Kubernetes Archives

Microsoft October 2022 Security Updates addresses 84 vulnerabilities (13 rated Critical, 2 zero-days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / By Frank Crast / October 12, 2022 / Active Directory, Azure, CVE-2022-22035, CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-34689, CVE-2022-37968, CVE-2022-37976, CVE-2022-37979, CVE-2022-38000, CVE-2022-38047, CVE-2022-38048, CVE-2022-41033, CVE-2022-41034, CVE-2022-41038, CVE-2022-41081, EoP, Hyper-V, Kubernetes, Office, Point-to-Point, PPT, RCE, SharePoint, Vulnerabilities

The Microsoft October 2022 Security Updates includes patches and advisories for 84 vulnerabilities, including 2 zero-day and 13 Critical severity issues. However, the ProxyNotShell vulnerabilities were not addressed.

CRI-O vulnerability could allow an attacker to take control of Kubernetes environment

Container Security, Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / March 21, 2022 / Containers, CRI, CRI-O, Kubernetes, OCI, PKI

A CRI-O vulnerability CVE-2022-0811 in Kubernetes could allow an attacker to take control of affected Kubernetes environment, as well as other software/environments that use CRI-O runtime containers.

Microsoft February 2021 Security Updates, warns of Win32k Privilege Escalation vulnerability exploited in wild (updated)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / February 12, 2021 / .NET, Azure, CVE-2021-1732, Developer Tools, DNS Server, Edge, Exchange Server Office, IOT, Kubernetes, Microsoft Dynamics, PFX Encryption, PKU2U, PowerSHell, Skype for Business, SysInternals, System Center, TCP/IP, Visual Studio

Microsoft has released the February 2021 Security updates that includes patches for 56 vulnerabilities, 11 of those rated Critical. Moreover, the tech giant warned of a Win32k Privilege Escalation vulnerability CVE-2021-1732 exploited in wild.

Two Kubernetes vulnerabilities patched

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 18, 2019 / Go, Kubernetes, net/http

The Kubernetes patch team has released new patches for two Kubernetes vulnerabilities CVE-2019-16276 and CVE-2019-11253.