What’s Vulnerable › Vulnerabilities

CVE-2024-9042

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-13 · updated 2026-06-17
• Weakness: CWE-20

Description

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

Affected products

• Kubernetes kubelet: through v1.29.12; from v1.30 through v1.30.8; from v1.31 through v1.31.4; from v1.32 through v1.32.0

References

• https://github.com/kubernetes/kubernetes/issues/129654
• https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg
• http://www.openwall.com/lists/oss-security/2025/01/16/1

Get alerted when CVE-2024-9042 or the next vulnerability affects your stack