Kaspersky ID:
KLA12338
Дата обнаружения:
09/11/2021
Обновлено:
25/11/2021

Описание

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Azure RTOS can be exploited remotely to obtain sensitive information.
  2. An elevation of privilege vulnerability in Azure RTOS can be exploited remotely to gain privileges.
  3. An information disclosure vulnerability in Azure Sphere can be exploited remotely to obtain sensitive information.
  4. A tampering vulnerability in Azure Sphere can be exploited remotely to spoof user interface.
  5. An information disclosure vulnerability in FSLogix can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2021-42301
    unknown
  • CVE-2021-42304
    unknown
  • CVE-2021-26444
    unknown
  • CVE-2021-41375
    unknown
  • CVE-2021-41374
    unknown
  • CVE-2021-42303
    unknown
  • CVE-2021-42300
    unknown
  • CVE-2021-42323
    unknown
  • CVE-2021-41376
    unknown
  • CVE-2021-42302
    unknown
  • CVE-2021-41373
    unknown

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.