13715 matches found
CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
...
CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
...
CVE-2024-21403
CVE-2024-21403 affects Microsoft Azure Kubernetes Service Confidential Containers, describing an Elevation of Privilege in AKS Confidential Containers. The available connected material indicates a privilege-escalation risk within the AKS Confidential Container environment, with a CVSSv3 base scor...
CVE-2024-21397
CVE-2024-21397 — Microsoft Azure File Sync Elevation of Privilege is an Azure File Sync Agent vulnerability where an issue could allow unauthorized users to create files in locations they are not allowed to access. The primary public details describe the impact as an elevation of privileges with ...
CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
...
CVE-2024-21376
CVE-2024-21376 affects Microsoft Azure Kubernetes Service Confidential Containers. The issue is described (per PT- security) as insufficient input validation in the deployment/management software, enabling remote attackers to execute arbitrary code. Microsoft’s advisories and rapid7 summaries cla...
CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
...
CVE-2024-21364
CVE-2024-21364 corresponds to a Microsoft Azure Site Recovery Elevation of Privilege vulnerability. Connected sources confirm the issue affects the Azure Site Recovery Configuration Server (Classic VMware/Physical to Azure scenario) and that remediation is available via updates from Microsoft. Sp...
CVE-2024-21364 Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2024-21364 Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2024-20679
CVE-2024-20679 is a spoofing vulnerability in Microsoft Azure Stack Hub. The connected sources indicate the affected product is Azure Stack Hub, with the vulnerability enabling impersonation (spoofing) of a user interface, without remote code execution. Microsoft’s lifecycle advisory groups this ...
CVE-2024-20679 Azure Stack Hub Spoofing Vulnerability
...
CVE-2024-21381
The connected source (NCSC advisory) confirms CVE-2024-21381 affects Microsoft Azure Active Directory B2C and is categorized as a spoofing vulnerability with the practical impact described as “Pretend to be another user.” The advisory lists it under Azure Active Directory vulnerabilities with a C...
CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability
...
CVE-2024-21329 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-21329 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-21329
CVE-2024-21329 affects Microsoft Azure Connected Machine Agent. Connected docs identify an elevation-of-privilege issue in the Azure Connected Machine Agent (root cause described by PT-2024-1823 as a symbolic link tracking vulnerability). CVSS indicates local access with low attack complexity and...