Azure Sphere Security Vulnerabilities and Issues — Azure Sphere CVE List

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses t...

7.8CVSS7.7AI score0.00242EPSS

CVE•added 2020/11/11 7:15 a.m.•65 views

CVE-2020-16984

Azure Sphere Unsigned Code Execution Vulnerability

7.8CVSS7.3AI score0.00221EPSS

CVE•added 2020/11/11 7:15 a.m.•65 views

CVE-2020-16988

Azure Sphere Elevation of Privilege Vulnerability

7.2CVSS6.7AI score0.00158EPSS

CVE•added 2020/12/22 8:15 p.m.•65 views

CVE-2020-35609

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.

5.5CVSS5.3AI score0.00166EPSS

CVE•added 2020/11/11 7:15 a.m.•64 views

CVE-2020-16986

Azure Sphere Denial of Service Vulnerability

6.2CVSS6.2AI score0.00283EPSS

CVE•added 2020/11/11 7:15 a.m.•64 views

CVE-2020-16991

Azure Sphere Unsigned Code Execution Vulnerability

7.3CVSS7.3AI score0.00234EPSS

CVE•added 2020/11/11 7:15 a.m.•63 views

CVE-2020-16985

Azure Sphere Information Disclosure Vulnerability