336 matches found
Remote code execution
Azure Sphere Unsigned Code Execution Vulnerability...
Remote code execution
Azure Sphere Unsigned Code Execution Vulnerability...
Privilege escalation
Azure Sphere Elevation of Privilege Vulnerability...
Information disclosure
Azure Sphere Information Disclosure Vulnerability...
Privilege escalation
Azure Sphere Elevation of Privilege Vulnerability...
Privilege escalation
Azure Sphere Elevation of Privilege Vulnerability...
Privilege escalation
Azure Sphere Elevation of Privilege Vulnerability...
Spoofing
Azure Sphere Tampering Vulnerability...
Remote code execution
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2020-16994 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2020-16994 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2020-16992 Azure Sphere Elevation of Privilege Vulnerability
...
CVE-2020-16993
CVE-2020-16993 concerns Microsoft Azure Sphere and describes a privilege-escalation vulnerability in the uid_map functionality of Azure Sphere 20.06 and earlier. The root cause is that the application-manager clears uniqueness checks among listed UIDs, allowing multiple component_ids to share the...
CVE-2020-16993 Azure Sphere Elevation of Privilege Vulnerability
...
CVE-2020-16990 Azure Sphere Information Disclosure Vulnerability
...
CVE-2020-16989
CVE-2020-16989 affects Microsoft Azure Sphere. The connected PT-Security entry indicates the issue involves errors in privilege management within the Azure Sphere OS, enabling a remote attacker to elevate privileges. Public references show the vulnerability is classified as a privilege escalation...
CVE-2020-16989 Azure Sphere Elevation of Privilege Vulnerability
...
CVE-2020-16991 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2020-16987
Azure Sphere contains a local unsigned code execution vulnerability in the normal world path via /proc/thread-self/mem allowing an attacker to write shellcode into a process memory region and execute it. The TALOS advisory for Azure Sphere 20.07 details a shellcode-based overwrite of non-writable...