Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-11	CVE-2019-1216	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-09-11	CVE-2019-1209	Information Exposure vulnerability in Microsoft Lync 2013 An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-09-11	CVE-2019-1142	Path Traversal vulnerability in Microsoft .Net Framework An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-22	5.5
2019-09-11	CVE-2019-0928	Improper Input Validation vulnerability in Microsoft Windows 10 and Windows Server 2016 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. low complexity microsoft CWE-20	6.2
2019-08-14	CVE-2019-1218	Cross-site Scripting vulnerability in Microsoft Outlook A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. network low complexity microsoft CWE-79	5.4
2019-08-14	CVE-2019-1204	Improper Input Validation vulnerability in Microsoft Office, Office 365 Proplus and Outlook An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. network low complexity microsoft CWE-20	4.3
2019-08-14	CVE-2019-1203	Cross-site Scripting vulnerability in Microsoft Sharepoint Enterprise Server and Sharepoint Server A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. network low complexity microsoft CWE-79	5.4
2019-08-14	CVE-2019-1202	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. local low complexity microsoft CWE-200	4.4
2019-07-29	CVE-2019-1105	Cross-site Scripting vulnerability in Microsoft Outlook A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages, aka 'Outlook for Android Spoofing Vulnerability'. network low complexity microsoft CWE-79	5.4
2019-07-19	CVE-2019-1167	Unspecified vulnerability in Microsoft Powershell Core 6.1/6.2 A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'. local high complexity microsoft	4.1