Microsoft Windows 7 vulnerabilities

928 known vulnerabilities affecting microsoft/windows_7.

Total CVEs
928
CISA KEV
35
actively exploited
Public exploits
32
Exploited in wild
46
Severity breakdown
CRITICAL25HIGH678MEDIUM222LOW3

Vulnerabilities

Page 6 of 47
CVE-2022-33634HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-33634 [HIGH] CWE-362 CVE-2022-33634: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-37988HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37988 [HIGH] CVE-2022-37988: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-30198HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-30198 [HIGH] CWE-362 CVE-2022-30198: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-33635HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-33635 [HIGH] Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability
cvelistv5
CVE-2022-37991HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37991 [HIGH] CVE-2022-37991: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37982HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37982 [HIGH] CVE-2022-37982: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-37999HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37999 [HIGH] CVE-2022-37999: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-41081HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-41033HIGHCVSS 7.8KEV≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-41033 [HIGH] CWE-843 CVE-2022-41033: Windows COM+ Event System Service Elevation of Privilege Vulnerability Windows COM+ Event System Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37986HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37986 [HIGH] CVE-2022-37986: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-37994HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37994 [HIGH] CVE-2022-37994: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-22035HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-22035 [HIGH] CWE-362 CVE-2022-22035: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-33645HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-33645 [HIGH] CVE-2022-33645: Windows TCP/IP Driver Denial of Service Vulnerability Windows TCP/IP Driver Denial of Service Vulnerability
cvelistv5nvd
CVE-2022-37987HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37987 [HIGH] CVE-2022-37987: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-38034HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability Windows Workstation Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2022-34689HIGHCVSS 7.5≥ 6.1.0, < 10.0.14393.52912022-10-11
CVE-2022-34689 [HIGH] Windows CryptoAPI Spoofing Vulnerability Windows CryptoAPI Spoofing Vulnerability Windows CryptoAPI Spoofing Vulnerability
cvelistv5
CVE-2022-38000HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38000 [HIGH] CWE-362 CVE-2022-38000: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2022-38029HIGHCVSS 7.0≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38029 [HIGH] Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability Windows ALPC Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-37985MEDIUMCVSS 5.5≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37985 [MEDIUM] CVE-2022-37985: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability
cvelistv5nvd
CVE-2022-37981MEDIUMCVSS 4.3≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37981 [MEDIUM] CVE-2022-37981: Windows Event Logging Service Denial of Service Vulnerability Windows Event Logging Service Denial of Service Vulnerability
cvelistv5nvd