cbcvebase.

Microsoft Windows 7 vulnerabilities

906 known vulnerabilities affecting microsoft/windows_7.

Total CVEs
906
CISA KEV
36
actively exploited
Public exploits
47
Exploited in wild
53
Severity breakdown
CRITICAL26HIGH674MEDIUM204LOW2

Vulnerabilities

Page 2 of 46
CVE-2021-33742P1HIGHCVSS 8.8KEV≥ 6.1.0, < 6.1.7601.25632≥ 6.1.0, < publication2021-06-08
CVE-2021-33742 [HIGH] CWE-787 CVE-2021-33742: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-34713P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.260652022-08-09
CVE-2022-34713 [HIGH] CVE-2022-34713: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
nvd
CVE-2022-41128P1HIGHCVSS 8.8KEVvsp1≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41128 [HIGH] CWE-787 CVE-2022-41128: Windows Scripting Languages Remote Code Execution Vulnerability Windows Scripting Languages Remote Code Execution Vulnerability
nvd
CVE-2022-41073P1HIGHCVSS 7.8KEVRansomware≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41073 [HIGH] CWE-787 CVE-2022-41073: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-22047P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22047 [HIGH] CWE-426 CVE-2022-22047: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2020-1464P2MEDIUMCVSS 5.5KEV≥ 6.1.0, < publication2020-08-17
CVE-2020-1464 [MEDIUM] CWE-347 CVE-2020-1464: A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update address
nvd
CVE-2022-22718P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.258602022-02-09
CVE-2022-22718 [HIGH] CVE-2022-22718: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-31979P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-31979 [HIGH] CWE-119 CVE-2021-31979: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-41033P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-41033 [HIGH] CWE-843 CVE-2022-41033: Windows COM+ Event System Service Elevation of Privilege Vulnerability Windows COM+ Event System Service Elevation of Privilege Vulnerability
nvd
CVE-2021-31199P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.256322021-06-08
CVE-2021-31199 [HIGH] CVE-2021-31199: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
nvd
CVE-2021-31201P1HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.256322021-06-08
CVE-2021-31201 [HIGH] CVE-2021-31201: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
nvd
CVE-2018-8589P1HIGHCVSS 7.8KEVv32-bit Systems Service Pack 1vx64-based Systems Service Pack 12018-11-14
CVE-2018-8589 [HIGH] CVE-2018-8589: An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
nvd
CVE-2022-26809P1CRITICALCVSS 9.8ExploitedPoCRansomware≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-26809 [CRITICAL] CVE-2022-26809: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-34721P1CRITICALCVSS 9.8ExploitedPoC≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34721 [CRITICAL] CVE-2022-34721: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2021-40449HIGHCVSS 7.8KEVPoCRansomware≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-40449 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-31956HIGHCVSS 7.8KEVPoC≥ 6.1.0, < 6.1.7601.256322021-06-08
CVE-2021-31956 [HIGH] Windows NTFS Elevation of Privilege Vulnerability Windows NTFS Elevation of Privilege Vulnerability Windows NTFS Elevation of Privilege Vulnerability
cvelistv5
CVE-2019-1040P1MEDIUMCVSS 5.3ExploitedPoC≥ 6.1.0, < publication2019-06-12
CVE-2019-1040 [MEDIUM] CVE-2019-1040: A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to s A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit this vulnerability, the attacker would need to tamper with the
nvd
CVE-2022-24481P2HIGHCVSS 7.8ExploitedPoC≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24481 [HIGH] CVE-2022-24481: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-1048P2HIGHCVSS 7.8ExploitedPoC≥ 6.1.0, < publication2020-05-21
CVE-2020-1048 [HIGH] CWE-669 CVE-2020-1048: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly all An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts wit
nvd
CVE-2021-34481P1CRITICALCVSS 9.8ExploitedRansomware≥ 6.1.0, < 6.1.7601.256852021-07-16
CVE-2021-34481 [CRITICAL] CWE-269 CVE-2021-34481: A remote code execution vulnerability exists when the Windows Print Spooler service improperly perfo A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user r
nvd
← Previous2 / 46Next →