NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC3 · 1 read

CVE-2023-3955

CVSS 3.1: 8.8 high
EPSS: 4%p91
Published: Oct 31, 2023 · Oct 31, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-3955 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Vendors: kubernetes

Products: kubernetes

Weakness: CWE-20

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news

4 stories

Week in review: 18 free Microsoft Azure cybersecurity resources, K8 vulnerability allows RCE

Help Net SecuritySep 24, 00:00 UTC · Sep 24, 2023VulnerabilityExploitedCVE-2023-41179 CVE-2023-41992 CVE-2023-41991+62 · 1 read

60

Kubernetes vulnerability allows RCE on Windows endpoints (CVE-2023-3676)

Help Net SecurityJan 9, 12:29 UTC · Jan 9, 2024VulnerabilityCVE-2023-3676 CVE-2023-3893 CVE-2023-39552

47

Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2023VulnerabilityCVE-2023-3676 CVE-2023-3893 CVE-2023-39553 · 1 read

47

Kubernetes flaws could lead to remote code execution on Windows endpoints

Security AffairsSep 14, 07:18 UTC · Sep 14, 2023VulnerabilityCVE-2023-3676 CVE-2023-3893 CVE-2023-39551 · 1 read

47