Microsoft Windows 7 vulnerabilities

928 known vulnerabilities affecting microsoft/windows_7.

Total CVEs
928
CISA KEV
35
actively exploited
Public exploits
38
Exploited in wild
46
Severity breakdown
CRITICAL25HIGH678MEDIUM222LOW3

Vulnerabilities

Page 22 of 47
CVE-2021-36936CRITICALCVSS 9.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-36936 [CRITICAL] CVE-2021-36936: Windows Print Spooler Remote Code Execution Vulnerability Windows Print Spooler Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-26424CRITICALCVSS 9.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-26424 [CRITICAL] CVE-2021-26424: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-26425HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-26425 [HIGH] CWE-59 CVE-2021-26425: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-36947HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-36947 [HIGH] CVE-2021-36947: Windows Print Spooler Remote Code Execution Vulnerability Windows Print Spooler Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-36927HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.258982021-08-12
CVE-2021-36927 [HIGH] CWE-269 CVE-2021-36927: Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-34533HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34533 [HIGH] CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-34535HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34535 [HIGH] CVE-2021-34535: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-34484HIGHCVSS 7.8KEVPoC≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34484 [HIGH] CVE-2021-34484: Windows User Profile Service Elevation of Privilege Vulnerability Windows User Profile Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-36937HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-36937 [HIGH] CVE-2021-36937: Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-34537HIGHCVSS 8.0≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34537 [HIGH] CWE-269 CVE-2021-34537: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-34483HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34483 [HIGH] CWE-269 CVE-2021-34483: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-36958HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257122021-08-12
CVE-2021-36958 [HIGH] CVE-2021-36958: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
cvelistv5nvd
CVE-2021-34480MEDIUMCVSS 6.8≥ 6.1.0, < 6.1.7601.25685≥ 6.1.0, < 1.0012021-08-12
CVE-2021-34480 [MEDIUM] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability
cvelistv5
CVE-2021-34481CRITICALCVSS 9.8≥ 6.1.0, < 6.1.7601.256852021-07-16
CVE-2021-34481 [CRITICAL] CWE-269 CVE-2021-34481: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user r
cvelistv5nvd
CVE-2021-34441HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256612021-07-16
CVE-2021-34441 [HIGH] CVE-2021-34441: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-34447HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.25661≥ 6.1.0, < 1.0012021-07-16
CVE-2021-34447 [HIGH] CVE-2021-34447: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2021-34456HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256612021-07-16
CVE-2021-34456 [HIGH] CWE-269 CVE-2021-34456: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2021-34446HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.25661≥ 6.1.0, < 1.0012021-07-16
CVE-2021-34446 [HIGH] CVE-2021-34446: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2021-34448MEDIUMCVSS 6.8KEV≥ 6.1.0, < 6.1.7601.25661≥ 6.1.0, < 1.0012021-07-16
CVE-2021-34448 [MEDIUM] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability
cvelistv5
CVE-2021-34457MEDIUMCVSS 5.5≥ 6.1.0, < 6.1.7601.256612021-07-16
CVE-2021-34457 [MEDIUM] CVE-2021-34457: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
cvelistv5nvd