Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-11	CVE-2019-1244	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-09-11	CVE-2019-1219	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows Transaction Manager Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-07-15	CVE-2019-1126	Improper Restriction of Excessive Authentication Attempts vulnerability in Microsoft products A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Directory.This security update corrects how ADFS handles external authentication requests., aka 'ADFS Security Feature Bypass Vulnerability'. network low complexity microsoft CWE-307	5.3
2019-07-15	CVE-2019-1108	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-07-15	CVE-2019-1097	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-07-15	CVE-2019-1096	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-07-15	CVE-2019-1095	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-07-15	CVE-2019-1094	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. network low complexity microsoft CWE-200	6.5
2019-07-15	CVE-2019-1093	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5
2019-07-15	CVE-2019-1091	Information Exposure vulnerability in Microsoft products An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'. local low complexity microsoft CWE-200	5.5