Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2019-11-12 CVE-2019-1440 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
5.5
2019-11-12 CVE-2019-1439 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-200
6.5
2019-11-12 CVE-2019-1436 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
5.5
2019-11-12 CVE-2019-1418 Information Exposure vulnerability in Microsoft products
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
3.3
2019-11-12 CVE-2019-1402 Information Exposure vulnerability in Microsoft Office and Office 365
An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
5.5
2019-11-12 CVE-2019-1381 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
5.5
2019-11-12 CVE-2019-1374 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
5.5
2019-11-12 CVE-2019-1370 Information Exposure vulnerability in Microsoft Open Enclave Software Development KIT
An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
5.5
2019-11-12 CVE-2019-1324 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-200
5.3
2019-11-12 CVE-2018-21026 Information Exposure vulnerability in Hitachi products
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.
network
low complexity
hitachi CWE-200
7.5