High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-14	CVE-2019-1149	Out-of-bounds Write vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. network low complexity microsoft CWE-787	8.8
2019-08-14	CVE-2019-1147	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. local low complexity microsoft	7.8
2019-08-14	CVE-2019-1146	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. local low complexity microsoft	7.8
2019-08-14	CVE-2019-1145	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. network low complexity microsoft CWE-119	8.8
2019-08-14	CVE-2019-1144	Double Free vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. network low complexity microsoft CWE-415	8.8
2019-08-14	CVE-2019-1057	XXE vulnerability in Microsoft products A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. network high complexity microsoft CWE-611	7.5
2019-08-14	CVE-2019-0720	Improper Input Validation vulnerability in Microsoft products A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. network high complexity microsoft CWE-20	8.0
2019-07-15	CVE-2019-1130	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-07-15	CVE-2019-1102	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. network low complexity microsoft	8.8
2019-07-15	CVE-2019-1089	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. local low complexity microsoft	7.8