|
221521
|
3.3 |
LOW
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2019 windows_rt_8.1 windows_7
|
A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'.
|
NVD-CWE-noinfo
|
CVE-2019-1488
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221522
|
6.5 |
MEDIUM
Network
|
microsoft
|
authentication_library
|
An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or later exists under specific conditions, aka 'Microsoft Authentication Library for …
|
CWE-200
Information Exposure
|
CVE-2019-1487
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221523
|
6.1 |
MEDIUM
Network
|
microsoft
|
visual_studio_2019 visual_studio_live_share
|
A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Sha…
|
CWE-601
Open Redirect
|
CVE-2019-1486
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221524
|
7.5 |
HIGH
Network
|
microsoft
|
internet_explorer
|
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-1485
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221525
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019
|
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
|
CWE-20
Improper Input Validation
|
CVE-2019-1484
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221526
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on th…
|
CWE-59
Link Following
|
CVE-2019-1483
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221527
|
4.3 |
MEDIUM
Network
|
microsoft
|
windows_7
|
An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-1481
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221528
|
4.3 |
MEDIUM
Network
|
microsoft
|
windows_7
|
An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-1480
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221529
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_7
|
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
|
NVD-CWE-noinfo
|
CVE-2019-1478
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221530
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2019 windows_10
|
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vuln…
|
NVD-CWE-noinfo
|
CVE-2019-1477
|
2024-11-21 13:36 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|