Lucene search

K
MicrosoftWindows 7

2372 matches found

CVE
CVE
added 2019/01/08 9:29 p.m.130 views

CVE-2019-0576

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.130 views

CVE-2019-0597

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.130 views

CVE-2019-0851

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.130 views

CVE-2019-1144

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.1AI score0.41601EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.130 views

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615.

5.5CVSS6.6AI score0.00681EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.130 views

CVE-2020-0729

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.30068EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.130 views

CVE-2020-17001

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00619EPSS
CVE
CVE
added 2014/02/12 4:50 a.m.129 views

CVE-2014-0263

The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with Internet Explorer, aka ...

9.3CVSS7.5AI score0.4649EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.129 views

CVE-2018-0868

Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how input is ...

7CVSS6.1AI score0.00381EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.129 views

CVE-2018-8442

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

5.5CVSS5.7AI score0.04881EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.129 views

CVE-2019-0660

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.129 views

CVE-2019-0722

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

9CVSS8.1AI score0.12753EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.129 views

CVE-2019-0882

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0961.

6.5CVSS6.2AI score0.25343EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.129 views

CVE-2019-1145

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.1AI score0.3187EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.129 views

CVE-2019-1364

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.

7.8CVSS7.6AI score0.08038EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.129 views

CVE-2020-1516

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The sec...

7.8CVSS8.1AI score0.00387EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.129 views

CVE-2021-36953

Windows TCP/IP Denial of Service Vulnerability

7.5CVSS7.9AI score0.0635EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.129 views

CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00253EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.129 views

CVE-2022-41047

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02096EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.129 views

CVE-2022-41076

PowerShell Remote Code Execution Vulnerability

8.5CVSS8.6AI score0.37991EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.129 views

CVE-2022-41086

Windows Group Policy Elevation of Privilege Vulnerability

6.4CVSS7.3AI score0.00043EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.128 views

CVE-2017-0161

The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain ce...

8.1CVSS7.7AI score0.14352EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.128 views

CVE-2018-0842

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka "Window...

7CVSS6.8AI score0.00825EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.128 views

CVE-2018-8468

An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008...

4.7CVSS5.8AI score0.05739EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.128 views

CVE-2019-0536

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS5.6AI score0.01077EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.128 views

CVE-2019-0581

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.128 views

CVE-2019-0602

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.128 views

CVE-2019-0616

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS
CVE
CVE
added 2019/04/09 2:29 a.m.128 views

CVE-2019-0756

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.16363EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.128 views

CVE-2019-0802

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849.

6.5CVSS6.7AI score0.22134EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.128 views

CVE-2019-0839

An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0838.

4.4CVSS5.7AI score0.00695EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.128 views

CVE-2019-0941

A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering.To exploit this vulnera...

7.5CVSS6.1AI score0.02839EPSS
CVE
CVE
added 2019/07/15 7:15 p.m.128 views

CVE-2019-1082

An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this vu...

7.8CVSS6.2AI score0.00372EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.128 views

CVE-2020-1564

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.09677EPSS
CVE
CVE
added 2021/06/08 11:15 p.m.128 views

CVE-2021-31973

Windows GPSVC Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.00665EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.128 views

CVE-2021-34504

Windows Address Book Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.01165EPSS
CVE
CVE
added 2022/06/15 10:15 p.m.128 views

CVE-2022-30164

Kerberos AppContainer Security Feature Bypass Vulnerability

7.8CVSS8AI score0.01073EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.128 views

CVE-2022-37985

Windows Graphics Component Information Disclosure Vulnerability

5.5CVSS6.6AI score0.0575EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.128 views

CVE-2023-21773

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00656EPSS
CVE
CVE
added 2010/09/15 7:0 p.m.127 views

CVE-2010-2729

The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create fi...

9.3CVSS9.2AI score0.79463EPSS
CVE
CVE
added 2017/02/20 4:59 p.m.127 views

CVE-2017-0038

gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap...

5.5CVSS4.7AI score0.82234EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.127 views

CVE-2017-0158

An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability."

7.6CVSS7.5AI score0.20303EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.127 views

CVE-2018-0817

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerab...

7CVSS6.2AI score0.00718EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.127 views

CVE-2018-8398

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

6.5CVSS5.7AI score0.14286EPSS
CVE
CVE
added 2019/04/09 2:29 a.m.127 views

CVE-2019-0767

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from C...

5.5CVSS5.5AI score0.00908EPSS
CVE
CVE
added 2019/04/09 3:29 a.m.127 views

CVE-2019-0772

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0666, CVE-2019-0667.

9.3CVSS7.9AI score0.44646EPSS
CVE
CVE
added 2019/04/09 3:29 a.m.127 views

CVE-2019-0782

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0775.

5.5CVSS5.5AI score0.00908EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.127 views

CVE-2019-0791

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795.

9.3CVSS8.8AI score0.28171EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.127 views

CVE-2019-0793

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795.

9.3CVSS8.8AI score0.28171EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.127 views

CVE-2019-0948

An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declarati...

5.5CVSS6AI score0.42662EPSS
Total number of security vulnerabilities2372