High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-14	CVE-2019-1145	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. network low complexity microsoft CWE-119	8.8
2019-08-14	CVE-2019-1144	Double Free vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. network low complexity microsoft CWE-415	8.8
2019-08-14	CVE-2019-1057	XXE vulnerability in Microsoft products A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. network high complexity microsoft CWE-611	7.5
2019-08-14	CVE-2019-0965	Improper Input Validation vulnerability in Microsoft products A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. high complexity microsoft CWE-20	7.6
2019-08-14	CVE-2019-0720	Improper Input Validation vulnerability in Microsoft products A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. network high complexity microsoft CWE-20	8.0
2019-07-15	CVE-2019-1130	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-07-15	CVE-2019-1129	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-07-15	CVE-2019-1128	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. network low complexity microsoft	8.8
2019-07-15	CVE-2019-1127	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. network low complexity microsoft	8.8
2019-07-15	CVE-2019-1124	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. network low complexity microsoft	8.8