18 matches found
CVE-2026-100833 Contrast before 1.23.1 Image Substitution via Policy Generation
Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...
CVE-2025-59291
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...
EUVD-2024-19113
Malicious code in bioql PyPI...
EUVD-2024-26962
Malicious code in bioql PyPI...
CVE-2024-29990
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...
PT-2024-3523
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service Confidential Container affected versions not specified Description: The issue is related to a lack of access control in the deployment and management of confidential containers in Azure Kubernetes Service,...
CVE-2024-29990: Improper Access Control
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...
CVE-2024-21400: Improper Limitation of a Pathname to a Restricted Directory
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...
CVE-2024-21403
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...
CVE-2024-21376
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...
Remote code execution
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...
CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
...
CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
...
CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
...
CVE-2024-21376
CVE-2024-21376 affects Microsoft Azure Kubernetes Service Confidential Containers. The issue is described (per PT- security) as insufficient input validation in the deployment/management software, enabling remote attackers to execute arbitrary code. Microsoft’s advisories and rapid7 summaries cla...
CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
...