Microsoft C Software Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft C Software Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-8119 — CVSS 5.6 (medium): A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the…
• CVE-2018-8479 — CVSS 5.6 (medium): A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform…