Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-11	CVE-2019-1245	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. network microsoft CWE-200	4.3
2019-09-11	CVE-2019-1244	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. network microsoft CWE-200	4.3
2019-09-11	CVE-2019-1232	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'. local low complexity microsoft	4.6
2019-09-11	CVE-2019-1220	Forced Browsing vulnerability in Microsoft Edge and Internet Explorer A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnerability'. network microsoft CWE-425	4.3
2019-09-11	CVE-2019-0928	Improper Input Validation vulnerability in Microsoft Windows 10 and Windows Server 2016 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. low complexity microsoft CWE-20	5.5
2019-09-03	CVE-2019-1125	An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. local high complexity microsoft redhat	5.6
2019-08-14	CVE-2019-1227	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. local low complexity microsoft CWE-200	5.5
2019-08-14	CVE-2019-1198	Unspecified vulnerability in Microsoft products An elevation of privilege exists in SyncController.dll. network high complexity microsoft	6.5
2019-08-14	CVE-2019-1187	XXE vulnerability in Microsoft products A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. local low complexity microsoft CWE-611	5.5
2019-08-14	CVE-2019-1184	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. local high complexity microsoft	6.7