Microsoft Windows 7 vulnerabilities
906 known vulnerabilities affecting microsoft/windows_7.
Total CVEs
906
CISA KEV
36
actively exploited
Public exploits
47
Exploited in wild
53
Severity breakdown
CRITICAL26HIGH674MEDIUM204LOW2
Vulnerabilities
Page 11 of 46
CVE-2022-24502P3MEDIUMCVSS 6.5≥ 6.1.0, < 6.1.7601.258982022-03-09
CVE-2022-24502 [MEDIUM] CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2020-1061P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-05-21
CVE-2020-1061 [HIGH] CWE-787 CVE-2020-1061: A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles ob
A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current
nvd
CVE-2020-1593P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-09-11
CVE-2020-1593 [HIGH] CVE-2020-1593: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles
A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2022-22019P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259542022-05-10
CVE-2022-22019 [HIGH] CVE-2022-22019: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-23253P3MEDIUMCVSS 6.5≥ 6.1.0, < 6.1.7601.258982022-03-09
CVE-2022-23253 [MEDIUM] CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd
CVE-2022-24528P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-21857P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21857 [HIGH] CVE-2022-21857: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-33750P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-33750 [HIGH] CVE-2021-33750: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33749P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-33749 [HIGH] CVE-2021-33749: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33752P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-33752 [HIGH] CVE-2021-33752: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2021-33756P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-33756 [HIGH] CVE-2021-33756: Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2022-34731P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34731 [HIGH] CVE-2022-34731: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35834P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-35834 [HIGH] CVE-2022-35834: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35835P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-35835 [HIGH] CVE-2022-35835: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35836P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-35836 [HIGH] CVE-2022-35836: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-34733P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34733 [HIGH] CVE-2022-34733: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35840P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-35840 [HIGH] CVE-2022-35840: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-34691P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.260652022-08-09
CVE-2022-34691 [HIGH] CWE-269 CVE-2022-34691: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-41342P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.25740≥ 6.1.0, < 1.0012021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-38040P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd