CVE-2021-24109

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft Azure Kubernetes ServiceN/A

References

Timeline

Published
Feb 25, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-24113.7Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module). Supported versions that are affected are 8.0.25 CVE-2021-241107.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-241117.5.NET Framework Denial of Service VulnerabilityCVE-2021-241128.1.NET Core Remote Code Execution VulnerabilityCVE-2021-241135.4Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2021-241145.7Microsoft Teams iOS Information Disclosure VulnerabilityCVE-2021-241159.8In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and heCVE-2021-241164.9In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain iCVE-2021-241174.9In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackerCVE-2021-241194.9In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers CVE-2021-24124.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 anCVE-2021-241225.9When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39
CVE-2021-24109: Medium severity, CVSS 6.8 | Vulnix