Microsoft Azure Sphere vulnerabilities

29 CVEs affecting Microsoft Azure Sphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-35821, published 2022-08-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-35608, published 2020-12-22. High severity, CVSS 7.8. EPSS: 4.1% chance of exploitation in the next 30 days. A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an…
• CVE-2020-16985, published 2020-11-11. Medium severity, CVSS 6.2. EPSS: 1.7% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2020-16991, published 2020-11-11. High severity, CVSS 7.3. EPSS: 1.7% chance of exploitation in the next 30 days. Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16994, published 2020-11-11. High severity, CVSS 7.3. EPSS: 1.6% chance of exploitation in the next 30 days. Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16990, published 2020-11-11. Medium severity, CVSS 6.2. EPSS: 1.5% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2020-16992, published 2020-11-11. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Azure Sphere Elevation of Privilege Vulnerability
• CVE-2020-16970, published 2020-11-11. High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days. Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-35609, published 2020-12-22. Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days. A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An…
• CVE-2021-27074, published 2021-03-11. Medium severity, CVSS 6.2. EPSS: 1.3% chance of exploitation in the next 30 days. Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16984, published 2020-11-11. High severity, CVSS 7.3. EPSS: 1.3% chance of exploitation in the next 30 days. Azure Sphere Unsigned Code Execution Vulnerability

Latest

• CVE-2022-35821, published 2022-08-09. Medium severity, CVSS 4.4. EPSS: 1.1% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2021-42300, published 2021-11-10. Medium severity, CVSS 6.0. EPSS: 0.6% chance of exploitation in the next 30 days. Azure Sphere Tampering Vulnerability
• CVE-2021-41376, published 2021-11-10. Low severity, CVSS 2.3. EPSS: 0.9% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2021-41375, published 2021-11-10. Medium severity, CVSS 4.4. EPSS: 0.9% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2021-41374, published 2021-11-10. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2021-36956, published 2021-09-15. Medium severity, CVSS 4.4. EPSS: 0.9% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2021-26430, published 2021-08-12. Medium severity, CVSS 6.0. EPSS: 0.7% chance of exploitation in the next 30 days. Azure Sphere Denial of Service Vulnerability
• CVE-2021-26429, published 2021-08-12. High severity, CVSS 7.7. EPSS: 0.6% chance of exploitation in the next 30 days. Azure Sphere Elevation of Privilege Vulnerability
• CVE-2021-26428, published 2021-08-12. Medium severity, CVSS 4.4. EPSS: 0.9% chance of exploitation in the next 30 days. Azure Sphere Information Disclosure Vulnerability
• CVE-2021-28460, published 2021-04-13. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Azure Sphere Unsigned Code Execution Vulnerability