First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2020-16988

MediumCVSS 6.9/10Last modified Jun 17, 2026

Description

Azure Sphere Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.9/10CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Azure Sphere	>= 20.00, < publication

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16988Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16988Patch, Vendor Advisory

Timeline

Published: Nov 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-169895.4Azure Sphere Elevation of Privilege Vulnerability CVE-2020-16997.5A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has bee CVE-2020-169906.2Azure Sphere Information Disclosure Vulnerability CVE-2020-169917.3Azure Sphere Unsigned Code Execution Vulnerability CVE-2020-169927.5Azure Sphere Elevation of Privilege Vulnerability CVE-2020-169935.4Azure Sphere Elevation of Privilege Vulnerability CVE-2020-169947.3Azure Sphere Unsigned Code Execution Vulnerability CVE-2020-169957.8<p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully CVE-2020-169966.5Kerberos Security Feature Bypass Vulnerability CVE-2020-169977.7Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-169987.0DirectX Elevation of Privilege Vulnerability CVE-2020-169995.5Windows WalletService Information Disclosure Vulnerability