Azure Kubernetes Service vulnerabilities

3 known vulnerabilities in Azure Kubernetes Service from Microsoft. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Azure Kubernetes Service: Missing Authentication for Critical Functionality

  CVE-2026-56163Jul 24, 2026Microsoft

  Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

• 8.8 High severity

  Azure Kubernetes Service: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-32193Jun 9, 2026Microsoft

  Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.

• 7.5 High severity

  HTTP/2 Rapid Reset Attack Exploited

  CVE-2023-44487Oct 10, 2023IETFEPSS 100%

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.