cbcvebase.

Microsoft Windows 7 Service Pack 1 vulnerabilities

843 known vulnerabilities affecting microsoft/windows_7_service_pack_1.

Total CVEs
843
CISA KEV
29
actively exploited
Public exploits
36
Exploited in wild
43
Severity breakdown
CRITICAL26HIGH634MEDIUM182LOW1

Vulnerabilities

Page 9 of 43
CVE-2021-34497P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-34497 [HIGH] CVE-2021-34497: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-30221P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-30221 [HIGH] CVE-2022-30221: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2021-34447P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-16
CVE-2021-34447 [HIGH] CVE-2021-34447: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-38040P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-37982P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-37982 [HIGH] CVE-2022-37982: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-38031P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.261742022-10-11
CVE-2022-38031 [HIGH] CVE-2022-38031: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-26919P3HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-26919 [HIGH] CVE-2022-26919: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2022-30141P3HIGHCVSS 8.1≥ 6.1.0, < 6.1.7601.259842022-06-15
CVE-2022-30141 [HIGH] CVE-2022-30141: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2019-1153P4MEDIUMCVSS 5.5PoC≥ 6.1.0, < publication2019-08-14
CVE-2019-1153 [MEDIUM] CWE-125 CVE-2019-1153: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component imprope An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a spe
nvd
CVE-2019-1148P4MEDIUMCVSS 5.5PoC≥ 6.1.0, < publication2019-08-14
CVE-2019-1148 [MEDIUM] CWE-125 CVE-2019-1148: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component imprope An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a spe
nvd
CVE-2022-22025P3HIGHCVSS 7.5≥ 6.1.0, < 6.1.7601.260222022-07-12
CVE-2022-22025 [HIGH] CVE-2022-22025: Windows Internet Information Services Cachuri Module Denial of Service Vulnerability Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
nvd
CVE-2020-0922P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-09-11
CVE-2020-0922 [HIGH] CVE-2020-0922: <p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles ob A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file or lure the target to a website hosting malicious JavaScript.
nvd
CVE-2022-24502P3MEDIUMCVSS 6.5≥ 6.1.0, < 6.1.7601.258982022-03-09
CVE-2022-24502 [MEDIUM] CVE-2022-24502: Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2020-1508P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-09-11
CVE-2020-1508 [HIGH] CVE-2020-1508: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2020-1593P3HIGHCVSS 8.8≥ 6.1.0, < publication2020-09-11
CVE-2020-1593 [HIGH] CVE-2020-1593: <p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user
nvd
CVE-2022-21920P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21920 [HIGH] CVE-2022-21920: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-22019P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259542022-05-10
CVE-2022-22019 [HIGH] CVE-2022-22019: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-24528P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.259242022-04-15
CVE-2022-24528 [HIGH] CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-21857P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.258292022-01-11
CVE-2022-21857 [HIGH] CVE-2022-21857: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2021-33750P3HIGHCVSS 8.8≥ 6.1.0, < 6.1.7601.256612021-07-14
CVE-2021-33750 [HIGH] CVE-2021-33750: Windows DNS Snap-in Remote Code Execution Vulnerability Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
Microsoft Windows 7 Service Pack 1 vulnerabilities | cvebase