Csharp Software Development KIT

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-10	CVE-2018-8531	Out-of-bounds Write vulnerability in Microsoft products A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge. network low complexity microsoft CWE-787	8.8
2018-05-09	CVE-2018-8119	Improper Certificate Validation vulnerability in Microsoft products A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the AMQP protocol, aka "Azure IoT SDK Spoofing Vulnerability." This affects C# SDK, C SDK, Java SDK. network high complexity microsoft CWE-295	5.6