Lucene search

K
MicrosoftWindows 7

2372 matches found

CVE
CVE
added 2021/07/14 6:15 p.m.150 views

CVE-2021-33757

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

9.8CVSS6.7AI score0.01355EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.150 views

CVE-2022-21913

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

7.5CVSS7AI score0.00961EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.150 views

CVE-2022-22011

Windows Graphics Component Information Disclosure Vulnerability

5.5CVSS7AI score0.00618EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.150 views

CVE-2022-35768

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00455EPSS
CVE
CVE
added 2015/03/11 10:59 a.m.149 views

CVE-2015-0096

Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse DLL in the cu...

9.3CVSS6.8AI score0.88654EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.149 views

CVE-2019-0847

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.149 views

CVE-2020-0635

An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0644.

7.8CVSS8.4AI score0.00404EPSS
CVE
CVE
added 2021/05/11 7:15 p.m.149 views

CVE-2021-31194

OLE Automation Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.06956EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.149 views

CVE-2022-24542

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.01719EPSS
CVE
CVE
added 2012/11/14 12:55 a.m.148 views

CVE-2012-1527

Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefca...

9.3CVSS6.4AI score0.46648EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.148 views

CVE-2021-26425

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00184EPSS
CVE
CVE
added 2021/07/16 9:15 p.m.148 views

CVE-2021-34457

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.6AI score0.0052EPSS
CVE
CVE
added 2022/06/15 10:15 p.m.148 views

CVE-2022-30153

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.07984EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.148 views

CVE-2023-21730

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00322EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.148 views

CVE-2023-21765

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00708EPSS
CVE
CVE
added 2013/01/09 6:9 p.m.147 views

CVE-2013-0013

The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against ...

5.8CVSS6.3AI score0.15613EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.147 views

CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serve...

9.3CVSS8.2AI score0.55029EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.147 views

CVE-2020-1509

An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...

8.8CVSS8.1AI score0.06869EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.147 views

CVE-2021-31183

Windows TCP/IP Driver Denial of Service Vulnerability

7.5CVSS7.9AI score0.14302EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.147 views

CVE-2021-33749

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.03544EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.147 views

CVE-2021-36937

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.00453EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.146 views

CVE-2019-0582

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.146 views

CVE-2019-0601

An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.

4.7CVSS6.2AI score0.00549EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.146 views

CVE-2019-0621

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.

5.5CVSS6.5AI score0.01706EPSS
CVE
CVE
added 2021/06/08 11:15 p.m.146 views

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability

8.8CVSS7.7AI score0.01378EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.146 views

CVE-2021-34533

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.00508EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.146 views

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

9.8CVSS9.6AI score0.01082EPSS
CVE
CVE
added 2022/06/15 10:15 p.m.146 views

CVE-2022-30143

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.03664EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.146 views

CVE-2022-34722

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.07019EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.146 views

CVE-2023-21548

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.1AI score0.00139EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.146 views

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.00254EPSS
CVE
CVE
added 2013/11/13 12:55 a.m.145 views

CVE-2013-3869

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to cause a denial of service (daemon hang) via a web-service r...

5CVSS6.5AI score0.0806EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.145 views

CVE-2018-0878

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how X...

3.1CVSS5AI score0.32398EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.145 views

CVE-2019-0625

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.145 views

CVE-2019-0735

An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.04145EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.145 views

CVE-2019-0943

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view,...

7.8CVSS7.8AI score0.04447EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.145 views

CVE-2021-24094

Windows TCP/IP Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.14023EPSS
CVE
CVE
added 2021/07/16 9:15 p.m.145 views

CVE-2021-34440

GDI+ Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00309EPSS
CVE
CVE
added 2022/06/15 10:15 p.m.145 views

CVE-2022-30149

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.0158EPSS
CVE
CVE
added 2011/10/12 2:52 a.m.144 views

CVE-2011-2003

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library ...

9.3CVSS7.6AI score0.70736EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.144 views

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via...

9.3CVSS7AI score0.39113EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.144 views

CVE-2019-0583

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.144 views

CVE-2019-0877

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879.

7.8CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.144 views

CVE-2020-1577

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit the vulnerabil...

7.8CVSS6.9AI score0.17285EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.144 views

CVE-2021-26426

Windows User Account Profile Picture Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00644EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.144 views

CVE-2022-26918

Windows Fax Compose Form Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01141EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.144 views

CVE-2022-30194

Windows WebBrowser Control Remote Code Execution Vulnerability

7.5CVSS8.7AI score0.0021EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.144 views

CVE-2023-21537

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00136EPSS
CVE
CVE
added 2019/07/29 1:48 p.m.143 views

CVE-2019-1100

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-1116.

6.5CVSS6.1AI score0.12437EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.143 views

CVE-2019-1280

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

9.3CVSS8.2AI score0.19713EPSS
Total number of security vulnerabilities2372