CVE-2023-3676

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Oct 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-367607.83D Viewer Remote Code Execution VulnerabilityCVE-2023-367616.5Microsoft Word Information Disclosure VulnerabilityCVE-2023-367627.3Microsoft Word Remote Code Execution VulnerabilityCVE-2023-367637.5Microsoft Outlook Information Disclosure VulnerabilityCVE-2023-367648.8Microsoft SharePoint Server Elevation of Privilege VulnerabilityCVE-2023-367659.8Microsoft Office Elevation of Privilege VulnerabilityCVE-2023-367665.5Microsoft Excel Information Disclosure VulnerabilityCVE-2023-367674.3Microsoft Office Security Feature Bypass VulnerabilityCVE-2023-367695.4Microsoft OneNote Spoofing VulnerabilityCVE-2023-36778.8The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and inclCVE-2023-367707.83D Builder Remote Code Execution VulnerabilityCVE-2023-367717.83D Builder Remote Code Execution Vulnerability
CVE-2023-3676: High severity, CVSS 8.8 | Vulnix