VDB
CVE-2022-35821
CVE-2022-35821
PUBLISHED
CVSS 4.400000095367432 MEDIUM
De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Azure</span>. Elles permettent à un attaquant de provoquer un déni de service, une élévation de privilèges, une atteinte à la confidentialité des données et une exécution de code à distance.
EPSS 1.58% · 81.9th percentile
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
1.58%
81.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | azure_sphere | 20.00, 0 |
| Microsoft | Azure Sphere | 20.00 |
| Microsoft | Azure |
Exploit Intelligence
Timeline
- Aug 9, 2022 CVE Published
- Aug 10, 2022 EPSS Score
- Sep 25, 2022 EPSS Score
- Nov 10, 2022 EPSS Score
- Dec 27, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 29, 2023 EPSS Score
- May 14, 2023 EPSS Score
- Aug 14, 2023 EPSS Score
- Sep 30, 2023 EPSS Score
- Nov 15, 2023 EPSS Score
References
- https://msrc.microsoft.com/update-guide/ advisory
- Azure Sphere Information Disclosure Vulnerability vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-35821 advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35821 url
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1497 url