Windows 7@- Security Vulnerabilities and Issues — Page 10 of Windows 7@- CVE List

Lucene search

MicrosoftWindows 7-

1976 matches found

cve•added 2018/08/15 5:29 p.m.•139 views

CVE-2018-8344

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.2AI score0.16701EPSS

cve•added 2018/09/13 12:29 a.m.•139 views

CVE-2018-8475

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server ...

8.8CVSS8.3AI score0.16322EPSS

cve•added 2019/08/14 9:15 p.m.•139 views

CVE-2019-0736

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.To exploit the vulnerability, an attacker could send speci...

9.8CVSS9.2AI score0.1289EPSS

cve•added 2019/04/09 9:29 p.m.•139 views

CVE-2019-0844

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0840.

5.5CVSS6.1AI score0.00978EPSS

cve•added 2019/09/11 10:15 p.m.•139 views

CVE-2019-1271

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.00254EPSS

cve•added 2021/07/14 6:15 p.m.•139 views

CVE-2021-34492

Windows Certificate Spoofing Vulnerability

8.1CVSS8.3AI score0.01074EPSS

cve•added 2021/07/14 6:15 p.m.•139 views

CVE-2021-34497

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.01697EPSS

cve•added 2022/03/09 5:15 p.m.•139 views

CVE-2022-23298

Windows NT OS Kernel Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00356EPSS

cve•added 2023/01/10 10:15 p.m.•139 views

CVE-2023-21527

Windows iSCSI Service Denial of Service Vulnerability

7.5CVSS7.5AI score0.0447EPSS

cve•added 2018/01/04 2:29 p.m.•138 views

CVE-2018-0748

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory addresse...

7.8CVSS5.5AI score0.04004EPSS

cve•added 2019/01/08 9:29 p.m.•138 views

CVE-2019-0577

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS

cve•added 2019/04/09 12:29 a.m.•138 views

CVE-2019-0755

5.5CVSS5.6AI score0.00908EPSS

cve•added 2019/04/09 9:29 p.m.•138 views

CVE-2019-0846

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0847, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS

cve•added 2020/01/14 11:15 p.m.•138 views

CVE-2020-0625

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS

cve•added 2020/02/11 10:15 p.m.•138 views

CVE-2020-0738

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.

9.3CVSS8.6AI score0.21773EPSS

cve•added 2020/04/15 3:15 p.m.•138 views

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.

7.8CVSS7.8AI score0.08877EPSS

cve•added 2022/07/12 11:15 p.m.•138 views

CVE-2022-22022

Windows Print Spooler Elevation of Privilege Vulnerability

7.1CVSS7.7AI score0.00151EPSS

cve•added 2022/05/10 9:15 p.m.•138 views

CVE-2022-29137

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.0999EPSS

cve•added 2019/01/08 9:29 p.m.•137 views

CVE-2019-0579

9.3CVSS8AI score0.35437EPSS

cve•added 2019/04/09 9:29 p.m.•137 views

CVE-2019-0795

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.

9.3CVSS8.8AI score0.28171EPSS

cve•added 2019/04/09 9:29 p.m.•137 views

CVE-2019-0879

7.8CVSS8.4AI score0.2548EPSS

cve•added 2019/08/14 9:15 p.m.•137 views

CVE-2019-1149

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.3AI score0.37629EPSS

cve•added 2019/09/11 10:15 p.m.•137 views

CVE-2019-1282

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00573EPSS

cve•added 2020/08/17 7:15 p.m.•137 views

CVE-2020-1518

An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

7.8CVSS8.6AI score0.00514EPSS

cve•added 2021/09/15 12:15 p.m.•137 views

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

9.8CVSS6.7AI score0.01104EPSS

cve•added 2022/01/11 9:15 p.m.•137 views

CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS7.9AI score0.08945EPSS

cve•added 2022/01/11 9:15 p.m.•137 views

CVE-2022-21889

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS8.2AI score0.10382EPSS

cve•added 2022/04/15 7:15 p.m.•137 views

CVE-2022-26827

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00149EPSS

cve•added 2018/04/12 1:29 a.m.•136 views

CVE-2018-0967

A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

6.3CVSS6.3AI score0.22945EPSS

cve•added 2018/04/12 1:29 a.m.•136 views

CVE-2018-1012

9.3CVSS7.3AI score0.57782EPSS

cve•added 2019/01/08 9:29 p.m.•136 views

CVE-2019-0578

9.3CVSS8AI score0.35437EPSS

cve•added 2019/04/09 9:29 p.m.•136 views

CVE-2019-0792

9.3CVSS8.8AI score0.28171EPSS

cve•added 2019/04/09 9:29 p.m.•136 views

CVE-2019-0848

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.

5.5CVSS6AI score0.00996EPSS

cve•added 2019/06/12 2:29 p.m.•136 views

CVE-2019-0904

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8AI score0.10107EPSS

cve•added 2020/10/16 11:15 p.m.•136 views

CVE-2020-16887

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker coul...

7.8CVSS8.1AI score0.00717EPSS

cve•added 2020/10/16 11:15 p.m.•136 views

CVE-2020-16924

9.3CVSS8.3AI score0.10395EPSS

cve•added 2021/05/11 7:15 p.m.•136 views

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00383EPSS

cve•added 2022/01/11 9:15 p.m.•136 views

CVE-2022-21897

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00632EPSS

cve•added 2022/05/10 9:15 p.m.•136 views

CVE-2022-29121

Windows WLAN AutoConfig Service Denial of Service Vulnerability

6.5CVSS7.8AI score0.00409EPSS

cve•added 2022/08/09 8:15 p.m.•136 views

CVE-2022-34702

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.0018EPSS

cve•added 2022/09/13 7:15 p.m.•136 views

CVE-2022-34727

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.02358EPSS

cve•added 2022/11/09 10:15 p.m.•136 views

CVE-2022-41048

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02096EPSS

cve•added 2023/01/10 10:15 p.m.•136 views

CVE-2023-21757

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

7.5CVSS7.5AI score0.05106EPSS

cve•added 2012/07/10 9:55 p.m.•135 views

CVE-2012-0175

The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."

9.3CVSS7.8AI score0.47895EPSS

cve•added 2019/04/08 11:29 p.m.•135 views

CVE-2019-0614

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0774.

6.5CVSS6.7AI score0.25343EPSS

cve•added 2019/04/09 12:29 a.m.•135 views

CVE-2019-0690

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701.

6.8CVSS6.9AI score0.00375EPSS

cve•added 2019/04/09 9:29 p.m.•135 views

CVE-2019-0732

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.

7.8CVSS7.9AI score0.01235EPSS

cve•added 2019/04/09 2:29 a.m.•135 views

CVE-2019-0765

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.19221EPSS

cve•added 2020/10/16 11:15 p.m.•135 views

CVE-2020-16940

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context.To exploit this vulnerability, an attacker would first h...

7.8CVSS8AI score0.00507EPSS

cve•added 2021/04/13 8:15 p.m.•135 views

CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

Total number of security vulnerabilities1976