Issue summary:
Where to get details on CVEs associated with AKS.
Recommended solution:
AKS release page documents CVEs associated with each AKS version and also recommends the version to update to, to address those vulnerabilities.
You may also find this document helpful to understand Azure security baseline for Azure Kubernetes Service
Let me know if you have further questions.