Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-10-10	CVE-2019-1343	Unspecified vulnerability in Microsoft products A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. network low complexity microsoft	6.5
2019-10-10	CVE-2019-1338	Unspecified vulnerability in Microsoft Windows 7 and Windows Server 2008 A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'. network high complexity microsoft	5.9
2019-10-10	CVE-2019-1337	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-10-10	CVE-2019-1334	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-10-10	CVE-2019-1330	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. network low complexity microsoft	6.5
2019-10-10	CVE-2019-1329	Cross-site Scripting vulnerability in Microsoft products An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. network low complexity microsoft CWE-79	5.4
2019-10-10	CVE-2019-1328	Cross-site Scripting vulnerability in Microsoft products A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. network low complexity microsoft CWE-79	5.4
2019-10-10	CVE-2019-1325	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system improperly handles specific local calls within Windows 7 for 32-bit systems, aka 'Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability'. local low complexity microsoft	5.5
2019-10-10	CVE-2019-1318	Authentication Bypass by Spoofing vulnerability in Microsoft products A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'. network high complexity microsoft CWE-290	5.9
2019-10-10	CVE-2019-1314	Unspecified vulnerability in Microsoft Windows 10 Mobile A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen, aka 'Windows 10 Mobile Security Feature Bypass Vulnerability'. low complexity microsoft	6.8