CVE-2024-43480: Microsoft azure service fabric heap-based buffer overflow vulnerability

Microsoft · Azure Service Fabric

Azure Service Fabric for Linux Remote Code Execution Vulnerability

6.6 CVSS 3.1 Medium EPSS 1.1% · top 35.7% CWE-122 · Heap-based buffer overflow

6.6CVSS 3.1 base score

1.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

1References

17 Jun 2026Last modified by NVD

Description

Azure Service Fabric for Linux Remote Code Execution Vulnerability

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Azure Service Fabric Microsoft

References

Link	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43480	PatchVendor Advisory

Track CVE-2024-43480 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2023-21531Microsoft azure service fabric improper access control vulnerabilityAzure Service Fabric Container Elevation of Privilege VulnerabilityEPSS 0.61%10 Jan 2023 6.8CVE-2021-27075Microsoft azure container instances vulnerabilityAzure Virtual Machine Information Disclosure VulnerabilityEPSS 1.4%11 Mar 2021 6.5CVE-2023-36868Microsoft azure service fabric vulnerabilityAzure Service Fabric on Windows Information Disclosure VulnerabilityEPSS 0.70%11 Jul 2023 6.0CVE-2025-21195Microsoft azure service fabric link following vulnerabilityImproper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.EPSS 0.33%8 Jul 2025 4.8CVE-2022-35829Microsoft azure service fabric vulnerabilityService Fabric Explorer Spoofing VulnerabilityEPSS 20%11 Oct 2022 4.7CVE-2023-23383Microsoft azure service fabric cross-site scripting vulnerabilityService Fabric Explorer Spoofing VulnerabilityEPSS 12%14 Mar 2023 9.3CVE-2026-94127F5 big-ip access policy manager heap-based buffer overflow vulnerabilityWhen a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution…KEVEPSS 2.2%22 Sep 2026 9.8CVE-2025-25249Fortinet FortiOS and FortiSwitchManager heap buffer overflow via crafted packetsA heap-based buffer overflow (CWE-122/CWE-787) in Fortinet FortiOS 6.4 through 7.6.3 and FortiSwitchManager 7.0 through 7.2.6 lets an unauthenticated…KEVEPSS 3.9%analysed13 Jan 2026

Source: NIST National Vulnerability Database (record CVE-2024-43480), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.