cbcvebase.

Microsoft Windows 7 Service Pack 1 vulnerabilities

817 known vulnerabilities affecting microsoft/windows_7_service_pack_1.

Total CVEs
817
CISA KEV
28
actively exploited
Public exploits
34
Exploited in wild
40
Severity breakdown
CRITICAL25HIGH615MEDIUM176LOW1

Vulnerabilities

Page 13 of 41
CVE-2022-30143P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30143 [HIGH] CVE-2022-30143: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-30146P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30146 [HIGH] CVE-2022-30146: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-30160P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30160 [HIGH] CVE-2022-30160: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2022-22034P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22034 [HIGH] CWE-416 CVE-2022-22034: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-35751P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260652023-05-31
CVE-2022-35751 [HIGH] CVE-2022-35751: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2022-22000P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.258602022-02-09
CVE-2022-22000 [HIGH] CVE-2022-22000: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-22026P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22026 [HIGH] CWE-787 CVE-2022-22026: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-21843P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21843 [HIGH] CVE-2022-21843: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2022-22037P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22037 [HIGH] CVE-2022-22037: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2021-43233P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.257962021-12-15
CVE-2021-43233 [HIGH] CVE-2021-43233: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2022-30142P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30142 [HIGH] CVE-2022-30142: Windows File History Remote Code Execution Vulnerability Windows File History Remote Code Execution Vulnerability
nvd
CVE-2022-21983P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-21983 [HIGH] CVE-2022-21983: Win32 Stream Enumeration Remote Code Execution Vulnerability Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2022-24534P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24534 [HIGH] CVE-2022-24534: Win32 Stream Enumeration Remote Code Execution Vulnerability Win32 Stream Enumeration Remote Code Execution Vulnerability
nvd
CVE-2022-44675P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.262662022-12-13
CVE-2022-44675 [HIGH] CVE-2022-44675: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2020-1599MEDIUMCVSS 5.5ExploitedRansomware≥ 6.1.0, < publication2020-11-11
CVE-2020-1599 [MEDIUM] Windows Spoofing Vulnerability Windows Spoofing Vulnerability Windows Spoofing Vulnerability
cvelistv5
CVE-2022-30147P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30147 [HIGH] CVE-2022-30147: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2021-27095P3HIGHCVSS 7.8≥ 6.1.0, < publication2021-04-13
CVE-2021-27095 [HIGH] CVE-2021-27095: Windows Media Video Decoder Remote Code Execution Vulnerability Windows Media Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2020-1252P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-09-11
CVE-2020-1252 [HIGH] CVE-2020-1252: <p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. T A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application. An attacker who successfully exploited this vulnerability could execute arbitrary code and take control of an affected system. An attacker could then instal
nvd
CVE-2020-1378P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-08-17
CVE-2020-1378 [HIGH] CWE-787 CVE-2020-1378: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles regist An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security
nvd
CVE-2020-16923P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-10-16
CVE-2020-16923 [HIGH] CVE-2020-16923: <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by corre
nvd