Microsoft Windows 7 vulnerabilities
881 known vulnerabilities affecting microsoft/windows_7.
Total CVEs
881
CISA KEV
35
actively exploited
Public exploits
45
Exploited in wild
50
Severity breakdown
CRITICAL25HIGH656MEDIUM198LOW2
Vulnerabilities
Page 18 of 45
CVE-2021-41340P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-41340 [HIGH] CVE-2021-41340: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-24494P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24494 [HIGH] CVE-2022-24494: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2022-21838P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21838 [HIGH] CWE-59 CVE-2022-21838: Windows Cleanup Manager Elevation of Privilege Vulnerability
Windows Cleanup Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-37956P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-37956 [HIGH] CVE-2022-37956: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-34707P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260652022-08-09
CVE-2022-34707 [HIGH] CWE-416 CVE-2022-34707: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2019-1168P3HIGHCVSS 7.8≥ 6.1.0, < publication2019-08-14
CVE-2019-1168 [HIGH] CVE-2019-1168: An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploite
An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take co
nvd
CVE-2021-1657P3HIGHCVSS 7.8≥ 6.1.0, < publication2021-01-12
CVE-2021-1657 [HIGH] CWE-269 CVE-2021-1657: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2022-24485P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24485 [HIGH] CVE-2022-24485: Win32 File Enumeration Remote Code Execution Vulnerability
Win32 File Enumeration Remote Code Execution Vulnerability
nvd
CVE-2022-37978P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass
Windows Active Directory Certificate Services Security Feature Bypass
nvd
CVE-2020-1473P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2022-29105P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259542022-05-10
CVE-2022-29105 [HIGH] CVE-2022-29105: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-24083P3HIGHCVSS 7.8≥ 6.1.0, < publication2021-02-25
CVE-2021-24083 [HIGH] CWE-787 CVE-2021-24083: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2021-40465P3HIGHCVSS 7.8vsp1≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-40465 [HIGH] CVE-2021-40465: Windows Text Shaping Remote Code Execution Vulnerability
Windows Text Shaping Remote Code Execution Vulnerability
nvd
CVE-2021-34533P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34533 [HIGH] CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2021-34441P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256612021-07-16
CVE-2021-34441 [HIGH] CVE-2021-34441: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-34500P3HIGHCVSS 7.7≥ 6.1.0, < 6.1.7601.258602021-07-14
CVE-2021-34500 [HIGH] CVE-2021-34500: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2022-26917P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-26917 [HIGH] CVE-2022-26917: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2022-26918P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-26918 [HIGH] CVE-2022-26918: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2022-26916P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-26916 [HIGH] CVE-2022-26916: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2020-1377P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-08-17
CVE-2020-1377 [HIGH] CVE-2020-1377: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles regist
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.
The security update a
nvd