Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-28	CVE-2023-1018	Out-of-bounds Read vulnerability in multiple products An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. local low complexity trustedcomputinggroup microsoft CWE-125	5.5
2022-11-09	CVE-2022-41049	Unspecified vulnerability in Microsoft products Windows Mark of the Web Security Feature Bypass Vulnerability network low complexity microsoft	5.4
2022-11-09	CVE-2022-41091	Unspecified vulnerability in Microsoft products Windows Mark of the Web Security Feature Bypass Vulnerability network low complexity microsoft	5.4
2022-05-10	CVE-2022-26925	Missing Authentication for Critical Function vulnerability in Microsoft products Windows LSA Spoofing Vulnerability network high complexity microsoft CWE-306	5.9
2022-05-10	CVE-2022-26934	Unspecified vulnerability in Microsoft products Windows Graphics Component Information Disclosure Vulnerability network low complexity microsoft	6.5
2019-04-09	CVE-2019-0703	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. network low complexity microsoft	6.5
2013-12-11	CVE-2013-3900	Improper Verification of Cryptographic Signature vulnerability in Microsoft products Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. local low complexity microsoft CWE-347	5.5