1290 matches found
CVE-2020-16985
Azure Sphere Information Disclosure Vulnerability (CVE-2020-16985) affects Microsoft Azure Sphere. Public sources indicate an information disclosure flaw present in Azure Sphere versions prior to 20.09, enabling an attacker to gain unauthorized access to the device file system. Root cause details...
CVE-2020-16983 Azure Sphere Tampering Vulnerability
...
CVE-2020-16983 Azure Sphere Tampering Vulnerability
...
CVE-2020-16984 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2020-16983
Azure Sphere: A tampering vulnerability due to insufficient access control in the Azure Sphere OS allows privilege escalation. Affected: Microsoft Azure Sphere (OS). Root cause per PT-2020-4810 is insufficient access control; impact includes privilege escalation. No fix/version details are provid...
CVE-2020-16984
CVE-2020-16984 is an Azure Sphere unsigned code execution vulnerability affecting the Azure Sphere Linux-based OS. The root cause is the READ_IMPLIES_EXEC personality, which can cause PROT_READ pages to be treated as executable during memory operations (brk/mmap), potentially creating an executab...
CVE-2020-16981 Azure Sphere Elevation of Privilege Vulnerability
...
CVE-2020-16982 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2020-16981
Azure Sphere Elevation of Privilege (CVE-2020-16981) affects Microsoft Azure Sphere OS. The root cause is insufficient access control, per PT-2020-4818, with Azure Sphere versions prior to 20.08 stated as affected in CNVD-2020-63390. Impact is privilege escalation, enabling attacker to gain highe...
CVE-2020-16982
CVE-2020-16982 (Azure Sphere) has a concrete advisory in TALOS-2020-1132 describing a privilege-escalation flaw in the Azure Sphere mtd character device driver. The issue arises from a write path (MEMWRITE) in the MTD subsystem that does not verify FMODE_WRITE, allowing an attacker with read acce...
CVE-2020-16970
CVE-2020-16970 is a Microsoft Azure Sphere vulnerability involving the AF_AZSPIO socket path. The Talos analysis describes a memory-corruption flaw in the AF_AZSPIO socket flow that can trigger a double-free and out-of-bounds read in the kernel, potentially allowing shellcode execution and/or a d...
CVE-2020-16970 Azure Sphere Unsigned Code Execution Vulnerability
...
Patch Tuesday - November 2020
Jumping right back to a triple digit volume of vulnerabilities resolved, Microsoft covers 112 CVEs this November affecting products ranging from our standard Windows Operating Systems and Microsoft Office products to some new entries such as Azure Sphere. Microsoft CVE-2020-17087: Windows Kernel...
CVE-2020-16981: Undefined Security Weakness
Azure Sphere Elevation of Privilege Vulnerability...
CVE-2020-16994: Undefined Security Weakness
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2020-16989: Undefined Security Weakness
Azure Sphere Elevation of Privilege Vulnerability...
CVE-2020-16988: Undefined Security Weakness
Azure Sphere Elevation of Privilege Vulnerability...
CVE-2020-16984: Undefined Security Weakness
Azure Sphere Unsigned Code Execution Vulnerability...