Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-07-14	CVE-2020-1442	Cross-site Scripting vulnerability in Microsoft Office Online Server and Office web Apps A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'. network low complexity microsoft CWE-79	6.1
2020-07-14	CVE-2020-1434	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'. local low complexity microsoft	5.3
2020-07-14	CVE-2020-1433	Unspecified vulnerability in Microsoft Edge An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'. network low complexity microsoft	6.5
2020-07-14	CVE-2020-1432	Unspecified vulnerability in Microsoft Internet Explorer 11 An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'. network low complexity microsoft	4.3
2020-07-14	CVE-2020-1426	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. local low complexity microsoft	5.5
2020-07-14	CVE-2020-1420	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'. local low complexity microsoft	5.5
2020-07-14	CVE-2020-1419	Missing Initialization of Resource vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. local low complexity microsoft CWE-909	5.5
2020-07-14	CVE-2020-1398	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.The security update addresses the vulnerability by ensuring that the Ease of Access dialog is handled properly., aka 'Windows Lockscreen Elevation of Privilege Vulnerability'. low complexity microsoft	6.8
2020-07-14	CVE-2020-1397	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'. network low complexity microsoft	6.5
2020-07-14	CVE-2020-1391	Unspecified vulnerability in Microsoft Windows 10 and Windows Server 2016 An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memory, aka 'Windows Agent Activation Runtime Information Disclosure Vulnerability'. local low complexity microsoft	5.5