Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure RTOS can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Azure RTOS can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Azure Sphere can be exploited remotely to obtain sensitive information.
4. A tampering vulnerability in Azure Sphere can be exploited remotely to spoof user interface.
5. An information disclosure vulnerability in FSLogix can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2021-42301

• CVE-2021-42304
• CVE-2021-26444
• CVE-2021-41375
• CVE-2021-41374
• CVE-2021-42303
• CVE-2021-42300
• CVE-2021-42323
• CVE-2021-41376
• CVE-2021-42302
• CVE-2021-41373

Related products

• Microsoft-Azure

CVE list

• CVE-2021-42301
  warning
• CVE-2021-42304
  high
• CVE-2021-26444
  high
• CVE-2021-41375
  warning
• CVE-2021-41374
  high
• CVE-2021-42303
  high
• CVE-2021-42300
  high
• CVE-2021-42323
  warning
• CVE-2021-41376
  warning
• CVE-2021-42302
  high
• CVE-2021-41373
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com