Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure RTOS can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Azure RTOS can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Azure Sphere can be exploited remotely to obtain sensitive information.
4. A tampering vulnerability in Azure Sphere can be exploited remotely to spoof user interface.
5. An information disclosure vulnerability in FSLogix can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2021-42301

• CVE-2021-42304
• CVE-2021-26444
• CVE-2021-41375
• CVE-2021-41374
• CVE-2021-42303
• CVE-2021-42300
• CVE-2021-42323
• CVE-2021-41376
• CVE-2021-42302
• CVE-2021-41373

Related products

• Microsoft-Azure

CVE list

• CVE-2021-42301
  unknown
• CVE-2021-42304
  unknown
• CVE-2021-26444
  unknown
• CVE-2021-41375
  unknown
• CVE-2021-41374
  unknown
• CVE-2021-42303
  unknown
• CVE-2021-42300
  unknown
• CVE-2021-42323
  unknown
• CVE-2021-41376
  unknown
• CVE-2021-42302
  unknown
• CVE-2021-41373
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com