Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-06-12	CVE-2019-1022	Unspecified vulnerability in Microsoft products An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. local low complexity microsoft	4.6
2019-06-12	CVE-2019-1021	Unspecified vulnerability in Microsoft products An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. local low complexity microsoft	4.6
2019-06-12	CVE-2019-1019	Information Exposure vulnerability in Microsoft products A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'. network microsoft CWE-200	6.0
2019-06-12	CVE-2019-1012	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network microsoft CWE-200	4.3
2019-06-12	CVE-2019-1010	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network microsoft CWE-200	4.3
2019-06-12	CVE-2019-1007	Improper Privilege Management vulnerability in Microsoft products An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-269	4.6
2019-06-12	CVE-2019-0990	Information Exposure vulnerability in Microsoft Chakracore and Edge An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. network microsoft CWE-200	4.3
2019-06-12	CVE-2019-0972	Unspecified vulnerability in Microsoft products This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'. network low complexity microsoft	6.8
2019-06-12	CVE-2019-0948	XXE vulnerability in Microsoft products An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity, aka 'Windows Event Viewer Information Disclosure Vulnerability'. network microsoft CWE-611	4.3
2019-06-12	CVE-2019-0941	Data Processing Errors vulnerability in Microsoft products A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests, aka 'Microsoft IIS Server Denial of Service Vulnerability'. network low complexity microsoft CWE-19	5.0