W7
Product
Windows 7 Service Pack 1
On CISA KEVExploited in the wildRansomware-linked
2,366
CVEs
100
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 34High 457Medium 9Low 0
Watch
Add Windows 7 Service Pack 1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1467 | 10.0 | Aug 17 | An elevation of privilege vulnerability exists when Windows improperly handles hard links Affected: All versions, or not specified |
| CVE-2021-26424 | 9.9 | Aug 12 | Windows TCP/IP Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-28476 | 9.9 | May 11 | Windows Hyper-V Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2019-1384 | 9.9 | Nov 12 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a… Affected: All versions, or not specified |
| CVE-2019-1365 | 9.9 | Oct 10 | An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited… Affected: All versions, or not specified |
| CVE-2022-35744 | 9.8 | May 31 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34722 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34721 | 9.8 | Sep 13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34718 | 9.8 | Sep 13 | Windows TCP/IP Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-30133 | 9.8 | Aug 9 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-29130 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-22012 | 9.8 | May 10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26809 | 9.8 | Apr 15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-43217 | 9.8 | Dec 15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-43215 | 9.8 | Dec 15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution Affected: All versions, or not specified |
| CVE-2021-24094 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-24077 | 9.8 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-24074 | 9.8 | Feb 25 | Windows TCP/IP Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2019-1212 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets Affected: All versions, or not specified |
| CVE-2019-1182 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: All versions, or not specified |
| CVE-2019-1181 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system… Affected: All versions, or not specified |
| CVE-2019-0736 | 9.8 | Aug 14 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client Affected: All versions, or not specified |
| CVE-2019-0626 | 9.8 | Mar 5 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code… Affected: All versions, or not specified |
| CVE-2017-11771 | 9.8 | Oct 13 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: All versions, or not specified |
| CVE-2017-8589 | 9.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: All versions, or not specified |
| CVE-2016-3236 | 9.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: All versions, or not specified |
| CVE-2011-2013 | 9.8 | Nov 8 | Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2011-0657 | 9.8 | Apr 13 | DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7… Affected: All versions, or not specified |
| CVE-2021-31962 | 9.4 | Jun 8 | Kerberos AppContainer Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2019-0719 | 9.1 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: All versions, or not specified |
| CVE-2023-21732 | 8.8 | Jan 10 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21681 | 8.8 | Jan 10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21549 | 8.8 | Jan 10 | Windows SMB Witness Service Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-41048 | 8.8 | Nov 9 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41047 | 8.8 | Nov 9 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-37982 | 8.8 | Oct 11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38040 | 8.8 | Oct 11 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38031 | 8.8 | Oct 11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38034 | 8.8 | Oct 11 | Windows Workstation Service Elevation of Privilege Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-37975 | 8.8 | Oct 11 | Windows Group Policy Elevation of Privilege Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-35840 | 8.8 | Sep 13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35836 | 8.8 | Sep 13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35835 | 8.8 | Sep 13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35834 | 8.8 | Sep 13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34734 | 8.8 | Sep 13 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34733 | 8.8 | Sep 13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34732 | 8.8 | Sep 13 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34731 | 8.8 | Sep 13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-34730 | 8.8 | Sep 13 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)