Lucene search

K
MicrosoftWindows 7

2372 matches found

CVE
CVE
added 2022/08/09 8:15 p.m.157 views

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0078EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.156 views

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

8.5CVSS7.1AI score0.04674EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.156 views

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.

9.3CVSS8.8AI score0.32912EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.156 views

CVE-2020-1537

An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. An...

7.8CVSS8.3AI score0.00513EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.156 views

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability

9CVSS9.3AI score0.04087EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.156 views

CVE-2022-26796

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00146EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.156 views

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

6.5CVSS7.6AI score0.00806EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.156 views

CVE-2022-41058

Windows Network Address Translation (NAT) Denial of Service Vulnerability

7.5CVSS7.9AI score0.02817EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.155 views

CVE-2018-8550

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

7.8CVSS7.2AI score0.11968EPSS
CVE
CVE
added 2021/06/08 11:15 p.m.155 views

CVE-2021-31958

Windows NTLM Elevation of Privilege Vulnerability

8.8CVSS8.3AI score0.01935EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.155 views

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

8.8CVSS8.2AI score0.00245EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.155 views

CVE-2022-30203

Windows Boot Manager Security Feature Bypass Vulnerability

7.4CVSS7.9AI score0.00477EPSS
CVE
CVE
added 2011/08/10 9:55 p.m.154 views

CVE-2011-1965

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."

7.1CVSS6.3AI score0.76338EPSS
CVE
CVE
added 2012/01/10 9:55 p.m.154 views

CVE-2012-0004

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, ...

9.3CVSS8AI score0.5796EPSS
CVE
CVE
added 2013/01/09 6:9 p.m.154 views

CVE-2013-0007

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

9.3CVSS7.5AI score0.26376EPSS
CVE
CVE
added 2017/05/12 2:29 p.m.154 views

CVE-2017-0267

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

5.9CVSS6.1AI score0.27804EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.154 views

CVE-2018-1016

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.3AI score0.57782EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.154 views

CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.154 views

CVE-2021-40447

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8AI score0.0027EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.154 views

CVE-2022-34708

Windows Kernel Information Disclosure Vulnerability

5.5CVSS7AI score0.01087EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.154 views

CVE-2022-38040

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.0384EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.154 views

CVE-2023-21750

Windows Kernel Elevation of Privilege Vulnerability

7.1CVSS7AI score0.00684EPSS
CVE
CVE
added 2012/01/10 9:55 p.m.153 views

CVE-2012-0013

Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce app...

9.3CVSS7.4AI score0.87476EPSS
CVE
CVE
added 2013/06/12 3:30 a.m.153 views

CVE-2013-3138

Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflo...

7.1CVSS6.7AI score0.8835EPSS
CVE
CVE
added 2021/06/08 11:15 p.m.153 views

CVE-2021-31959

Scripting Engine Memory Corruption Vulnerability

7.8CVSS7AI score0.0488EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.153 views

CVE-2021-33750

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01415EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.153 views

CVE-2022-30208

Windows Security Account Manager (SAM) Denial of Service Vulnerability

6.5CVSS7.4AI score0.00374EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.153 views

CVE-2022-33634

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00247EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.153 views

CVE-2022-37988

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00843EPSS
CVE
CVE
added 2013/10/09 2:53 p.m.152 views

CVE-2013-3128

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary...

9.3CVSS7.3AI score0.52356EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.152 views

CVE-2019-0881

An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

7.8CVSS7.5AI score0.01729EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.152 views

CVE-2022-22050

Windows Fax Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00667EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.152 views

CVE-2022-26810

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00271EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.152 views

CVE-2022-29127

BitLocker Security Feature Bypass Vulnerability

4.2CVSS6.5AI score0.00193EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.152 views

CVE-2023-21682

Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

5.3CVSS5.3AI score0.01967EPSS
CVE
CVE
added 2010/04/14 4:0 p.m.151 views

CVE-2010-0476

The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response ...

10CVSS7.7AI score0.49066EPSS
CVE
CVE
added 2012/12/12 12:55 a.m.151 views

CVE-2012-4786

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF)...

10CVSS7.4AI score0.52607EPSS
CVE
CVE
added 2013/09/11 2:3 p.m.151 views

CVE-2013-3868

Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP dire...

5CVSS6.5AI score0.39159EPSS
CVE
CVE
added 2015/08/15 12:59 a.m.151 views

CVE-2015-2454

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted ...

2.1CVSS6.3AI score0.01042EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.151 views

CVE-2019-0595

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.151 views

CVE-2019-1241

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248,...

9.3CVSS8.5AI score0.35463EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.151 views

CVE-2019-1242

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248,...

9.3CVSS8.5AI score0.35463EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.151 views

CVE-2021-36961

Windows Installer Denial of Service Vulnerability

6.1CVSS6.7AI score0.00276EPSS
CVE
CVE
added 2022/03/09 5:15 p.m.151 views

CVE-2022-24502

Windows HTML Platforms Security Feature Bypass Vulnerability

6.5CVSS6.1AI score0.01564EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.151 views

CVE-2022-26934

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.16898EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.151 views

CVE-2022-34701

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

7.5CVSS8.4AI score0.03028EPSS
CVE
CVE
added 2014/04/08 11:55 p.m.150 views

CVE-2014-0315

Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Tr...

6.9CVSS6.3AI score0.2964EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.150 views

CVE-2018-0742

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are han...

7.8CVSS5.5AI score0.02947EPSS
CVE
CVE
added 2018/01/04 2:29 p.m.150 views

CVE-2018-0747

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresse...

4.7CVSS4.6AI score0.06726EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.150 views

CVE-2019-1162

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view,...

7.8CVSS8.6AI score0.0047EPSS
Total number of security vulnerabilities2372