W7
Product
Windows 7 Service Pack 1
On CISA KEVExploited in the wildRansomware-linked
2,366
CVEs
100
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 34High 457Medium 9Low 0
Watch
Add Windows 7 Service Pack 1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1547 | 8.8 | Oct 14 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers… Affected: All versions, or not specified |
| CVE-2022-41076 | 8.5 | Dec 13 | PowerShell Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-30163 | 8.5 | Jun 15 | Windows Hyper-V Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2020-1112 | 8.5 | May 21 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content Affected: All versions, or not specified |
| CVE-2019-1019 | 8.5 | Jun 12 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages Affected: All versions, or not specified |
| CVE-2020-1285 | 8.4 | Sep 11 | <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory Affected: All versions, or not specified |
| CVE-2019-1397 | 8.4 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka… Affected: All versions, or not specified |
| CVE-2019-1389 | 8.4 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka… Affected: All versions, or not specified |
| CVE-2018-8489 | 8.4 | Oct 10 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka… Affected: All versions, or not specified |
| CVE-2013-3888 | 8.4 | Oct 9 | dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted… Affected: All versions, or not specified |
| CVE-2013-1340 | 8.4 | Jul 10 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Affected: All versions, or not specified |
| CVE-2012-1867 | 8.4 | Jun 12 | Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,… Affected: All versions, or not specified |
| CVE-2012-0157 | 8.4 | Mar 13 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold… Affected: All versions, or not specified |
| CVE-2011-1881 | 8.4 | Jul 13 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified |
| CVE-2011-1282 | 8.4 | Jul 13 | The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server… Affected: All versions, or not specified |
| CVE-2011-1231 | 8.4 | Apr 13 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified |
| CVE-2011-0671 | 8.4 | Apr 13 | Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2010-3941 | 8.4 | Dec 16 | Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2022-35753 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35752 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35745 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21679 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21556 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21555 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21548 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21546 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21543 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-44676 | 8.1 | Dec 13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-44670 | 8.1 | Dec 13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41044 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41039 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-22035 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-41081 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38047 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-24504 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-30198 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-33634 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38000 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-37958 | 8.1 | Sep 13 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35767 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-34714 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-34702 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-30141 | 8.1 | Jun 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-23270 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21972 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26919 | 8.1 | Apr 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-26435 | 8.1 | Sep 15 | Windows Scripting Engine Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2021-34492 | 8.1 | Jul 14 | Windows Certificate Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2021-28445 | 8.1 | Apr 13 | Windows Network File System Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-1722 | 8.1 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)