CVE-2024-21376
CriticalCVSS 9.0Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows remote code execution. An attacker could exploit it to execute arbitrary code within the confidential container context.
Risk Assessment
Risk of remote compromise of the container and potentially the entire cluster, leading to confidentiality, integrity, and availability breaches.
Recommendation
Apply security updates provided by Microsoft for Azure Kubernetes Service. Monitor security advisories and deploy patches as soon as possible.
Other vulnerabilities in Microsoft Azure Kubernetes Service
See all- CVE-2026-50516Critical
A missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56163Critical
Missing authentication for a critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2024-21403Critical
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.
- CVE-2026-32193High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
Original NVD description (English source)
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability