Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-09	CVE-2019-0690	Improper Input Validation vulnerability in Microsoft products A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. low complexity microsoft CWE-20	6.8
2019-04-09	CVE-2019-0683	Incorrect Default Permissions vulnerability in Microsoft Windows 7 and Windows Server 2008 An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'. network high complexity microsoft CWE-276	5.9
2019-04-09	CVE-2019-0678	Incorrect Authorization vulnerability in Microsoft Edge An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'. network high complexity microsoft CWE-863	6.8
2019-04-08	CVE-2019-0614	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network low complexity microsoft	6.5
2019-04-08	CVE-2019-0612	Unspecified vulnerability in Microsoft Edge A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. network high complexity microsoft	5.3
2019-03-05	CVE-2019-0743	Cross-site Scripting vulnerability in Microsoft Team Foundation Server 2018 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. network low complexity microsoft CWE-79	5.4
2019-03-05	CVE-2019-0742	Cross-site Scripting vulnerability in Microsoft Team Foundation Server 2018 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. network low complexity microsoft CWE-79	5.4
2019-03-05	CVE-2019-0676	Unspecified vulnerability in Microsoft Internet Explorer 10/11 An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'. network low complexity microsoft	6.5
2019-03-05	CVE-2019-0670	Improper Input Validation vulnerability in Microsoft products A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'. network low complexity microsoft CWE-20	6.1
2019-03-05	CVE-2019-0669	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'. network low complexity microsoft	6.5