Multiple vulnerabilities in Microsoft Azure

Beschreibung

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An unsigned code execution vulnerability in Azure Sphere can be exploited remotely to execute arbitrary code.
2. An information disclosure vulnerability in Azure Virtual Machine can be exploited remotely to obtain sensitive information.

Ursprüngliche Informationshinweise

• CVE-2021-27074

• CVE-2021-27075
• CVE-2021-27080

Ausnutzung

Public exploits exist for this vulnerability.

Betroffene Produkte

• Microsoft-Azure

CVE Liste

• CVE-2021-27074
  high
• CVE-2021-27075
  high
• CVE-2021-27080
  critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com