CVE Catalog

CVE-2024-21403

CriticalCVSS 9.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.34%

69th percentile - higher than 69% of all known CVEs

Summary

A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.

Risk Assessment

Risk of unauthorized access to resources and privilege escalation in the AKS cluster, potentially leading to confidentiality and integrity breaches.

Recommendation

Apply security updates provided by Microsoft for Azure Kubernetes Service. Monitor security advisories and deploy patches as soon as possible.

Original NVD description (English source)

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS