W7
Product
Windows 7 Service Pack 1
On CISA KEVExploited in the wildRansomware-linked
2,366
CVEs
100
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 34High 457Medium 9Low 0
Watch
Add Windows 7 Service Pack 1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-17140 | 8.1 | Dec 10 | Windows SMB Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2020-0665 | 8.1 | Feb 11 | An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT… Affected: All versions, or not specified |
| CVE-2019-1424 | 8.1 | Nov 12 | A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0734 | 8.1 | May 16 | An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using… Affected: All versions, or not specified |
| CVE-2018-8225 | 8.1 | Jun 14 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code… Affected: All versions, or not specified |
| CVE-2017-0161 | 8.1 | Sep 13 | The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-8620 | 8.1 | Aug 8 | Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and… Affected: All versions, or not specified |
| CVE-2017-8565 | 8.1 | Jul 11 | Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and… Affected: All versions, or not specified |
| CVE-2017-8563 | 8.1 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
| CVE-2017-0272 | 8.1 | May 12 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Affected: All versions, or not specified |
| CVE-2017-0166 | 8.1 | Apr 12 | An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated Affected: All versions, or not specified |
| CVE-2016-3238 | 8.1 | Jul 13 | The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and… Affected: All versions, or not specified |
| CVE-2016-3223 | 8.1 | Jun 16 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0036 | 8.1 | Feb 10 | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to… Affected: All versions, or not specified |
| CVE-2013-3894 | 8.1 | Oct 9 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Affected: All versions, or not specified |
| CVE-2012-0003 | 8.1 | Jan 10 | Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008… Affected: All versions, or not specified |
| CVE-2010-0492 | 8.1 | Mar 31 | Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the… Affected: All versions, or not specified |
| CVE-2009-3671 | 8.1 | Dec 9 | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly… Affected: All versions, or not specified |
| CVE-2009-2529 | 8.1 | Oct 14 | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2022-24533 | 8.0 | Apr 15 | Remote Desktop Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21905 | 8.0 | Jan 11 | Windows Hyper-V Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2022-21893 | 8.0 | Jan 11 | Remote Desktop Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-34446 | 8.0 | Jul 16 | Windows HTML Platforms Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2021-1726 | 8.0 | Feb 25 | Microsoft SharePoint Server Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2020-1552 | 8.0 | Aug 17 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations Affected: All versions, or not specified |
| CVE-2020-0655 | 8.0 | Feb 11 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection,… Affected: All versions, or not specified |
| CVE-2019-0720 | 8.0 | Aug 14 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: All versions, or not specified |
| CVE-2019-0887 | 8.0 | Jul 15 | A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka… Affected: All versions, or not specified |
| CVE-2022-35756 | 7.8 | May 31 | Windows Kerberos Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-35751 | 7.8 | May 31 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-35750 | 7.8 | May 31 | Win32k Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-35743 | 7.8 | May 31 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21774 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21773 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21772 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21765 | 7.8 | Jan 10 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21755 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21754 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21749 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21748 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21747 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21746 | 7.8 | Jan 10 | Windows NTLM Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21730 | 7.8 | Jan 10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21726 | 7.8 | Jan 10 | Windows Credential Manager User Interface Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21680 | 7.8 | Jan 10 | Windows Win32k Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21678 | 7.8 | Jan 10 | Windows Print Spooler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21675 | 7.8 | Jan 10 | Windows Kernel Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21561 | 7.8 | Jan 10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21552 | 7.8 | Jan 10 | Windows GDI Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-21541 | 7.8 | Jan 10 | Windows Task Scheduler Elevation of Privilege Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)