Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-14	CVE-2019-1226	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. network low complexity microsoft critical	9.8
2019-08-14	CVE-2019-1222	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. network low complexity microsoft critical	9.8
2019-08-14	CVE-2019-1213	Out-of-bounds Write vulnerability in Microsoft Windows Server 2008 A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. network low complexity microsoft CWE-787 critical	9.8
2019-08-14	CVE-2019-1212	Out-of-bounds Write vulnerability in Microsoft products A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. network low complexity microsoft CWE-787 critical	9.8
2019-08-14	CVE-2019-1182	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. network low complexity microsoft critical	9.8
2019-08-14	CVE-2019-1181	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. network low complexity microsoft critical	9.8
2019-08-14	CVE-2019-0736	Out-of-bounds Write vulnerability in Microsoft products A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. network low complexity microsoft CWE-787 critical	9.8
2019-07-15	CVE-2019-1109	Improper Input Validation vulnerability in Microsoft Office and Office 365 A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'. network low complexity microsoft CWE-20 critical	9.1
2019-07-15	CVE-2019-1072	Improper Input Validation vulnerability in Microsoft Azure Devops Server and Team Foundation Server A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'. network low complexity microsoft CWE-20 critical	9.8
2019-07-15	CVE-2019-0785	Out-of-bounds Write vulnerability in Microsoft products A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. network low complexity microsoft CWE-787 critical	9.8