134d6a65e5c2c714d503807eb31a8490471fc5f1 CVE
93466adc53567315e3114d6d1774c56f8066d24e1 CVE
9371333230b1a6e1be2eccf4868771e11af6253a1 CVE
98c1c9e9a40804b93b074badad1cdf284b47d58b1 CVE
9adc6873ea3abc2305d164af41ea713bb45152dd1 CVE
a0504e87c5a246cb097b37049b1e4dc7706c2a901 CVE
a6bded6ebcd6ba479414dd2dd47e73c18d15708e1 CVE
aecedd842dd24f208a40e39898ab376967fee3081 CVE
afc39bea36fd436e54262f150c009e8d72db50141 CVE
b2ffdd89c21163ddf9907af572927214578321d31 CVE
b5144d4e603866dfc470ab23867598fded2fed9c1 CVE
b67c14052c49890a7e3afe614d50979c346c024b1 CVE
bae9f08572b88c27ae450e82a258621ef48936c11 CVE
be4f1cfd31c79fc05651efa2f88429b3c03d1d9e1 CVE
bf5d0eb44b781ac26ff1513700bcb114b7cf43001 CVE
c435eeccd4201f8d6a200922b166f5dcee08272b1 CVE
cb67308e01e8f035f2977f153d20d99a54cb1da41 CVE
ce0ae309057a216aba031aff81c445c90c6ef1451 CVE
d045f4201477d50bc64a3bd38c28cfec67c272ca1 CVE
d3f17ac3a80df123150021146d66df511e87ac321 CVE
dac139cd497d5c67a31d0944430e814c86ce43f31 CVE
dde2499848f95908cc5c8c9735760cbf0458c6451 CVE
de12027c9c2de685d85cf1bf0db58280ac06d0a31 CVE
dfe02b93e0e43a08fa0d838bb9e4c2c9f44d35861 CVE
e409e0a2cedef46b5229f1a603125dccf779e5401 CVE
ea0914ec4041695332fe0433a3a9bb3eba3d97a81 CVE
ea39e3cba652bcc4b11bb0d5c62b017e584d2e5a1 CVE
ea9d25e93cef74b023c95ca1a3f79449cdf7fa9a1 CVE
f519f5c88b2ea998d6c01be604bfd2913f28bc731 CVE
f8f4f1e02fdc64ecd4acf2d903208dd7285ad3a41 CVE