W7
Product
Windows 7 Service Pack 1
On CISA KEVExploited in the wildRansomware-linked
2,366
CVEs
100
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 34High 457Medium 9Low 0
Watch
Add Windows 7 Service Pack 1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1389 | 8.4 | Nov 12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka… Affected: All versions, or not specified |
| CVE-2018-8489 | 8.4 | Oct 10 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka… Affected: All versions, or not specified |
| CVE-2013-3888 | 8.4 | Oct 9 | dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted… Affected: All versions, or not specified |
| CVE-2013-1340 | 8.4 | Jul 10 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Affected: All versions, or not specified |
| CVE-2012-1867 | 8.4 | Jun 12 | Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,… Affected: All versions, or not specified |
| CVE-2012-0157 | 8.4 | Mar 13 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold… Affected: All versions, or not specified |
| CVE-2011-1881 | 8.4 | Jul 13 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified |
| CVE-2011-1282 | 8.4 | Jul 13 | The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server… Affected: All versions, or not specified |
| CVE-2011-1231 | 8.4 | Apr 13 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified |
| CVE-2011-0671 | 8.4 | Apr 13 | Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2010-3941 | 8.4 | Dec 16 | Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2022-35753 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35752 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35745 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21679 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21556 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21555 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21548 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21546 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21543 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-44676 | 8.1 | Dec 13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-44670 | 8.1 | Dec 13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41044 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41039 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-22035 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-41081 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38047 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-24504 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-30198 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-33634 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-38000 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26174 |
| CVE-2022-37958 | 8.1 | Sep 13 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35767 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-34714 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-34702 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.1.0 before 6.1.7601.26065 |
| CVE-2022-30141 | 8.1 | Jun 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-23270 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21972 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26919 | 8.1 | Apr 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-26435 | 8.1 | Sep 15 | Windows Scripting Engine Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2021-34492 | 8.1 | Jul 14 | Windows Certificate Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2021-28445 | 8.1 | Apr 13 | Windows Network File System Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-1722 | 8.1 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2020-17140 | 8.1 | Dec 10 | Windows SMB Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2020-0665 | 8.1 | Feb 11 | An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT… Affected: All versions, or not specified |
| CVE-2019-1424 | 8.1 | Nov 12 | A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0734 | 8.1 | May 16 | An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using… Affected: All versions, or not specified |
| CVE-2018-8225 | 8.1 | Jun 14 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code… Affected: All versions, or not specified |
| CVE-2017-0161 | 8.1 | Sep 13 | The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-8620 | 8.1 | Aug 8 | Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)