VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 31, 2023· Updated Jun 17, 2026

CVE-2023-3676

CVE-2023-3676

Description

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
k8s.io/kubernetesGo
>= 1.28.0, < 1.28.11.28.1
k8s.io/kubernetesGo
>= 1.27.0, < 1.27.51.27.5
k8s.io/kubernetesGo
>= 1.26.0, < 1.26.81.26.8
k8s.io/kubernetesGo
>= 1.25.0, < 1.25.131.25.13
k8s.io/kubernetesGo
< 1.24.171.24.17

Affected products

67

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.