Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-01-04	CVE-2018-0754	Unspecified vulnerability in Microsoft products The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Information Disclosure Vulnerability". local low complexity microsoft	5.5
2018-01-04	CVE-2018-0753	Unspecified vulnerability in Microsoft products Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service Vulnerability". network high complexity microsoft	5.9
2018-01-04	CVE-2018-0750	Unspecified vulnerability in Microsoft Windows 7 and Windows Server 2008 The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability". local low complexity microsoft	5.5
2018-01-04	CVE-2018-0747	Unspecified vulnerability in Microsoft products The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". local high complexity microsoft	4.7
2018-01-04	CVE-2018-0746	Improper Initialization vulnerability in Microsoft products The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". local high complexity microsoft CWE-665	4.7
2018-01-04	CVE-2018-0745	Improper Initialization vulnerability in Microsoft Windows 10 and Windows Server 2016 The Windows kernel in Windows 10 version 1703. local high complexity microsoft CWE-665	4.7
2018-01-04	CVE-2018-0741	Unspecified vulnerability in Microsoft Windows 7 and Windows Server 2008 The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability". network high complexity microsoft	5.3
2017-12-12	CVE-2017-11939	Information Exposure vulnerability in Microsoft Office 2016 Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability". network low complexity microsoft CWE-200	6.5
2017-12-12	CVE-2017-11934	Information Exposure vulnerability in Microsoft Office 2013/2016 Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability". local low complexity microsoft CWE-200	5.5
2017-12-12	CVE-2017-11927	Information Exposure vulnerability in Microsoft products Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines the zone of a request, aka "Microsoft Windows Information Disclosure Vulnerability". network low complexity microsoft CWE-200	6.5