Azure Kubernetes Service (Microsoft) - vulnerabilities (CVEs)

11 CVEs, 0 in the last 30 days, 250 known versions, newest CVE from 2026-08-11. Vendor: Microsoft.

CVEs of Azure Kubernetes Service

• CVE-2026-50516 - CVSS 9.4 (critical), 2026-08-11: Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.
• CVE-2026-56163 - CVSS 10 (critical), 2026-07-24: Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-32193 - CVSS 8.8 (high), 2026-06-09: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute…
• CVE-2026-33105 - CVSS 10 (critical), 2026-04-03: Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
• CVE-2024-21403 - CVSS 9 (critical), 2024-02-13: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
• CVE-2024-21376 - CVSS 9 (critical), 2024-02-13: Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
• CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
• CVE-2023-29332 - CVSS 9.8 (critical), 2023-09-12: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
• CVE-2021-27075 - CVSS 6.8 (medium), 2021-03-11: Azure Virtual Machine Information Disclosure Vulnerability
• CVE-2021-24109 - CVSS 6.8 (medium), 2021-02-25: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
• CVE-2021-1677 - CVSS 5.5 (medium), 2021-01-12: Azure Active Directory Pod Identity Spoofing Vulnerability