Microsoft Azure Kubernetes Service

Name: Microsoft Azure Kubernetes Service
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

5critical1high0medium1low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-29990US	critical9.0	18.0% (97th)	—	0.3.4	2024-04-09	2 versions
CVE-2023-29332US	critical9.8OT elevated	2.68% (86th)	—	VHD 202308	2023-09-12	1.0 → VHD 202308
CVE-2024-21400US	—	2.20% (82nd)	—	0.3.3	2024-03-12	1.0.0 → 0.3.3
CVE-2021-27075US	low2.7	1.37% (72nd)	—	publication	2021-03-11	1.0 → publication
CVE-2024-21403US	—	1.34% (71st)	—	0.3.3	2024-02-13	1.0.0 → 0.3.3
CVE-2024-21376US	—	1.17% (67th)	—	0.3.3	2024-02-13	1.0.0 → 0.3.3
CVE-2026-48567US	critical9.8	1.03% (64th)	—	no fix	2026-06-04	≤ vers:unknown/*
CVE-2026-59115US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-49163US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-47299US	—	1.01% (63rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68823US	—	0.93% (61st)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-56162US	—	0.90% (60th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-56163US	—OT elevated	0.90% (60th)	—	no fix	2026-07-24	2 versions
CVE-2026-57104US	critical9.6	0.86% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65806US	—OT elevated	0.84% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50516US	—OT elevated	0.83% (57th)	—	no fix	2026-08-11	3 versions
CVE-2026-41098US	—	0.83% (57th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-50481US	—	0.82% (57th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-70340US	high8.8OT elevated	0.80% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65668US	—	0.78% (56th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62830US	—OT elevated	0.78% (56th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-47655US	—	0.76% (55th)	—	no fix	2026-06-04	≤ vers:unknown/*
CVE-2026-47643US	—	0.75% (55th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-33105US	critical9.8OT elevated	0.72% (54th)	—	no fix	2026-04-03	2 versions
CVE-2026-56161US	—	0.69% (53rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62873US	—	0.61% (49th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62869US	—OT elevated	0.44% (38th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-32193US	—	0.34% (27th)	—	v0.20260213.5	2026-06-09	4 versions
CVE-2026-65673US	—	0.32% (25th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63522US	—	0.30% (22nd)	—	no fix	2026-08-11	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-264CWE-2643 CVEs
CWE-862Missing Authorization3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)22 CVEs
EUEU Vulnerability Database (ENISA)10 CVEs
USMicrosoft MSRC (CSAF)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan