Blog

CVE-2025-1097 Kubernetes: Vulnerability in Kubernetes NGINX Ingress Controller

Posted on Monday March 24, 2025

Ingress Controllers play a critical role within Kubernetes clusters by enabling the functionality of Ingress resources. Azure Kubernetes Service (AKS) is aware of several security vulnerabilities affecting the Kubernetes ingress-nginx controller, including CVE-2025-1098, CVE-2025-1974, CVE-2025-1097, CVE-2025-24514, and CVE-2025-24513. Customers running this controller on their AKS clusters are advised to update to the latest patched versions (v1.11.5 and v1.12.1) to mitigate potential risks.

CVE-2025-24513 Kubernetes: Vulnerability in Kubernetes NGINX Ingress Controller

Posted on Monday March 24, 2025

Ingress Controllers play a critical role within Kubernetes clusters by enabling the functionality of Ingress resources. Azure Kubernetes Service (AKS) is aware of several security vulnerabilities affecting the Kubernetes ingress-nginx controller, including CVE-2025-1098, CVE-2025-1974, CVE-2025-1097, CVE-2025-24514, and CVE-2025-24513. Customers running this controller on their AKS clusters are advised to update to the latest patched versions (v1.11.5 and v1.12.1) to mitigate potential risks.

Windows 10 is nearing its end of life — here’s what you need to know

Posted on Monday March 24, 2025

Microsoft will officially cease support for Windows 10 in October 2025, marking the end of an era for one of the most widely used operating systems. But there's no need to worry just yet, you still have plenty of time to prepare. To help you navigate this transition, we've put together a straightforward guide to explore your next steps.

CVE-2025-29795 Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

Posted on Friday March 21, 2025

Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

CVE-2025-29806 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Posted on Friday March 21, 2025

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Chromium: CVE-2025-2476 Use after free in Lens

Posted on Friday March 21, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Page:   123456...463