Vulnerabilities > Microsoft > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-07-14 CVE-2020-1445 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-07-14 CVE-2020-1444 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
network
low complexity
microsoft
4.3
2020-07-14 CVE-2020-1443 Unspecified vulnerability in Microsoft products
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'.
network
low complexity
microsoft
5.4
2020-07-14 CVE-2020-1442 Cross-site Scripting vulnerability in Microsoft Office Online Server and Office web Apps
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
network
low complexity
microsoft CWE-79
6.1
2020-07-14 CVE-2020-1434 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
5.3
2020-07-14 CVE-2020-1433 Unspecified vulnerability in Microsoft Edge
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2020-07-14 CVE-2020-1432 Unspecified vulnerability in Microsoft Internet Explorer 11
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'.
network
low complexity
microsoft
4.3
2020-07-14 CVE-2020-1426 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-07-14 CVE-2020-1420 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-07-14 CVE-2020-1419 Missing Initialization of Resource vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-909
5.5