Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Azure Sphere
Total 29 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-35821 1 Microsoft 1 Azure Sphere 2024-11-21 N/A 4.4 MEDIUM
Azure Sphere Information Disclosure Vulnerability
CVE-2021-42300 1 Microsoft 1 Azure Sphere 2024-11-21 4.6 MEDIUM 6.0 MEDIUM
Azure Sphere Tampering Vulnerability
CVE-2021-41376 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 2.3 LOW
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41375 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 4.4 MEDIUM
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41374 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 6.7 MEDIUM
Azure Sphere Information Disclosure Vulnerability
CVE-2021-36956 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 4.4 MEDIUM
Azure Sphere Information Disclosure Vulnerability
CVE-2021-28460 1 Microsoft 1 Azure Sphere 2024-11-21 4.6 MEDIUM 8.1 HIGH
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27080 1 Microsoft 1 Azure Sphere 2024-11-21 7.2 HIGH 9.3 CRITICAL
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27074 1 Microsoft 1 Azure Sphere 2024-11-21 4.9 MEDIUM 6.2 MEDIUM
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-26430 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 6.0 MEDIUM
Azure Sphere Denial of Service Vulnerability
CVE-2021-26429 1 Microsoft 1 Azure Sphere 2024-11-21 4.6 MEDIUM 7.7 HIGH
Azure Sphere Elevation of Privilege Vulnerability
CVE-2021-26428 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 4.4 MEDIUM
Azure Sphere Information Disclosure Vulnerability
CVE-2020-35609 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 5.5 MEDIUM
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.
CVE-2020-35608 1 Microsoft 1 Azure Sphere 2024-11-21 7.2 HIGH 7.8 HIGH
A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability.
CVE-2020-16994 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 7.3 HIGH
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16993 1 Microsoft 1 Azure Sphere 2024-11-21 4.6 MEDIUM 5.4 MEDIUM
Azure Sphere Elevation of Privilege Vulnerability
CVE-2020-16992 1 Microsoft 1 Azure Sphere 2024-11-21 7.2 HIGH 7.5 HIGH
Azure Sphere Elevation of Privilege Vulnerability
CVE-2020-16991 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 7.3 HIGH
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2020-16990 1 Microsoft 1 Azure Sphere 2024-11-21 2.1 LOW 6.2 MEDIUM
Azure Sphere Information Disclosure Vulnerability
CVE-2020-16989 1 Microsoft 1 Azure Sphere 2024-11-21 7.2 HIGH 5.4 MEDIUM
Azure Sphere Elevation of Privilege Vulnerability