Microsoft Windows 7 Service Pack 1 vulnerabilities
843 known vulnerabilities affecting microsoft/windows_7_service_pack_1.
Total CVEs
843
CISA KEV
29
actively exploited
Public exploits
36
Exploited in wild
43
Severity breakdown
CRITICAL26HIGH634MEDIUM182LOW1
Vulnerabilities
Page 17 of 43
CVE-2022-26903P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-26903 [HIGH] CVE-2022-26903: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2021-40465P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-40465 [HIGH] CVE-2021-40465: Windows Text Shaping Remote Code Execution Vulnerability
Windows Text Shaping Remote Code Execution Vulnerability
nvd
CVE-2021-36937P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-36937 [HIGH] CVE-2021-36937: Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
nvd
CVE-2022-30206P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-30206 [HIGH] CVE-2022-30206: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-43234P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257962021-12-15
CVE-2021-43234 [HIGH] CVE-2021-43234: Windows Fax Service Remote Code Execution Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2022-37955P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-37955 [HIGH] CVE-2022-37955: Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2021-41331P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-41331 [HIGH] CVE-2021-41331: Windows Media Audio Decoder Remote Code Execution Vulnerability
Windows Media Audio Decoder Remote Code Execution Vulnerability
nvd
CVE-2021-41340P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-41340 [HIGH] CVE-2021-41340: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2022-24494P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24494 [HIGH] CVE-2022-24494: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2020-1377P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-08-17
CVE-2020-1377 [HIGH] CVE-2020-1377: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles regist
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.
The security update a
nvd
CVE-2021-41335P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.257402021-10-13
CVE-2021-41335 [HIGH] CWE-269 CVE-2021-41335: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-37956P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-37956 [HIGH] CVE-2022-37956: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-34707P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.260652022-08-09
CVE-2022-34707 [HIGH] CWE-416 CVE-2022-34707: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2019-1168P3HIGHCVSS 7.8≥ 6.1.0, < publication2019-08-14
CVE-2019-1168 [HIGH] CVE-2019-1168: An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploite
An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take co
nvd
CVE-2020-17044P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-11-11
CVE-2020-17044 [HIGH] CVE-2020-17044: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17043P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-11-11
CVE-2020-17043 [HIGH] CVE-2020-17043: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-1473P3HIGHCVSS 7.8≥ 6.1.0, < publication2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2021-34533P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256852021-08-12
CVE-2021-34533 [HIGH] CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2021-34500P3HIGHCVSS 7.7≥ 6.1.0, < 6.1.7601.258602021-07-14
CVE-2021-34500 [HIGH] CVE-2021-34500: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2021-34441P3HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.256612021-07-16
CVE-2021-34441 [HIGH] CVE-2021-34441: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd