Microsoft Service Fabric vulnerabilities

2 CVEs affecting Microsoft Service Fabric, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-30137, published 2022-06-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-0902, published 2020-03-12. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation of Privilege'.
• CVE-2022-30137, published 2022-06-15. Medium severity, CVSS 6.7. EPSS: 1.1% chance of exploitation in the next 30 days. Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an…