Windows 7 Security Vulnerabilities and Issues — Page 2 of Windows 7 CVE List

Lucene search

MicrosoftWindows 7

186 matches found

CVE•added 2019/06/12 2:29 p.m.•158 views

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

8.5CVSS7.1AI score0.04449EPSS

CVE•added 2022/07/12 11:15 p.m.•157 views

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

8.8CVSS8.2AI score0.00284EPSS

CVE•added 2021/01/12 8:15 p.m.•156 views

CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/06/08 11:15 p.m.•156 views

CVE-2021-31958

Windows NTLM Elevation of Privilege Vulnerability

8.8CVSS8.3AI score0.02565EPSS

CVE•added 2022/10/11 7:15 p.m.•155 views

CVE-2022-38040

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.04084EPSS

CVE•added 2021/07/14 6:15 p.m.•154 views

CVE-2021-33750

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01341EPSS

CVE•added 2022/10/11 7:15 p.m.•154 views

CVE-2022-33634

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00263EPSS

CVE•added 2021/05/11 7:15 p.m.•150 views

CVE-2021-31194

OLE Automation Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.06956EPSS

CVE•added 2022/06/15 10:15 p.m.•149 views

CVE-2022-30153

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.09236EPSS

CVE•added 2020/08/17 7:15 p.m.•148 views

CVE-2020-1509

An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...

8.8CVSS8.1AI score0.06869EPSS

CVE•added 2021/07/14 6:15 p.m.•148 views

CVE-2021-33749

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.04431EPSS

CVE•added 2023/01/10 10:15 p.m.•148 views

CVE-2023-21548

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.1AI score0.00117EPSS

CVE•added 2021/06/08 11:15 p.m.•147 views

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability

8.8CVSS7.7AI score0.0135EPSS

CVE•added 2023/01/10 10:15 p.m.•147 views

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.00254EPSS

CVE•added 2023/01/10 10:15 p.m.•144 views

CVE-2023-21543

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.01614EPSS

CVE•added 2021/07/14 6:15 p.m.•143 views

CVE-2021-33756

Windows DNS Snap-in Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.01128EPSS

CVE•added 2022/09/13 7:15 p.m.•143 views

CVE-2022-35835

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.10301EPSS

CVE•added 2022/10/11 7:15 p.m.•143 views

CVE-2022-38047

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00263EPSS

CVE•added 2023/01/10 10:15 p.m.•142 views

CVE-2023-21555

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00144EPSS

CVE•added 2021/07/14 6:15 p.m.•141 views

CVE-2021-34492

Windows Certificate Spoofing Vulnerability

8.1CVSS8.3AI score0.01018EPSS

CVE•added 2018/09/13 12:29 a.m.•140 views

CVE-2018-8475

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server ...

8.8CVSS8.3AI score0.25078EPSS

CVE•added 2021/07/14 6:15 p.m.•140 views

CVE-2021-34497

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.01608EPSS

CVE•added 2022/05/10 9:15 p.m.•139 views

CVE-2022-29137

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.09826EPSS

CVE•added 2022/09/13 7:15 p.m.•138 views

CVE-2022-34727

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.09092EPSS

CVE•added 2022/08/09 8:15 p.m.•137 views

CVE-2022-34702

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.0075EPSS

CVE•added 2022/11/09 10:15 p.m.•137 views

CVE-2022-41048

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02344EPSS

CVE•added 2020/12/10 12:15 a.m.•136 views

CVE-2020-17140

Windows SMB Information Disclosure Vulnerability

8.1CVSS6.8AI score0.20121EPSS

CVE•added 2021/04/13 8:15 p.m.•136 views

CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2022/10/11 7:15 p.m.•136 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.04084EPSS

CVE•added 2021/11/10 1:19 a.m.•135 views

CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.00183EPSS

CVE•added 2019/06/12 2:29 p.m.•134 views

CVE-2019-1053

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox.To exploit this vulnerability, an attacker would require unprivileged execution on the vi...

8.8CVSS7.2AI score0.00246EPSS

CVE•added 2023/01/10 10:15 p.m.•134 views

CVE-2023-21679

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00137EPSS

CVE•added 2020/02/11 10:15 p.m.•132 views

CVE-2020-0729

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.29862EPSS

CVE•added 2021/04/13 8:15 p.m.•132 views

CVE-2021-28434

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2022/12/13 7:15 p.m.•132 views

CVE-2022-41076

PowerShell Remote Code Execution Vulnerability

8.5CVSS8.6AI score0.35406EPSS

CVE•added 2022/12/13 7:15 p.m.•132 views

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00111EPSS

CVE•added 2023/01/10 10:15 p.m.•132 views

CVE-2023-21546

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00144EPSS

CVE•added 2022/11/09 10:15 p.m.•131 views

CVE-2022-41047

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02344EPSS

CVE•added 2017/09/13 1:29 a.m.•129 views

CVE-2017-0161

The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain ce...

8.1CVSS7.7AI score0.14352EPSS

CVE•added 2021/01/12 8:15 p.m.•128 views

CVE-2021-1666

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/01/12 8:15 p.m.•128 views

CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

8.8CVSS8.7AI score0.00889EPSS

CVE•added 2021/04/13 8:15 p.m.•128 views

CVE-2021-28335

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•128 views

CVE-2021-28354

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•127 views

CVE-2021-28340

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS

CVE•added 2021/04/13 8:15 p.m.•127 views

CVE-2021-28341

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/08/12 6:15 p.m.•127 views

CVE-2021-34537

Windows Bluetooth Driver Elevation of Privilege Vulnerability

8CVSS8.6AI score0.00259EPSS

CVE•added 2020/06/09 8:15 p.m.•126 views

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.

8.8CVSS8.3AI score0.30475EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28345

Remote Procedure Call Runtime Remote Code Execution Vulnerability