Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-15	CVE-2021-42293	Unspecified vulnerability in Microsoft 365 Apps and Office Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability network low complexity microsoft	6.5
2021-12-15	CVE-2021-42295	Unspecified vulnerability in Microsoft 365 Apps and Office Visual Basic for Applications Information Disclosure Vulnerability local low complexity microsoft	5.5
2021-12-15	CVE-2021-43255	Unspecified vulnerability in Microsoft 365 Apps and Office Microsoft Office Trust Center Spoofing Vulnerability local low complexity microsoft	5.5
2020-08-17	CVE-2020-1503	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. local low complexity microsoft	5.5
2020-08-17	CVE-2020-1502	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. local low complexity microsoft	5.5
2020-08-17	CVE-2020-1497	Unspecified vulnerability in Microsoft 365 Apps, Excel and Office An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. local low complexity microsoft	5.5
2020-08-17	CVE-2020-1493	Unspecified vulnerability in Microsoft 365 Apps, Office and Outlook An information disclosure vulnerability exists when attaching files to Outlook messages. local low complexity microsoft	5.5
2020-07-14	CVE-2020-1445	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. local low complexity microsoft	5.5
2020-07-14	CVE-2020-1342	Use of Uninitialized Resource vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. local low complexity microsoft CWE-908	5.5
2020-06-09	CVE-2020-1322	Use of Uninitialized Resource vulnerability in Microsoft 365 Apps, Office and Project An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'. network low complexity microsoft CWE-908	6.5