Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-10	CVE-2019-1461	Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Word A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'. network low complexity microsoft	6.5
2019-12-10	CVE-2019-1400	Information Exposure vulnerability in Microsoft Office and Office 365 Proplus An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-12-10	CVE-2019-1332	Cross-site Scripting vulnerability in Microsoft products A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server, aka 'Microsoft SQL Server Reporting Services XSS Vulnerability'. network low complexity microsoft CWE-79	6.1
2019-11-12	CVE-2019-1447	Origin Validation Error vulnerability in Microsoft Office Online Server A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. network low complexity microsoft CWE-346	5.4
2019-11-12	CVE-2019-1446	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-11-12	CVE-2019-1445	Origin Validation Error vulnerability in Microsoft Office Online Server A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. network low complexity microsoft CWE-346	5.4
2019-11-12	CVE-2019-1443	Unrestricted Upload of File with Dangerous Type vulnerability in Microsoft products An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The security update addresses the vulnerability by correcting how SharePoint checks file content., aka 'Microsoft SharePoint Information Disclosure Vulnerability'. network low complexity microsoft CWE-434	6.5
2019-11-12	CVE-2019-1442	Origin Validation Error vulnerability in Microsoft Sharepoint Server 2019 A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'. local low complexity microsoft CWE-346	5.5
2019-11-12	CVE-2019-1440	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-11-12	CVE-2019-1439	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5