CVE Catalog

CVE-2024-21376

CriticalCVSS 9.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.17%

64th percentile - higher than 64% of all known CVEs

Summary

A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows remote code execution. An attacker could exploit it to execute arbitrary code within the confidential container context.

Risk Assessment

Risk of remote compromise of the container and potentially the entire cluster, leading to confidentiality, integrity, and availability breaches.

Recommendation

Apply security updates provided by Microsoft for Azure Kubernetes Service. Monitor security advisories and deploy patches as soon as possible.

Original NVD description (English source)

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS