1709

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-12	CVE-2019-1456	Out-of-bounds Write vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. network low complexity microsoft CWE-787	8.8
2019-11-12	CVE-2019-1440	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-11-12	CVE-2019-1439	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-11-12	CVE-2019-1438	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. local low complexity microsoft	7.8
2019-11-12	CVE-2019-1436	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-11-12	CVE-2019-1435	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. local low complexity microsoft	7.8
2019-11-12	CVE-2019-1433	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. local low complexity microsoft	7.8
2019-11-12	CVE-2019-1424	Unspecified vulnerability in Microsoft products A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'. network high complexity microsoft	8.1
2019-11-12	CVE-2019-1422	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-11-12	CVE-2019-1420	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft	7.8