Windows 7 Security Vulnerabilities and Issues — Page 7 of Windows 7 CVE List

Lucene search

MicrosoftWindows 7

2368 matches found

CVE•added 2015/03/06 5:59 p.m.•168 views

CVE-2015-1637

Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for ...

4.3CVSS6.2AI score0.91911EPSS

CVE•added 2015/12/09 11:59 a.m.•168 views

CVE-2015-6108

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and ...

9.3CVSS7.4AI score0.44437EPSS

CVE•added 2018/10/10 1:29 p.m.•168 views

CVE-2018-8413

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Serve...

9.3CVSS7.9AI score0.51675EPSS

CVE•added 2021/07/16 9:15 p.m.•168 views

CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability

8.8CVSS8AI score0.01423EPSS

CVE•added 2022/06/15 10:15 p.m.•168 views

CVE-2022-30146

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.04279EPSS

CVE•added 2022/08/09 8:15 p.m.•168 views

CVE-2022-34707

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00278EPSS

CVE•added 2023/01/10 10:15 p.m.•168 views

CVE-2023-21561

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0023EPSS

CVE•added 2023/01/10 10:15 p.m.•168 views

CVE-2023-21732

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00887EPSS

CVE•added 2018/11/14 1:29 a.m.•167 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wi...

5.5CVSS6.7AI score0.0069EPSS

CVE•added 2019/09/11 10:15 p.m.•167 views

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-1248,...

9.3CVSS8.5AI score0.35463EPSS

CVE•added 2020/10/16 11:15 p.m.•167 views

CVE-2020-16896

An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.T...

7.5CVSS7.6AI score0.1565EPSS

CVE•added 2021/05/11 7:15 p.m.•167 views

CVE-2021-31186

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

7.4CVSS7.6AI score0.1548EPSS

CVE•added 2022/05/10 9:15 p.m.•167 views

CVE-2022-29112

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.16898EPSS

CVE•added 2022/06/15 10:15 p.m.•167 views

CVE-2022-30161

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.09164EPSS

CVE•added 2022/07/12 11:15 p.m.•167 views

CVE-2022-30202

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

7CVSS7.7AI score0.02101EPSS

CVE•added 2022/10/11 7:15 p.m.•167 views

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability

7.1CVSS7.6AI score0.01838EPSS

CVE•added 2020/08/17 7:15 p.m.•166 views

CVE-2020-1492

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS8.1AI score0.14799EPSS

CVE•added 2021/02/25 11:15 p.m.•166 views

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.14391EPSS

CVE•added 2021/07/16 9:15 p.m.•166 views

CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.0135EPSS

CVE•added 2022/05/10 9:15 p.m.•166 views

CVE-2022-29128

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

9CVSS9.4AI score0.13405EPSS

CVE•added 2022/07/12 11:15 p.m.•166 views

CVE-2022-30220

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.06438EPSS

CVE•added 2021/09/15 12:15 p.m.•165 views

CVE-2021-36968

Windows DNS Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00249EPSS

CVE•added 2022/03/09 5:15 p.m.•165 views

CVE-2022-23283

Windows ALPC Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00118EPSS

CVE•added 2023/01/10 10:15 p.m.•165 views

CVE-2023-21560

Windows Boot Manager Security Feature Bypass Vulnerability

6.6CVSS6.6AI score0.00583EPSS

CVE•added 2012/08/15 1:55 a.m.•164 views

CVE-2012-1851

Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler ...

10CVSS7.5AI score0.67848EPSS

CVE•added 2021/09/15 12:15 p.m.•164 views

CVE-2021-26435

Windows Scripting Engine Memory Corruption Vulnerability

8.1CVSS7.9AI score0.03809EPSS

CVE•added 2021/12/15 3:15 p.m.•164 views

CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

7.5CVSS8.5AI score0.06336EPSS

CVE•added 2019/03/06 12:0 a.m.•163 views

CVE-2019-0626

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

9.8CVSS9.5AI score0.60814EPSS

CVE•added 2019/07/15 7:15 p.m.•163 views

CVE-2019-1071

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.

5.5CVSS5.8AI score0.00667EPSS

CVE•added 2020/10/16 11:15 p.m.•163 views

CVE-2020-16949

A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.Exploitation of the vulnerability requires that a spe...

7.5CVSS4.8AI score0.03814EPSS

CVE•added 2020/11/11 7:15 a.m.•163 views

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.17242EPSS

CVE•added 2022/07/12 11:15 p.m.•163 views

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00242EPSS

CVE•added 2022/07/12 11:15 p.m.•163 views

CVE-2022-22037

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

8.5CVSS7.7AI score0.06491EPSS

CVE•added 2018/01/04 2:29 p.m.•162 views

CVE-2018-0749

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

7.8CVSS5.5AI score0.12853EPSS

CVE•added 2018/04/12 1:29 a.m.•162 views

CVE-2018-1010

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.3AI score0.41385EPSS

CVE•added 2022/04/15 7:15 p.m.•162 views

CVE-2022-24493

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS6.9AI score0.00435EPSS

CVE•added 2022/05/10 9:15 p.m.•162 views

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01069EPSS

CVE•added 2022/06/15 10:15 p.m.•162 views

CVE-2022-30163

Windows Hyper-V Remote Code Execution Vulnerability

8.5CVSS9.1AI score0.00705EPSS

CVE•added 2016/02/10 11:59 a.m.•161 views

CVE-2016-0051

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnera...

7.8CVSS7.5AI score0.7854EPSS

CVE•added 2021/10/13 1:15 a.m.•161 views

CVE-2021-26442

Windows HTTP.sys Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00606EPSS

CVE•added 2018/06/14 12:29 p.m.•160 views

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server ...

7.6CVSS8AI score0.12893EPSS

CVE•added 2018/09/13 12:29 a.m.•160 views

CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serve...

9.3CVSS8.2AI score0.54233EPSS

CVE•added 2018/11/14 1:29 a.m.•160 views

CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 201...

9.3CVSS7.7AI score0.73398EPSS

Web

CVE•added 2020/06/09 8:15 p.m.•160 views

CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.30214EPSS

CVE•added 2021/09/15 12:15 p.m.•160 views

CVE-2021-38628

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS8AI score0.0033EPSS

CVE•added 2022/05/10 9:15 p.m.•160 views

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.09826EPSS

CVE•added 2022/04/15 7:15 p.m.•160 views

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00122EPSS

CVE•added 2012/05/09 12:55 a.m.•159 views

CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411...

9.3CVSS7.4AI score0.6658EPSS

CVE•added 2013/01/09 6:9 p.m.•159 views

CVE-2013-0007

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

9.3CVSS7.5AI score0.26376EPSS

CVE•added 2022/10/11 7:15 p.m.•159 views

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.02121EPSS

Total number of security vulnerabilities2368