Windows 7@- Security Vulnerabilities and Issues — Page 7 of Windows 7@- CVE List

Lucene search

MicrosoftWindows 7-

1976 matches found

CVE•added 2022/03/09 5:15 p.m.•164 views

CVE-2022-23283

Windows ALPC Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00118EPSS

CVE•added 2019/03/06 12:0 a.m.•162 views

CVE-2019-0626

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

9.8CVSS9.5AI score0.57246EPSS

CVE•added 2021/09/15 12:15 p.m.•162 views

CVE-2021-26435

Windows Scripting Engine Memory Corruption Vulnerability

8.1CVSS7.9AI score0.04115EPSS

CVE•added 2018/01/04 2:29 p.m.•161 views

CVE-2018-0749

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

7.8CVSS5.5AI score0.18776EPSS

CVE•added 2020/10/16 11:15 p.m.•161 views

CVE-2020-16949

<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.</p><p>Exploitation of the vulnerability requires ...

7.5CVSS4.8AI score0.02936EPSS

CVE•added 2020/11/11 7:15 a.m.•161 views

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.17242EPSS

CVE•added 2021/12/15 3:15 p.m.•161 views

CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

7.5CVSS8.5AI score0.08038EPSS

CVE•added 2022/07/12 11:15 p.m.•161 views

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00189EPSS

CVE•added 2022/07/12 11:15 p.m.•161 views

CVE-2022-22037

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

8.5CVSS7.7AI score0.05727EPSS

CVE•added 2022/04/15 7:15 p.m.•161 views

CVE-2022-24493

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS6.9AI score0.00435EPSS

CVE•added 2022/05/10 9:15 p.m.•161 views

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.01004EPSS

CVE•added 2022/06/15 10:15 p.m.•161 views

CVE-2022-30163

Windows Hyper-V Remote Code Execution Vulnerability

8.5CVSS9.1AI score0.00604EPSS

CVE•added 2023/01/10 10:15 p.m.•161 views

CVE-2023-21560

Windows Boot Manager Security Feature Bypass Vulnerability

6.6CVSS6.6AI score0.00583EPSS

CVE•added 2015/12/09 11:59 a.m.•160 views

CVE-2015-6108

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and ...

9.3CVSS7.4AI score0.47364EPSS

CVE•added 2019/07/15 7:15 p.m.•160 views

CVE-2019-1071

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.

5.5CVSS5.8AI score0.00349EPSS

CVE•added 2021/10/13 1:15 a.m.•160 views

CVE-2021-26442

Windows HTTP.sys Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00639EPSS

CVE•added 2018/04/12 1:29 a.m.•159 views

CVE-2018-1010

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.3AI score0.57782EPSS

CVE•added 2018/06/14 12:29 p.m.•159 views

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server ...

7.6CVSS8AI score0.12893EPSS

CVE•added 2018/11/14 1:29 a.m.•159 views

CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 201...

9.3CVSS7.7AI score0.73662EPSS

CVE•added 2020/06/09 8:15 p.m.•159 views

CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.27332EPSS

CVE•added 2021/09/15 12:15 p.m.•159 views

CVE-2021-38628

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS8AI score0.0033EPSS

CVE•added 2022/05/10 9:15 p.m.•158 views

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.0999EPSS

CVE•added 2022/04/15 7:15 p.m.•158 views

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00122EPSS

CVE•added 2022/10/11 7:15 p.m.•158 views

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.01992EPSS

CVE•added 2011/11/08 9:55 p.m.•157 views

CVE-2011-2014

The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windo...

9CVSS6.2AI score0.07075EPSS

CVE•added 2012/05/09 12:55 a.m.•157 views

CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411...

9.3CVSS7.4AI score0.6658EPSS

CVE•added 2022/08/09 8:15 p.m.•157 views

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0078EPSS

CVE•added 2019/06/12 2:29 p.m.•156 views

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

8.5CVSS7.1AI score0.04674EPSS

CVE•added 2019/09/11 10:15 p.m.•156 views

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2020/08/17 7:15 p.m.•156 views

CVE-2020-1537

An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. An...

7.8CVSS8.3AI score0.00513EPSS

CVE•added 2022/01/11 9:15 p.m.•156 views

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability

9CVSS9.3AI score0.04087EPSS

CVE•added 2022/04/15 7:15 p.m.•156 views

CVE-2022-26796

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00146EPSS

CVE•added 2022/05/10 9:15 p.m.•156 views

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

6.5CVSS7.6AI score0.00806EPSS

CVE•added 2018/11/14 1:29 a.m.•155 views

CVE-2018-8550

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

7.8CVSS7.2AI score0.11968EPSS

CVE•added 2021/06/08 11:15 p.m.•155 views

CVE-2021-31958

Windows NTLM Elevation of Privilege Vulnerability

8.8CVSS8.3AI score0.01935EPSS

CVE•added 2022/07/12 11:15 p.m.•155 views

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

8.8CVSS8.2AI score0.00245EPSS

CVE•added 2022/07/12 11:15 p.m.•155 views

CVE-2022-30203

Windows Boot Manager Security Feature Bypass Vulnerability

7.4CVSS7.9AI score0.00477EPSS

CVE•added 2011/08/10 9:55 p.m.•154 views

CVE-2011-1965

Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."

7.1CVSS6.3AI score0.76338EPSS

CVE•added 2012/01/10 9:55 p.m.•154 views

CVE-2012-0004

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, ...

9.3CVSS8AI score0.5796EPSS

CVE•added 2013/01/09 6:9 p.m.•154 views

CVE-2013-0007

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

9.3CVSS7.5AI score0.26376EPSS

CVE•added 2017/05/12 2:29 p.m.•154 views

CVE-2017-0267

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

5.9CVSS6.1AI score0.27804EPSS

CVE•added 2018/04/12 1:29 a.m.•154 views

CVE-2018-1016

9.3CVSS7.3AI score0.57782EPSS

CVE•added 2021/01/12 8:15 p.m.•154 views

CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/09/15 12:15 p.m.•154 views

CVE-2021-40447

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8AI score0.0027EPSS

CVE•added 2022/08/09 8:15 p.m.•154 views

CVE-2022-34708

Windows Kernel Information Disclosure Vulnerability

5.5CVSS7AI score0.01087EPSS

CVE•added 2022/10/11 7:15 p.m.•154 views

CVE-2022-38040

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.0384EPSS

CVE•added 2023/01/10 10:15 p.m.•154 views

CVE-2023-21750

Windows Kernel Elevation of Privilege Vulnerability

7.1CVSS7AI score0.00684EPSS

CVE•added 2012/01/10 9:55 p.m.•153 views

CVE-2012-0013

Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce app...

9.3CVSS7.4AI score0.87476EPSS

CVE•added 2013/06/12 3:30 a.m.•153 views

CVE-2013-3138

Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflo...

7.1CVSS6.7AI score0.8835EPSS

CVE•added 2021/06/08 11:15 p.m.•153 views

CVE-2021-31959

Scripting Engine Memory Corruption Vulnerability

7.8CVSS7AI score0.0488EPSS

Total number of security vulnerabilities1976