W7
Product
Windows 7 Service Pack 1
On CISA KEVExploited in the wildRansomware-linked
2,366
CVEs
100
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 34High 457Medium 9Low 0
Watch
Add Windows 7 Service Pack 1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8344 | 8.8 | Aug 15 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 32-bit Systems Service Pack 1; x64-based Systems Service Pack 1 |
| CVE-2018-1016 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1015 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1013 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1012 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1010 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1004 | 8.8 | Apr 12 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… Affected: All versions, or not specified |
| CVE-2017-11763 | 8.8 | Oct 13 | The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-11762 | 8.8 | Oct 13 | The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-8682 | 8.8 | Sep 13 | Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… Affected: All versions, or not specified |
| CVE-2017-8691 | 8.8 | Aug 8 | Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle… Affected: All versions, or not specified |
| CVE-2017-8590 | 8.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
| CVE-2017-8528 | 8.8 | Jun 15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: All versions, or not specified |
| CVE-2017-8527 | 8.8 | Jun 15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server… Affected: All versions, or not specified |
| CVE-2017-0283 | 8.8 | Jun 15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: All versions, or not specified |
| CVE-2017-0090 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0089 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0088 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0087 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0086 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0084 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2017-0083 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0072 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-7274 | 8.8 | Dec 20 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2016-7272 | 8.8 | Dec 20 | The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: All versions, or not specified |
| CVE-2016-7205 | 8.8 | Nov 10 | Animation Manager in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and… Affected: All versions, or not specified |
| CVE-2016-3368 | 8.8 | Sep 14 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607… Affected: All versions, or not specified |
| CVE-2016-3345 | 8.8 | Sep 14 | The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-3213 | 8.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: All versions, or not specified |
| CVE-2016-0195 | 8.8 | May 11 | The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows… Affected: All versions, or not specified |
| CVE-2016-0184 | 8.8 | May 11 | Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
| CVE-2016-0178 | 8.8 | May 11 | The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-0170 | 8.8 | May 11 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0145 | 8.8 | Apr 12 | The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold… Affected: All versions, or not specified |
| CVE-2016-0121 | 8.8 | Mar 9 | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and… Affected: All versions, or not specified |
| CVE-2016-0101 | 8.8 | Mar 9 | Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute… Affected: All versions, or not specified |
| CVE-2016-0098 | 8.8 | Mar 9 | Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remote attackers to execute arbitrary code… Affected: All versions, or not specified |
| CVE-2016-0009 | 8.8 | Jan 13 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via unspecified… Affected: All versions, or not specified |
| CVE-2013-0006 | 8.8 | Jan 9 | Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka… Affected: All versions, or not specified |
| CVE-2012-0175 | 8.8 | Jul 10 | The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote… Affected: All versions, or not specified |
| CVE-2011-3406 | 8.8 | Dec 14 | Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3,… Affected: All versions, or not specified |
| CVE-2011-1265 | 8.8 | Jul 13 | The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or… Affected: All versions, or not specified |
| CVE-2010-0820 | 8.8 | Sep 15 | Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008… Affected: All versions, or not specified |
| CVE-2009-1547 | 8.8 | Oct 14 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers… Affected: All versions, or not specified |
| CVE-2022-41076 | 8.5 | Dec 13 | PowerShell Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-30163 | 8.5 | Jun 15 | Windows Hyper-V Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2020-1112 | 8.5 | May 21 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content Affected: All versions, or not specified |
| CVE-2019-1019 | 8.5 | Jun 12 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages Affected: All versions, or not specified |
| CVE-2020-1285 | 8.4 | Sep 11 | <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory Affected: All versions, or not specified |
| CVE-2019-1397 | 8.4 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)