CVE-2024-21400

—

CVSS 3.1

9.0 critical

EPSS

2%p81

Published

Mar 12, 2024 (Mar 12, 2024)

Modified

Sep 14, 2026

Description

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Vendors: microsoft
Products: confcom
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news3 stories

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V

Help Net SecurityMar 26, 12:34 UTC · Mar 26, 2024Vulnerability in the wildCVE-2024-21338 CVE-2024-21407 CVE-2024-21408+7 CVEs

60

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Vulnerability in the wildCVE-2024-21407 CVE-2024-21408 CVE-2024-21400+9 CVEs

60

Microsoft Patch Tuesday for March 2024 fixed 59 flaws

Security AffairsMar 12, 21:04 UTC · Mar 12, 2024Vulnerability in the wildCVE-2024-21407 CVE-2024-21408 CVE-2024-21334+1 CVEs

60