CVE-2024-21403
CriticalCVSS 9.0Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.
Risk Assessment
Risk of unauthorized access to resources and privilege escalation in the AKS cluster, potentially leading to confidentiality and integrity breaches.
Recommendation
Apply security updates provided by Microsoft for Azure Kubernetes Service. Monitor security advisories and deploy patches as soon as possible.
Other vulnerabilities in Microsoft Azure Kubernetes Service
See all- CVE-2026-50516Critical
A missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56163Critical
Missing authentication for a critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2024-21376Critical
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows remote code execution. An attacker could exploit it to execute arbitrary code within the confidential container context.
- CVE-2026-32193High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
Original NVD description (English source)
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability