CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2024-21376

CVE-2024-21376 affects Microsoft Azure Kubernetes Service Confidential Containers. The issue is described (per PT- security) as insufficient input validation in the deployment/management software, enabling remote attackers to execute arbitrary code. Microsoft’s advisories and rapid7 summaries cla...

CVE-2024-21403

CVE-2024-21403 affects Microsoft Azure Kubernetes Service Confidential Containers, describing an Elevation of Privilege in AKS Confidential Containers. The available connected material indicates a privilege-escalation risk within the AKS Confidential Container environment, with a CVSSv3 base scor...

CVE-2026-32193

CVE-2026-32193 targets Microsoft Azure Kubernetes Service with a path-traversal flaw that permits an authorized attacker to run code locally. The NVD entry describes it as a restricted-pathname limitation issue with CVSS v3.1 base score 8.8 (HIGH), attack vector LOCAL, required privileges LOW, no...

CVE-2023-29332

CVE-2023-29332 affects Microsoft Azure Kubernetes Service (AKS). Exploitation could grant Cluster Administrator privileges remotely with low attack complexity and no user interaction. Multiple sources (MSRC, Malwarebytes, Qualys) indicate active patching via Microsoft Update/Patch Tuesday; apply ...

CVE-2021-1677

CVE-2021-1677 is described as an Azure Active Directory Pod Identity spoofing vulnerability affecting Azure Kubernetes Service. The connected documents indicate the issue arises from improper handling in the Pod Identity IMDS flow, enabling a malicious pod to obtain another pod’s credentials/toke...

CVE-2021-27075

CVE-2021-27075 is an Azure information-disclosure vulnerability affecting Azure Virtual Machines across multiple Azure services (e.g., Azure Spring Cloud, AKS, Container Instance, Service Fabric). The underlying root cause is described as an information disclosure flaw allowing access to sensitiv...

CVE-2026-33105

CVE-2026-33105 affects Microsoft Azure Kubernetes Service. The vulnerability is described as improper authorization that could allow an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 vector indicates network access, low attack complexity, no user interaction, and a CRITI...

CVE-2021-24109

CVE-2021-24109 affects Microsoft Azure Kubernetes Service and is categorized as an Elevation of Privilege vulnerability. Connected sources confirm it is exploitable remotely over a network with the affected component being Azure Kubernetes Service. CVSSv3 base score is 6.8 (Medium) with confident...