CVE Catalog
CVE-2026-33105
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk0.72%
50th percentile - higher than 50% of all known CVEs
Summary
Microsoft Azure Kubernetes Service contains an improper authorization vulnerability that allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can elevate their privileges within the Kubernetes cluster, potentially leading to unauthorized access to resources and full cluster compromise.
Recommendation
Apply security updates provided by Microsoft for Azure Kubernetes Service and review authorization configurations.
Original NVD description (English source)
Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.