cbcvebase.

Microsoft Windows 7 Service Pack 1 vulnerabilities

843 known vulnerabilities affecting microsoft/windows_7_service_pack_1.

Total CVEs
843
CISA KEV
29
actively exploited
Public exploits
36
Exploited in wild
43
Severity breakdown
CRITICAL26HIGH634MEDIUM182LOW1

Vulnerabilities

Page 15 of 43
CVE-2020-16924P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-10-16
CVE-2020-16924 [HIGH] CVE-2020-16924: <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly hand A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabi
nvd
CVE-2021-1668P3HIGHCVSS 7.8≥ 6.1.0, < publication2021-01-12
CVE-2021-1668 [HIGH] CVE-2021-1668: Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2020-1252P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-09-11
CVE-2020-1252 [HIGH] CVE-2020-1252: <p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. T A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application. An attacker who successfully exploited this vulnerability could execute arbitrary code and take control of an affected system. An attacker could then instal
nvd
CVE-2020-16923P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-10-16
CVE-2020-16923 [HIGH] CVE-2020-16923: <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by corre
nvd
CVE-2021-26415P3HIGHCVSS 7.8≥ 6.1.0, < publication2021-04-13
CVE-2021-26415 [HIGH] CWE-20 CVE-2021-26415: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2019-0985P3HIGHCVSS 7.8≥ 6.1.0, < publication2019-06-12
CVE-2019-0985 [HIGH] CWE-787 CVE-2019-0985: A remote code execution vulnerability exists when the Microsoft Speech API (SAPI) improperly handles A remote code execution vulnerability exists when the Microsoft Speech API (SAPI) improperly handles text-to-speech (TTS) input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an attacker would need to convince a user to open a specially
nvd
CVE-2021-34504P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-34504 [HIGH] CVE-2021-34504: Windows Address Book Remote Code Execution Vulnerability Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2021-26861P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.245662021-03-11
CVE-2021-26861 [HIGH] CVE-2021-26861: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-29115P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259542022-05-10
CVE-2022-29115 [HIGH] CVE-2022-29115: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2021-27089P3HIGHCVSS 7.8≥ 6.1.0, < publication2021-04-13
CVE-2021-27089 [HIGH] CVE-2021-27089: Microsoft Internet Messaging API Remote Code Execution Vulnerability Microsoft Internet Messaging API Remote Code Execution Vulnerability
nvd
CVE-2022-22027P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22027 [HIGH] CVE-2022-22027: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-22024P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22024 [HIGH] CVE-2022-22024: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-21913P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21913 [HIGH] CVE-2022-21913: Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
nvd
CVE-2022-21838P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21838 [HIGH] CWE-59 CVE-2022-21838: Windows Cleanup Manager Elevation of Privilege Vulnerability Windows Cleanup Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-21905P3HIGHCVSS 8.0≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21905 [HIGH] CVE-2022-21905: Windows Hyper-V Security Feature Bypass Vulnerability Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2022-24485P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24485 [HIGH] CVE-2022-24485: Win32 File Enumeration Remote Code Execution Vulnerability Win32 File Enumeration Remote Code Execution Vulnerability
nvd
CVE-2020-0790P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-09-11
CVE-2020-0790 [HIGH] CVE-2020-0790: <p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if th
nvd
CVE-2019-1028P3HIGHCVSS 7.8≥ 6.1.0, < publication2019-06-12
CVE-2019-1028 [HIGH] CVE-2019-1028: An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited th An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. Howe
nvd
CVE-2022-41118P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41118 [HIGH] CWE-362 CVE-2022-41118: Windows Scripting Languages Remote Code Execution Vulnerability Windows Scripting Languages Remote Code Execution Vulnerability
nvd
CVE-2021-26435P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257122021-09-15
CVE-2021-26435 [HIGH] CWE-787 CVE-2021-26435: Windows Scripting Engine Memory Corruption Vulnerability Windows Scripting Engine Memory Corruption Vulnerability
nvd
Microsoft Windows 7 Service Pack 1 vulnerabilities | cvebase