Microsoft Azure Sphere Linux namespace ptrace unsigned code execution vulnerability

Summary An unsigned code execution vulnerability exists in the Linux namespace ptrace functionality of Microsoft Azure Sphere 21.01. Specially crafted shellcode could allow an adversary to execute unsigned code. An attacker can change the namespace and use ptrace to modify the code of a running...

Microsoft Azure Sphere Kernel pwm_ioctl_apply_state kfree() code execution vulnerability

Summary A code execution vulnerability exists in the kernel pwmioctlapplystate functionality of Microsoft Azure Sphere 21.01. A specially crafted ioctl can lead to arbitrary kfree. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Microsoft Azure Sphere 21.01 Product...

Vulnerability of Azure Sphere operating systems, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Azure Sphere operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Azure Sphere operating system, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Azure Sphere operating system is related to incorrect code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2021-27074

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27080

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27080

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27074

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27074 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2021-27074

CVE-2021-27074 is an Azure Sphere unsigned code execution vulnerability. Connected documents describe the issue as an unsigned code execution flaw in Azure Sphere, with one source attributing it to incorrect code generation management in the Azure Sphere OS. Practical impact stated across sources...

CVE-2021-27080

CVE-2021-27080 is listed as Azure Sphere Unsigned Code Execution Vulnerability. Connected sources confirm affected product is Azure Sphere and describe a vulnerability that could allow unsigned code execution (with MSRC labeling it as an Azure Sphere Unsigned Code Execution vulnerability). The co...

CVE-2021-27080 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2021-27080: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27074: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

Microsoft Issues Security Patches for 89 Flaws — IE 0-Day Under Active Attacks

Microsoft plugged as many as 89 security flaws as part of its monthly Patch Tuesday updates released today, including fixes for an actively exploited zero-day in Internet Explorer that could permit an attacker to run arbitrary code on target machines. Of these flaws, 14 are listed as Critical, an...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

PT-2021-2292 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in the Azure Sphere operating system. It may allow a remote attacker to execute arbitrary code. Recommendations: At the...