Windows 7 Security Vulnerabilities and Issues — Page 23 of Windows 7 CVE List

Lucene search

MicrosoftWindows 7

2372 matches found

CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.04156EPSS

CVE•added 2022/12/13 7:15 p.m.•105 views

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00288EPSS

CVE•added 2015/08/15 12:59 a.m.•104 views

CVE-2015-2464

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight b...

9.3CVSS7.3AI score0.52873EPSS

CVE•added 2018/03/14 5:29 p.m.•104 views

CVE-2018-0896

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

4.7CVSS4.7AI score0.06807EPSS

CVE•added 2018/05/09 7:29 p.m.•104 views

CVE-2018-8134

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

7CVSS7.5AI score0.07473EPSS

CVE•added 2018/06/14 12:29 p.m.•104 views

CVE-2018-8169

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server ...

7CVSS7.6AI score0.01451EPSS

CVE•added 2018/07/11 12:29 a.m.•104 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2...

6.8CVSS6.5AI score0.01151EPSS

CVE•added 2019/05/16 7:29 p.m.•104 views

CVE-2019-0961

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882.

6.5CVSS6.2AI score0.25343EPSS

CVE•added 2019/06/12 2:29 p.m.•104 views

CVE-2019-1028

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS8.2AI score0.00299EPSS

CVE•added 2019/09/11 10:15 p.m.•104 views

CVE-2019-1252

6.5CVSS6.7AI score0.3045EPSS

CVE•added 2019/10/10 2:15 p.m.•104 views

CVE-2019-1359

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358.

9.3CVSS8.8AI score0.58897EPSS

CVE•added 2019/12/10 10:15 p.m.•104 views

CVE-2019-1466

6.5CVSS6.7AI score0.26055EPSS

CVE•added 2020/03/12 4:15 p.m.•104 views

CVE-2020-0791

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.

7.8CVSS8.1AI score0.00526EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1542

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00513EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1545

7.8CVSS8.1AI score0.00514EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1546

7.8CVSS8.1AI score0.00514EPSS

CVE•added 2020/10/16 11:15 p.m.•104 views

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then insta...

7.8CVSS8.2AI score0.0066EPSS

CVE•added 2020/11/11 7:15 a.m.•104 views

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.0452EPSS

CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1668

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability

9.3CVSS8.2AI score0.03305EPSS

CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1673

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/04/13 8:15 p.m.•104 views

CVE-2021-28350

Windows GDI+ Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.00448EPSS

CVE•added 2022/01/11 9:15 p.m.•104 views

CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00372EPSS

CVE•added 2022/01/11 9:15 p.m.•104 views

CVE-2022-21904

Windows GDI Information Disclosure Vulnerability

7.5CVSS7.8AI score0.15777EPSS

CVE•added 2022/11/09 10:15 p.m.•104 views

CVE-2022-41090

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

5.9CVSS6.9AI score0.00215EPSS

CVE•added 2009/10/14 10:30 a.m.•103 views

CVE-2009-0090

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3)...

9.3CVSS9.4AI score0.41906EPSS

CVE•added 2012/05/09 12:55 a.m.•103 views

CVE-2012-0181

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain pri...

7.2CVSS6.2AI score0.05275EPSS

CVE•added 2013/07/10 3:46 a.m.•103 views

CVE-2013-3174

DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vuln...

9.3CVSS7.4AI score0.18461EPSS

CVE•added 2016/06/16 1:59 a.m.•103 views

CVE-2016-3223

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle LDAP authentication, which allows man-in-the-middle attackers to gain privileges by modifying group-policy update data...

9.3CVSS7.9AI score0.54795EPSS

CVE•added 2016/06/16 1:59 a.m.•103 views

CVE-2016-3236

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows remote attackers to redi...

10CVSS9.1AI score0.78002EPSS

CVE•added 2017/04/12 2:59 p.m.•103 views

CVE-2017-0166

An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elev...

9.3CVSS7.9AI score0.01531EPSS

CVE•added 2017/05/12 2:29 p.m.•103 views

CVE-2017-0268

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

5.9CVSS6.1AI score0.27804EPSS

CVE•added 2017/05/12 2:29 p.m.•103 views

CVE-2017-0280

The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.

7.1CVSS6.2AI score0.09629EPSS

CVE•added 2017/09/13 1:29 a.m.•103 views

CVE-2017-8676

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; ...

3.3CVSS4.9AI score0.02784EPSS

CVE•added 2018/03/14 5:29 p.m.•103 views

CVE-2018-0900

4.7CVSS4.7AI score0.06807EPSS

CVE•added 2018/11/09 9:29 p.m.•103 views

CVE-2018-17612

Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or softwa...

7.5CVSS7.4AI score0.01029EPSS

CVE•added 2018/10/10 1:29 p.m.•103 views

CVE-2018-8472

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

5.5CVSS5.7AI score0.00956EPSS

CVE•added 2018/10/10 1:29 p.m.•103 views

CVE-2018-8481

An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2...

3.1CVSS4.9AI score0.02409EPSS

CVE•added 2019/05/16 7:29 p.m.•103 views

CVE-2019-0758

6.5CVSS6AI score0.25343EPSS

CVE•added 2019/05/16 7:29 p.m.•103 views

CVE-2019-0893

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2019/07/15 7:15 p.m.•103 views

CVE-2019-1085

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.

7.8CVSS7.6AI score0.00278EPSS

CVE•added 2019/11/12 7:15 p.m.•103 views

CVE-2019-1393

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408, CVE-2019-1434.

7.8CVSS7.6AI score0.00817EPSS

CVE•added 2020/05/21 11:15 p.m.•103 views

CVE-2020-1175

9.3CVSS8AI score0.35463EPSS

CVE•added 2020/08/17 7:15 p.m.•103 views

CVE-2020-1551

7.8CVSS8.1AI score0.00681EPSS

CVE•added 2021/09/15 12:15 p.m.•103 views

CVE-2021-38635

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00456EPSS

CVE•added 2022/10/11 7:15 p.m.•103 views