August 13, 2024—KB5041828 (Monthly Rollup)

None None...

August 13, 2024—KB5041851 (Monthly Rollup)

None None...

CVE-2024-28917

Summary: CVE-2024-28917 is a cluster-scope elevation of privilege in Azure Arc-enabled Kubernetes Extension. According to connected sources, the affected component is the Azure Arc Kubernetes Extension (Cluster) and the impact is privilege escalation (obtain increased privileges). The CVSS score ...

CVE-2024-28917 Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

...

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

...

April 9, 2024—KB5036969 (Monthly Rollup)

None None...

March 12, 2024—KB5035930 (Monthly Rollup)

None None...

March 12, 2024—KB5035885 (Monthly Rollup)

None None...

February 13, 2024—KB5034830 (Monthly Rollup)

None None...

February 13, 2024—KB5034819 (Monthly Rollup)

None None...

January 9, 2024—KB5034171 (Monthly Rollup)

None None...

December 12, 2023—KB5033420 (Monthly Rollup)

None None...

CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

Privilege escalation

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

CVE-2023-38176

CVE-2023-38176 is an elevation-of-privilege vulnerability in Azure Arc-Enabled Servers. Multiple sources (NVD, CNVD, MSRC advisories, and NCSc) confirm it allows an attacker to gain elevated privileges within the affected Arc environment (Azure Arc-Enabled Servers). The issue is categorized as an...

CVE-2023-38176 Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

...

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

...

PT-2023-26323 · Microsoft · Azure Arc-Enabled Servers

Name of the Vulnerable Software and Affected Versions: Azure Arc-Enabled Servers affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

Microsoft Patch Tuesday Fixes New Windows Zero-Day; No Patch for Exchange Server Bugs

Microsoft's Patch Tuesday update for the month of October has addressed a total of 85 security vulnerabilities, including fixes for an actively exploited zero-day flaw in the wild. Of the 85 bugs, 15 are rated Critical, 69 are rated Important, and one is rated Moderate in severity. The update,...

CVE-2022-37968

Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, becaus...