PT-2021-2728 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in Azure Sphere operating systems. Exploitation of this issue may allow an attacker to execute arbitrary code...

Microsoft Azure Sphere Linux namespace ptrace unsigned code execution vulnerability

Summary An unsigned code execution vulnerability exists in the Linux namespace ptrace functionality of Microsoft Azure Sphere 21.01. Specially crafted shellcode could allow an adversary to execute unsigned code. An attacker can change the namespace and use ptrace to modify the code of a running...

Microsoft Azure Sphere mount namespace unsigned code execution vulnerability

Summary An unsigned code execution vulnerability exists in the mount namespace functionality of Microsoft Azure Sphere 21.01. A specially crafted shellcode could allow an adversary to execute an arbitrary binary in a tmpfs mount, leading to unsigned code execution. An attacker can switch to a new...

Microsoft Azure Sphere Kernel pwm_ioctl_apply_state kfree() code execution vulnerability

Summary A code execution vulnerability exists in the kernel pwmioctlapplystate functionality of Microsoft Azure Sphere 21.01. A specially crafted ioctl can lead to arbitrary kfree. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Microsoft Azure Sphere 21.01 Product...

Vulnerability of Azure Sphere operating systems, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Azure Sphere operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Azure Sphere operating system, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Azure Sphere operating system is related to incorrect code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2021-27080

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27074

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27074 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2021-27080 Azure Sphere Unsigned Code Execution Vulnerability

...

Microsoft Issues Security Patches for 89 Flaws — IE 0-Day Under Active Attacks

Microsoft plugged as many as 89 security flaws as part of its monthly Patch Tuesday updates released today, including fixes for an actively exploited zero-day in Internet Explorer that could permit an attacker to run arbitrary code on target machines. Of these flaws, 14 are listed as Critical, an...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

PT-2021-2292 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in the Azure Sphere operating system. It may allow a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2021-2402 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in Azure Sphere operating systems. Exploitation of this issue may allow an attacker to execute arbitrary code...

Microsoft Azure Sphere 访问控制错误漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. An access control error vulnerability exists in Microsoft Azure Sphere. The following products and versions are affected:Azure Sphere...

Microsoft Azure Sphere 安全漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A security vulnerability exists in Microsoft Azure Sphere Unsigned. The following products and versions are affected: Azure Sphere...

Microsoft Azure Sphere Code Execution Vulnerability

Microsoft Azure Sphere is an appliance from Microsoft USA that is used to provide security in cloud environments. A code execution vulnerability exists in Microsoft Azure Sphere version 20.07, which stems from the Regular Signed Code Execution feature allowing arbitrary code execution. An attacke...