Vulnerabilities > Microsoft

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-1174 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-08-14 CVE-2019-1173 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-08-14 CVE-2019-1172 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session, aka 'Windows Information Disclosure Vulnerability'.
network
microsoft CWE-200
4.3
2019-08-14 CVE-2019-1171 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage, aka 'SymCrypt Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
2.1
2019-08-14 CVE-2019-1170 Missing Authorization vulnerability in Microsoft products
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape, aka 'Windows NTFS Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-862
8.8
2019-08-14 CVE-2019-1169 Unspecified vulnerability in Microsoft Windows 7 and Windows Server 2008
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.2
2019-08-14 CVE-2019-1168 Unspecified vulnerability in Microsoft products
An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.2
2019-08-14 CVE-2019-1164 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.2
2019-08-14 CVE-2019-1163 Improper Validation of Integrity Check Value vulnerability in Microsoft products
A security feature bypass exists when Windows incorrectly validates CAB file signatures, aka 'Windows File Signature Security Feature Bypass Vulnerability'.
network
microsoft CWE-354
4.3
2019-08-14 CVE-2019-1162 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.2