Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftWindows 7

186 matches found

CVE
CVE•added 2021/01/12 8:15 p.m.•103 views

CVE-2021-1660

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•103 views

CVE-2022-34730

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03465EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•103 views

CVE-2022-34732

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03465EPSS
CVE
CVE•added 2023/05/31 7:15 p.m.•103 views

CVE-2022-35752

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS
CVE
CVE•added 2022/08/09 8:15 p.m.•103 views

CVE-2022-35767

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.00843EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•102 views

CVE-2021-1664

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE•added 2023/05/31 7:15 p.m.•101 views

CVE-2022-35745

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS
CVE
CVE•added 2022/10/11 7:15 p.m.•101 views

CVE-2022-38000

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00263EPSS
CVE
CVE•added 2019/11/12 7:15 p.m.•100 views

CVE-2019-1397

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1398.

8.4CVSS9.2AI score0.01157EPSS
CVE
CVE•added 2019/11/12 7:15 p.m.•99 views

CVE-2019-1456

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.

8.8CVSS9.3AI score0.23721EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•99 views

CVE-2020-0684

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.33494EPSS
CVE
CVE•added 2021/04/13 8:15 p.m.•98 views

CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability

8.8CVSS8.5AI score0.17466EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•98 views

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.09092EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•97 views

CVE-2022-34731

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.10301EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•95 views

CVE-2020-1255

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

8.8CVSS8.2AI score0.11968EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•95 views

CVE-2022-34734

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03465EPSS
CVE
CVE•added 2023/05/31 7:15 p.m.•92 views

CVE-2022-35753

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS
CVE
CVE•added 2022/12/13 7:15 p.m.•92 views

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00111EPSS
CVE
CVE•added 2021/03/11 4:15 p.m.•90 views

CVE-2021-26881

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.0607EPSS
CVE
CVE•added 2019/11/12 7:15 p.m.•88 views

CVE-2019-1424

A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'.

8.1CVSS8.6AI score0.03229EPSS
CVE
CVE•added 2022/10/11 7:15 p.m.•86 views

CVE-2022-38034

Windows Workstation Service Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.07013EPSS
CVE
CVE•added 2017/07/11 9:29 p.m.•82 views

CVE-2017-8590

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver han...

8.8CVSS6.9AI score0.00997EPSS
CVE
CVE•added 2017/10/13 1:29 p.m.•80 views

CVE-2017-11762

The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially ...

8.8CVSS9AI score0.40686EPSS
CVE
CVE•added 2017/10/13 1:29 p.m.•79 views

CVE-2017-11763

The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially ...

8.8CVSS9AI score0.40686EPSS
CVE
CVE•added 2019/11/12 7:15 p.m.•79 views

CVE-2019-1389

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397, CVE-2019-1398.

8.4CVSS9.2AI score0.01157EPSS
CVE
CVE•added 2017/08/08 9:29 p.m.•76 views

CVE-2017-8633

Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability, aka "Windows Error Reporting Elevation of Priv...

8.5CVSS8AI score0.1398EPSS
CVE
CVE•added 2011/04/13 8:26 p.m.•67 views

CVE-2011-1231

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer deref...

8.4CVSS6.4AI score0.00702EPSS
CVE
CVE•added 2011/07/13 11:55 p.m.•62 views

CVE-2011-1282

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL...

8.4CVSS6.6AI score0.01099EPSS
CVE
CVE•added 2010/12/16 7:33 p.m.•58 views

CVE-2010-3941

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulner...

8.4CVSS6.3AI score0.03471EPSS
CVE
CVE•added 2013/07/10 3:46 a.m.•58 views

CVE-2013-1340

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privi...

8.4CVSS6.4AI score0.0035EPSS
CVE
CVE•added 2011/07/13 10:55 p.m.•54 views

CVE-2011-1265

The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetoo...

8.8CVSS9AI score0.00329EPSS
CVE
CVE•added 2013/10/09 2:53 p.m.•53 views

CVE-2013-3888

dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."

8.4CVSS6.4AI score0.00559EPSS
CVE
CVE•added 2011/04/13 8:26 p.m.•52 views

CVE-2011-0671

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application th...

8.4CVSS6.5AI score0.01054EPSS
CVE
CVE•added 2011/07/13 11:55 p.m.•51 views

CVE-2011-1881

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer deref...

8.4CVSS6.4AI score0.00687EPSS
CVE
CVE•added 2012/03/13 9:55 p.m.•51 views

CVE-2012-0157

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application...

8.4CVSS6.3AI score0.01588EPSS
CVE
CVE•added 2012/06/12 10:55 p.m.•48 views

CVE-2012-1867

Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorre...

8.4CVSS6.7AI score0.01124EPSS
Total number of security vulnerabilities186