CVE-2022-30137: Azure Service Fabric Container Elevation of Privilege Vulnerability

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-15 · updated 2026-06-17

Description

Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.

Affected products

Microsoft Service Fabric: all versions
Microsoft Service Fabric: all versions

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30137

Get alerted when CVE-2022-30137 or the next vulnerability affects your stack