How many kubernetes kube-apiserver CVEs are in CISA KEV?

None of kubernetes kube-apiserver's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of kubernetes kube-apiserver are affected?

15 distinct kubernetes kube-apiserver versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in kubernetes kube-apiserver CVEs?

kubernetes kube-apiserver's CVEs most often map to these CWE weakness types: CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-918 (Server-Side Request Forgery (SSRF)).

What is the average severity of kubernetes kube-apiserver CVEs?

The average CVSS base score across kubernetes kube-apiserver's scored CVEs is 6.4.

kubernetes kube-apiserver Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: kubernetes kube-apiserver vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

kubernetes kube-apiserver Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

kubernetes kube-apiserver has 3 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting kubernetes kube-apiserver, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of kubernetes kube-apiserver's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium0

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of kubernetes kube-apiserver's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No kubernetes kube-apiserver CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every kubernetes kube-apiserver version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.3.01 CVE
<= v1.21.141 CVE
>= 1.3.01 CVE
>= v1.22.141 CVE
>= v1.23.111 CVE
>= v1.24.51 CVE
>= v1.25.01 CVE
>= v1.25.11 CVE
v1.22.0 <= v <= v1.22.131 CVE
v1.23.0 <= v <= v1.23.101 CVE
v1.24.0 <= v <= v1.24.41 CVE

Fixed in

Common weakness types

The CWE weakness categories most often found in kubernetes kube-apiserver CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many kubernetes kube-apiserver CVEs were published each year.

2023

2025

Other kubernetes products

Browse vulnerabilities for other products by kubernetes.

kubernetes75 CVEs ingress-nginx23 CVEs cri-o10 CVEs github.com/kubernetes/kubernetes9 CVEs kubelet7 CVEs Kubernetes ingress-nginx4 CVEs Image Builder3 CVEs minikube

Frequently asked questions

Common questions about kubernetes kube-apiserver vulnerabilities.

How many CVEs does kubernetes kube-apiserver have?: kubernetes kube-apiserver has 3 published CVE records since 2023.
How many kubernetes kube-apiserver CVEs are in CISA KEV?: None of kubernetes kube-apiserver's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for kubernetes kube-apiserver vulnerabilities?: No kubernetes kube-apiserver CVEs currently have a tracked public exploit in this dataset.
Which versions of kubernetes kube-apiserver are affected?: 15 distinct kubernetes kube-apiserver versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in kubernetes kube-apiserver CVEs?: kubernetes kube-apiserver's CVEs most often map to these CWE weakness types: CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-918 (Server-Side Request Forgery (SSRF)).
What is the average severity of kubernetes kube-apiserver CVEs?: The average CVSS base score across kubernetes kube-apiserver's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track kubernetes kube-apiserver vulnerabilities

Monitor new kubernetes kube-apiserver vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing