Microsoft Azure Sphere — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Sphere, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (29)

• CVE-2021-27080 — CVSS 9.3 (critical): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16970 — CVSS 8.1 (high): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2021-28460 — CVSS 8.1 (high): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-35608 — CVSS 7.8 (high): A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A…
• CVE-2021-26429 — CVSS 7.7 (high): Azure Sphere Elevation of Privilege Vulnerability
• CVE-2020-16992 — CVSS 7.5 (high): Azure Sphere Elevation of Privilege Vulnerability
• CVE-2020-16994 — CVSS 7.3 (high): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16984 — CVSS 7.3 (high): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16987 — CVSS 7.3 (high): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16991 — CVSS 7.3 (high): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16988 — CVSS 6.9 (medium): Azure Sphere Elevation of Privilege Vulnerability
• CVE-2021-41374 — CVSS 6.7 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2021-27074 — CVSS 6.2 (medium): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2020-16985 — CVSS 6.2 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2020-16990 — CVSS 6.2 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2020-16986 — CVSS 6.2 (medium): Azure Sphere Denial of Service Vulnerability
• CVE-2020-16981 — CVSS 6.1 (medium): Azure Sphere Elevation of Privilege Vulnerability
• CVE-2020-16982 — CVSS 6.1 (medium): Azure Sphere Unsigned Code Execution Vulnerability
• CVE-2021-26430 — CVSS 6.0 (medium): Azure Sphere Denial of Service Vulnerability
• CVE-2021-42300 — CVSS 6.0 (medium): Azure Sphere Tampering Vulnerability
• CVE-2020-16983 — CVSS 5.7 (medium): Azure Sphere Tampering Vulnerability
• CVE-2020-35609 — CVSS 5.5 (medium): A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially…
• CVE-2020-16993 — CVSS 5.4 (medium): Azure Sphere Elevation of Privilege Vulnerability
• CVE-2020-16989 — CVSS 5.4 (medium): Azure Sphere Elevation of Privilege Vulnerability
• CVE-2022-35821 — CVSS 4.4 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2021-36956 — CVSS 4.4 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2021-26428 — CVSS 4.4 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2021-41375 — CVSS 4.4 (medium): Azure Sphere Information Disclosure Vulnerability
• CVE-2021-41376 — CVSS 2.3 (low): Azure Sphere Information Disclosure Vulnerability