Vulnerabilities > Microsoft > Windows 7 > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-0879 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-03-12 CVE-2020-0874 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-03-12 CVE-2020-0871 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-03-12 CVE-2020-0853 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2020-03-12 CVE-2020-0779 Link Following vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-59
5.5
2020-03-12 CVE-2020-0774 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2020-02-11 CVE-2020-0756 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-02-11 CVE-2020-0755 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-02-11 CVE-2020-0748 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'.
local
low complexity
microsoft
5.5
2020-02-11 CVE-2020-0744 Out-of-bounds Read vulnerability in Microsoft products
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-125
5.5