cbcvebase.

Microsoft Windows 7 Service Pack 1 vulnerabilities

817 known vulnerabilities affecting microsoft/windows_7_service_pack_1.

Total CVEs
817
CISA KEV
28
actively exploited
Public exploits
22
Exploited in wild
34
Severity breakdown
CRITICAL25HIGH615MEDIUM176LOW1

Vulnerabilities

Page 5 of 41
CVE-2022-41116MEDIUMCVSS 5.9≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41116 [MEDIUM] CWE-362 CVE-2022-41116: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd
CVE-2022-41086MEDIUMCVSS 6.4≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41086 [MEDIUM] CWE-362 CVE-2022-41086: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2022-41097MEDIUMCVSS 6.5≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41097 [MEDIUM] CVE-2022-41097: Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
nvd
CVE-2022-41090MEDIUMCVSS 5.9≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41090 [MEDIUM] CWE-362 CVE-2022-41090: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd
CVE-2022-41098MEDIUMCVSS 5.5≥ 6.1.0, < 6.1.7601.262212022-11-09
CVE-2022-41098 [MEDIUM] Windows GDI+ Information Disclosure Vulnerability Windows GDI+ Information Disclosure Vulnerability Windows GDI+ Information Disclosure Vulnerability
cvelistv5
CVE-2022-38051HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38051 [HIGH] CVE-2022-38051: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-37997HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37997 [HIGH] CVE-2022-37997: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-38041HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38041 [HIGH] CVE-2022-38041: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2022-37975HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2022-24504HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-24504 [HIGH] CWE-362 CVE-2022-24504: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37989HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37989 [HIGH] CVE-2022-37989: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-38038HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38038 [HIGH] CVE-2022-38038: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-38044HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38044 [HIGH] CVE-2022-38044: Windows CD-ROM File System Driver Remote Code Execution Vulnerability Windows CD-ROM File System Driver Remote Code Execution Vulnerability
nvd
CVE-2022-37978HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass Windows Active Directory Certificate Services Security Feature Bypass
nvd
CVE-2022-38047HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38047 [HIGH] CWE-362 CVE-2022-38047: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-38040HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-33634HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-33634 [HIGH] CWE-362 CVE-2022-33634: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37988HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37988 [HIGH] CVE-2022-37988: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-33635HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-33635 [HIGH] Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability
cvelistv5
CVE-2022-37991HIGHCVSS 7.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37991 [HIGH] CVE-2022-37991: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd