Microsoft Azure CLI Confcom Extension < 0.3.3 Privilege Escalation

An elevation of privilege vulnerability exists in Microsoft Azure CLI Confcom extension. An unauthenticated, remote attacker can exploit this, to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2024-21400

CVE-2024-21400 targets Azure Kubernetes Service Confidential Containers. Connected sources confirm a privilege-escalation flaw due to insufficient access controls in deployment/management of confidential containers, enabling remote attackers to gain elevated privileges within affected AKS environ...