Vulnerabilities > Microsoft > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-04-08 CVE-2019-0614 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2019-04-08 CVE-2019-0612 Unspecified vulnerability in Microsoft Edge
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects.
network
high complexity
microsoft
5.3
2019-03-05 CVE-2019-0743 Cross-site Scripting vulnerability in Microsoft Team Foundation Server 2018
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
network
low complexity
microsoft CWE-79
5.4
2019-03-05 CVE-2019-0742 Cross-site Scripting vulnerability in Microsoft Team Foundation Server 2018
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
network
low complexity
microsoft CWE-79
5.4
2019-03-05 CVE-2019-0676 Unspecified vulnerability in Microsoft Internet Explorer 10/11
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2019-03-05 CVE-2019-0670 Improper Input Validation vulnerability in Microsoft products
A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.
network
low complexity
microsoft CWE-20
6.1
2019-03-05 CVE-2019-0669 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2019-03-05 CVE-2019-0664 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2019-03-05 CVE-2019-0663 Improper Initialization vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-665
5.5
2019-03-05 CVE-2019-0661 Unspecified vulnerability in Microsoft Windows 7, Windows Server 2008 and Windows Server 2012
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5