Microsoft Windows 7 Service Pack 1 vulnerabilities
843 known vulnerabilities affecting microsoft/windows_7_service_pack_1.
Total CVEs
843
CISA KEV
29
actively exploited
Public exploits
36
Exploited in wild
43
Severity breakdown
CRITICAL26HIGH634MEDIUM182LOW1
Vulnerabilities
Page 8 of 43
CVE-2022-38034P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability
Windows Workstation Service Elevation of Privilege Vulnerability
nvd
CVE-2020-1285P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-09-11
CVE-2020-1285 [HIGH] CVE-2020-1285: <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interfac
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users who
nvd
CVE-2022-24541P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24541 [HIGH] CVE-2022-24541: Windows Server Service Remote Code Execution Vulnerability
Windows Server Service Remote Code Execution Vulnerability
nvd
CVE-2022-21851P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21851 [HIGH] CVE-2022-21851: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2022-21850P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21850 [HIGH] CVE-2022-21850: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2022-30153P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30153 [HIGH] CVE-2022-30153: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-30161P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30161 [HIGH] CVE-2022-30161: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-29139P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259542022-05-10
CVE-2022-29139 [HIGH] CVE-2022-29139: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2021-1694P3CRITICALCVSS 9.8≥ 6.1.0, < publication2021-01-12
CVE-2021-1694 [CRITICAL] CWE-269 CVE-2021-1694: Windows Update Stack Elevation of Privilege Vulnerability
Windows Update Stack Elevation of Privilege Vulnerability
nvd
CVE-2022-21893P3HIGHCVSS 8.0≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21893 [HIGH] CVE-2022-21893: Remote Desktop Protocol Remote Code Execution Vulnerability
Remote Desktop Protocol Remote Code Execution Vulnerability
nvd
CVE-2020-1061P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-05-21
CVE-2020-1061 [HIGH] CWE-787 CVE-2020-1061: A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles ob
A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current
nvd
CVE-2020-1339P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-08-17
CVE-2020-1339 [HIGH] CVE-2020-1339: A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objec
A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2022-24492P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24492 [HIGH] CVE-2022-24492: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2020-1113P3HIGHCVSS 7.5≥ 6.1.0, < publication2020-05-21
CVE-2020-1113 [HIGH] CWE-295 CVE-2020-1113: A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with
nvd
CVE-2022-34734P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34734 [HIGH] CVE-2022-34734: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34727P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34727 [HIGH] CVE-2022-34727: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34732P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34732 [HIGH] CVE-2022-34732: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34730P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34730 [HIGH] CVE-2022-34730: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-34726P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261152022-09-13
CVE-2022-34726 [HIGH] CVE-2022-34726: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-23253P3MEDIUMCVSS 6.5≥ 6.1.0, < 6.1.7601.258982022-03-09
CVE-2022-23253 [MEDIUM] CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
nvd