First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2021-42302

MediumCVSS 6.6/10Last modified Aug 19, 2026

Description

Azure RTOS Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Azure Real Time Operating System	>= 6.0.0, < 6.1.9

References

Timeline

Published: Nov 10, 2021
Last modified: Aug 19, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-423036.6Azure RTOS Elevation of Privilege Vulnerability CVE-2021-423046.6Azure RTOS Elevation of Privilege Vulnerability CVE-2021-423056.5Microsoft Exchange Server Spoofing Vulnerability CVE-2021-423068.1An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentic CVE-2021-423074.3Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2021-423083.1Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2021-423098.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-42315.4A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments CVE-2021-423109.8Microsoft Defender for IoT Remote Code Execution Vulnerability CVE-2021-4231110.0Microsoft Defender for IoT Remote Code Execution Vulnerability CVE-2021-423127.8Microsoft Defender for IoT Elevation of Privilege Vulnerability CVE-2021-4231310.0Microsoft Defender for IoT Remote Code Execution Vulnerability

CVE-2021-42302: Medium severity, CVSS 6.6 | Vulnix