Login Request a demo
W7
Product
Windows 7 Service Pack 1
by Microsoft · last CVE Jun 14, 2023
On CISA KEVExploited in the wildRansomware-linked
2,366
CVEs
100
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities2,366In the news3Timeline
Severity mix
Critical 34High 457Medium 9Low 0
Severity
All severities500Critical34High457Medium9Low0
Exploitation
On CISA KEV100Exploited in the wild100
Watch

Add Windows 7 Service Pack 1 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-0708
RansomwareIn wildKEV
9.8
100%
May 16
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2017-8543
In wildKEV
9.8
74%
Jun 15
Microsoft Windows Search Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2015-1635
In wildKEV
9.8
100%
Apr 14
Microsoft HTTP.sys Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2020-1467
10.0
4%
Aug 17
An elevation of privilege vulnerability exists when Windows improperly handles hard links
Affected: All versions, or not specified
CVE-2021-26424
9.9
61%
Aug 12
Windows TCP/IP Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2021-28476
9.9
39%
May 11
Windows Hyper-V Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2019-1384
9.9
8%
Nov 12
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a…
Affected: All versions, or not specified
CVE-2019-1365
9.9
4%
Oct 10
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited…
Affected: All versions, or not specified
CVE-2022-35744
9.8
2%
May 31
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34722
9.8
3%
Sep 13
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34721
9.8
76%
Sep 13
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-34718
9.8
55%
Sep 13
Windows TCP/IP Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-30133
9.8
3%
Aug 9
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Affected: 6.1.0 before 6.1.7601.26065
CVE-2022-29130
9.8
4%
May 10
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-22012
9.8
4%
May 10
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2022-26809
9.8
91%
Apr 15
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2021-43217
9.8
7%
Dec 15
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2021-43215
9.8
3%
Dec 15
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
Affected: All versions, or not specified
CVE-2021-24094
9.8
22%
Feb 25
Windows TCP/IP Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2021-24077
9.8
3%
Feb 25
Windows Fax Service Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2021-24074
9.8
26%
Feb 25
Windows TCP/IP Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2019-1212
9.8
7%
Aug 14
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets
Affected: All versions, or not specified
CVE-2019-1182
9.8
17%
Aug 14
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system…
Affected: All versions, or not specified
CVE-2019-1181
9.8
76%
Aug 14
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system…
Affected: All versions, or not specified
CVE-2019-0736
9.8
4%
Aug 14
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client
Affected: All versions, or not specified
CVE-2019-0626
9.8
69%
Mar 5
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code…
Affected: All versions, or not specified
CVE-2017-11771
9.8
52%
Oct 13
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…
Affected: All versions, or not specified
CVE-2017-8589
9.8
26%
Jul 11
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016…
Affected: All versions, or not specified
CVE-2016-7182
9.8
30%
Oct 14
The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10…
Affected: All versions, or not specified
CVE-2016-3236
9.8
77%
Jun 16
The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…
Affected: All versions, or not specified
CVE-2011-2013
9.8
32%
Nov 8
Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to…
Affected: All versions, or not specified
CVE-2011-0657
9.8
62%
Apr 13
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7…
Affected: All versions, or not specified
CVE-2021-31962
9.4
4%
Jun 8
Kerberos AppContainer Security Feature Bypass Vulnerability
Affected: All versions, or not specified
CVE-2019-0719
9.1
11%
Nov 12
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating…
Affected: All versions, or not specified
Showing 34
The 500 most important CVEs for this product (exploited first, then by severity)