High severity8.8NVD Advisory· Published Jun 9, 2026· Updated Jun 9, 2026
CVE-2026-32193
CVE-2026-32193
Description
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
6- Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilitiesCisco Talos Intelligence · Jun 9, 2026
- Patch Tuesday - June 2026Rapid7 Blog · Jun 9, 2026
- Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flawsBleepingComputer · Jun 9, 2026
- Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flawsBleepingComputer · Jun 9, 2026
- Microsoft Patch Tuesday June 2026 – 198 Vulnerabilities Fixed, Including 3 Zero-daysCyber Security News · Jun 9, 2026
- June 2026 Patch Tuesday: Microsoft Patches 206 Vulnerabilities Including Three Publicly Disclosed Zero-DaysCrowdStrike Blog