Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-11	CVE-2019-1220	Forced Browsing vulnerability in Microsoft Edge and Internet Explorer A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnerability'. network low complexity microsoft CWE-425	4.3
2019-09-11	CVE-2019-1219	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows Transaction Manager Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-09-11	CVE-2019-1216	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-09-11	CVE-2019-1209	Information Exposure vulnerability in Microsoft Lync 2013 An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-09-11	CVE-2019-1142	Path Traversal vulnerability in Microsoft .Net Framework An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-22	5.5
2019-09-11	CVE-2019-0928	Improper Input Validation vulnerability in Microsoft Windows 10 and Windows Server 2016 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. low complexity microsoft CWE-20	6.2
2019-08-14	CVE-2019-1218	Cross-site Scripting vulnerability in Microsoft Outlook A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. network low complexity microsoft CWE-79	5.4
2019-08-14	CVE-2019-1204	Improper Input Validation vulnerability in Microsoft Office, Office 365 Proplus and Outlook An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. network low complexity microsoft CWE-20	4.3
2019-08-14	CVE-2019-1203	Cross-site Scripting vulnerability in Microsoft Sharepoint Enterprise Server and Sharepoint Server A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. network low complexity microsoft CWE-79	5.4
2019-08-14	CVE-2019-1202	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. local low complexity microsoft CWE-200	4.4