katacontainers records
10 published records for vendor katacontainers.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-732 Incorrect Permission Assignment for Critical Resource2
- CWE-250 Execution with Unnecessary Privileges1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
- CWE-61 UNIX Symbolic Link (Symlink) Following1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2020-27151No exploit | An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1.katacontainers · kata containers | High8.8 | — | 2.0% | Dec 7, 2020 |
35Monitor | CVE-2026-24054No exploit | Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layerskatacontainers · kata containers · CWE-754 | High8.8 | — | 0.5% | Jan 29, 2026 |
35Monitor | CVE-2020-2026No exploit | Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host pathkatacontainers · runtime · CWE-59 | High8.8 | — | 0.4% | Jun 10, 2020 |
35Monitor | CVE-2020-2025No exploit | Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image filekatacontainers · runtime · CWE-284 | High8.8 | — | 0.3% | May 19, 2020 |
35Monitor | CVE-2026-24834No exploit | Kata Container to Guest micro VM privilege escalationkatacontainers · kata containers · CWE-732 | High8.8 | — | 0.2% | Feb 19, 2026 |
32Monitor | CVE-2026-41326No exploit | Kata Containers: CopyFile Policy Subversion via Symlinkskatacontainers · confidential containers · CWE-61 | High8.2 | — | 0.3% | Apr 24, 2026 |
28Monitor | CVE-2020-28914No exploit | An improper file permissions vulnerability affects Kata Containers prior to 1.11.5.katacontainers · kata-containers · CWE-732 | High7.1 | — | 0.3% | Nov 17, 2020 |
26Monitor | CVE-2020-2024No exploit | Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the hostkatacontainers · runtime · CWE-59 | Medium6.5 | — | 0.3% | May 19, 2020 |
25Monitor | CVE-2020-2023Proof of concept | Kata Containers - Containers have access to the guest root filesystem devicekatacontainers · runtime · CWE-250 | Medium6.3 | — | 1.1% | Jun 10, 2020 |
23Monitor | CVE-2026-44210No exploit | Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotationskatacontainers · kata containers · CWE-88 | Medium5.8 | — | 0.5% | Jul 23, 2026 |
- CVE-2020-2715136Monitor
An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1.
HighCVSS 8.8No exploitEPSS 2%katacontainers · kata containersDec 7, 2020
- CVE-2026-2405435Monitor
Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers
HighCVSS 8.8No exploitEPSS 0%katacontainers · kata containersJan 29, 2026
- CVE-2020-202635Monitor
Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path
HighCVSS 8.8No exploitEPSS 0%katacontainers · runtimeJun 10, 2020
- CVE-2020-202535Monitor
Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
HighCVSS 8.8No exploitEPSS 0%katacontainers · runtimeMay 19, 2020
- CVE-2026-2483435Monitor
Kata Container to Guest micro VM privilege escalation
HighCVSS 8.8No exploitEPSS 0%katacontainers · kata containersFeb 19, 2026
- CVE-2026-4132632Monitor
Kata Containers: CopyFile Policy Subversion via Symlinks
HighCVSS 8.2No exploitEPSS 0%katacontainers · confidential containersApr 24, 2026
- CVE-2020-2891428Monitor
An improper file permissions vulnerability affects Kata Containers prior to 1.11.5.
HighCVSS 7.1No exploitEPSS 0%katacontainers · kata-containersNov 17, 2020
- CVE-2020-202426Monitor
Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host
MediumCVSS 6.5No exploitEPSS 0%katacontainers · runtimeMay 19, 2020
- CVE-2020-202325Monitor
Kata Containers - Containers have access to the guest root filesystem device
MediumCVSS 6.3Proof of conceptEPSS 1%katacontainers · runtimeJun 10, 2020
- CVE-2026-4421023Monitor
Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations
MediumCVSS 5.8No exploitEPSS 0%katacontainers · kata containersJul 23, 2026