Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftWindows 7-

1976 matches found

CVE
CVE•added 2018/03/14 5:29 p.m.•105 views

CVE-2018-0813

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way obje...

5.5CVSS4.8AI score0.06807EPSS
CVE
CVE•added 2018/06/14 12:29 p.m.•105 views

CVE-2018-8207

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

4.7CVSS5.3AI score0.01934EPSS
CVE
CVE•added 2018/09/13 12:29 a.m.•105 views

CVE-2018-8419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Win...

5.5CVSS5.5AI score0.04881EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8486

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows S...

5.5CVSS5.8AI score0.01054EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8489

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Wind...

8.4CVSS7.8AI score0.00751EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•105 views

CVE-2019-0894

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0895, CVE-2019-0896,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•105 views

CVE-2019-0895

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0896,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•105 views

CVE-2019-1344

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.08119EPSS
CVE
CVE•added 2020/01/14 11:15 p.m.•105 views

CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639.

5.5CVSS6.6AI score0.00681EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•105 views

CVE-2020-1011

An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015.

7.8CVSS7.8AI score0.08877EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•105 views

CVE-2020-1251

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1253, CVE-2020-1310.

7.2CVSS7AI score0.00798EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•105 views

CVE-2020-1270

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00681EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•105 views

CVE-2020-1534

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

7.8CVSS8.2AI score0.13239EPSS
CVE
CVE•added 2020/12/10 12:15 a.m.•105 views

CVE-2020-16960

Windows Backup Engine Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.01021EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•105 views

CVE-2021-1671

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE•added 2021/02/25 11:15 p.m.•105 views

CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00152EPSS
CVE
CVE•added 2021/09/15 12:15 p.m.•105 views

CVE-2021-36969

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00448EPSS
CVE
CVE•added 2021/11/10 1:19 a.m.•105 views

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00193EPSS
CVE
CVE•added 2022/10/11 7:15 p.m.•105 views

CVE-2022-30198

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00247EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35834

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.03169EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.04156EPSS
CVE
CVE•added 2022/12/13 7:15 p.m.•105 views

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00288EPSS
CVE
CVE•added 2015/08/15 12:59 a.m.•104 views

CVE-2015-2464

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight b...

9.3CVSS7.3AI score0.52873EPSS
CVE
CVE•added 2018/03/14 5:29 p.m.•104 views

CVE-2018-0896

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

4.7CVSS4.7AI score0.06807EPSS
CVE
CVE•added 2018/06/14 12:29 p.m.•104 views

CVE-2018-8169

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server ...

7CVSS7.6AI score0.01451EPSS
CVE
CVE•added 2018/07/11 12:29 a.m.•104 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2...

6.8CVSS6.5AI score0.01151EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•104 views

CVE-2019-0961

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882.

6.5CVSS6.2AI score0.25343EPSS
CVE
CVE•added 2019/06/12 2:29 p.m.•104 views

CVE-2019-1028

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS8.2AI score0.00299EPSS
CVE
CVE•added 2019/09/11 10:15 p.m.•104 views

CVE-2019-1252

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286.

6.5CVSS6.7AI score0.3045EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•104 views

CVE-2019-1359

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358.

9.3CVSS8.8AI score0.58897EPSS
CVE
CVE•added 2019/12/10 10:15 p.m.•104 views

CVE-2019-1466

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1467.

6.5CVSS6.7AI score0.26055EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•104 views

CVE-2020-0791

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.

7.8CVSS8.1AI score0.00526EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1542

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1545

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00514EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1546

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00514EPSS
CVE
CVE•added 2020/10/16 11:15 p.m.•104 views

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then insta...

7.8CVSS8.2AI score0.0066EPSS
CVE
CVE•added 2020/11/11 7:15 a.m.•104 views

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.0452EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1668

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability

9.3CVSS8.2AI score0.03305EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1673

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE•added 2021/04/13 8:15 p.m.•104 views

CVE-2021-28350

Windows GDI+ Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.00448EPSS
CVE
CVE•added 2022/01/11 9:15 p.m.•104 views

CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00372EPSS
CVE
CVE•added 2022/01/11 9:15 p.m.•104 views

CVE-2022-21904

Windows GDI Information Disclosure Vulnerability

7.5CVSS7.8AI score0.15777EPSS
CVE
CVE•added 2022/11/09 10:15 p.m.•104 views

CVE-2022-41090

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

5.9CVSS6.9AI score0.00215EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•103 views

CVE-2009-0090

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3)...

9.3CVSS9.4AI score0.41906EPSS
CVE
CVE•added 2017/04/12 2:59 p.m.•103 views

CVE-2017-0166

An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elev...

9.3CVSS7.9AI score0.01531EPSS
CVE
CVE•added 2017/05/12 2:29 p.m.•103 views

CVE-2017-0268

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

5.9CVSS6.1AI score0.27804EPSS
CVE
CVE•added 2018/03/14 5:29 p.m.•103 views

CVE-2018-0900

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

4.7CVSS4.7AI score0.06807EPSS
CVE
CVE•added 2018/11/09 9:29 p.m.•103 views

CVE-2018-17612

Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or softwa...

7.5CVSS7.4AI score0.01029EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•103 views

CVE-2018-8472

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

5.5CVSS5.7AI score0.00956EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•103 views

CVE-2018-8481

An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2...

3.1CVSS4.9AI score0.02409EPSS
Total number of security vulnerabilities1976