Microsoft Azure Sphere vulnerabilities
29 known vulnerabilities affecting microsoft/azure_sphere.
Total CVEs
29
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH8MEDIUM20LOW1
Vulnerabilities
Page 1 of 2
CVE-2020-35608P3HIGHCVSS 7.8v20.072020-12-22
CVE-2020-35608 [HIGH] CWE-74 CVE-2020-35608: A code execution vulnerability exists in the normal world’s signed code execution functionality of M
A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerabil
nvd
CVE-2021-27080P3HIGHCVSS 8.8vN/A2021-03-11
CVE-2021-27080 [HIGH] CVE-2021-27080: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-16970P3HIGHCVSS 8.8fixed in 20.07≥ 20.00, < publication2020-11-11
CVE-2020-16970 [HIGH] CWE-415 CVE-2020-16970: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-16984P3HIGHCVSS 7.8fixed in 20.08≥ 20.00, < publication2020-11-11
CVE-2020-16984 [HIGH] CVE-2020-16984: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-16987P3HIGHCVSS 7.8fixed in 20.08≥ 20.00, < publication2020-11-11
CVE-2020-16987 [HIGH] CVE-2020-16987: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2021-28460P3HIGHCVSS 7.8vN/A2021-04-13
CVE-2021-28460 [HIGH] CVE-2021-28460: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-16991P4MEDIUMCVSS 5.5fixed in 20.07≥ 20.00, < publication2020-11-11
CVE-2020-16991 [MEDIUM] CVE-2020-16991: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-16994P4MEDIUMCVSS 5.5fixed in 20.07≥ 20.00, < publication2020-11-11
CVE-2020-16994 [MEDIUM] CVE-2020-16994: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-16982P4MEDIUMCVSS 6.2fixed in 20.07≥ 20.00, < publication2020-11-11
CVE-2020-16982 [MEDIUM] CVE-2020-16982: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2021-27074P4MEDIUMCVSS 5.5vN/A2021-03-11
CVE-2021-27074 [MEDIUM] CVE-2021-27074: Azure Sphere Unsigned Code Execution Vulnerability
Azure Sphere Unsigned Code Execution Vulnerability
nvd
CVE-2020-35609P4MEDIUMCVSS 5.5v20.052020-12-22
CVE-2020-35609 [MEDIUM] CWE-835 CVE-2020-35609: A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.
nvd
CVE-2020-16992HIGHCVSS 7.5≥ 20.00, < publication2020-11-11
CVE-2020-16992 [HIGH] Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-26429HIGHCVSS 7.7≥ 20.00, < 21.072021-08-12
CVE-2021-26429 [HIGH] Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
cvelistv5
CVE-2020-16988MEDIUMCVSS 6.9≥ 20.00, < publication2020-11-11
CVE-2020-16988 [MEDIUM] Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-41374MEDIUMCVSS 6.7≥ 20.00, < 22.072021-11-10
CVE-2021-41374 [MEDIUM] Azure Sphere Information Disclosure Vulnerability
Azure Sphere Information Disclosure Vulnerability
Azure Sphere Information Disclosure Vulnerability
cvelistv5
CVE-2020-16985MEDIUMCVSS 6.2≥ 20.00, < publication2020-11-11
CVE-2020-16985 [MEDIUM] Azure Sphere Information Disclosure Vulnerability
Azure Sphere Information Disclosure Vulnerability
Azure Sphere Information Disclosure Vulnerability
cvelistv5
CVE-2020-16990MEDIUMCVSS 6.2≥ 20.00, < publication2020-11-11
CVE-2020-16990 [MEDIUM] Azure Sphere Information Disclosure Vulnerability
Azure Sphere Information Disclosure Vulnerability
Azure Sphere Information Disclosure Vulnerability
cvelistv5
CVE-2020-16986MEDIUMCVSS 6.2≥ 20.00, < publication2020-11-11
CVE-2020-16986 [MEDIUM] Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
cvelistv5
CVE-2020-16981MEDIUMCVSS 6.1≥ 20.00, < publication2020-11-11
CVE-2020-16981 [MEDIUM] Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-26430MEDIUMCVSS 6.0≥ 20.00, < 21.072021-08-12
CVE-2021-26430 [MEDIUM] Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
cvelistv5
1 / 2Next →