Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a lo...
Product
Microsoft windows 7 vulnerabilities
2,370 published CVES affecting Microsoft windows 7, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2,370
- Critical
- 38
- High
- 1,610
- Medium
- 683
- Low
- 39
- Unscored
- 0
- CISA KEV
- 100
Latest Microsoft windows 7 CVEs
Newest publication first · page 1 of 40 · showing the latest 1,000
-
MediumCVSS 6.5 EPSS 1.2%
-
MediumCVSS 6.5 EPSS 1.7%
Windows Local Security Authority (LSA) Denial of Service Vulnerability
-
MediumCVSS 5.5 EPSS 0.50%
Windows Kernel Memory Information Disclosure Vulnerability
-
HighCVSS 7.8 EPSS 11.3%
Windows Kerberos Elevation of Privilege Vulnerability
-
MediumCVSS 6.7 EPSS 0.41%
Unified Write Filter Elevation of Privilege Vulnerability
-
CVE-2022-35753 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
PublishedHighCVSS 8.1 EPSS 1.2%Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
-
CVE-2022-35752 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
PublishedHighCVSS 8.1 EPSS 1.2%Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
-
HighCVSS 7.8 EPSS 5.5%
Windows Hyper-V Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 6.5%
Win32k Elevation of Privilege Vulnerability
-
MediumCVSS 5.9 EPSS 1.7%
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
-
CVE-2022-35745 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
PublishedHighCVSS 8.1 EPSS 1.2%Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
-
CVE-2022-35743 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
PublishedHighCVSS 7.8 EPSS 1.5%Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
-
CriticalCVSS 9.8 EPSS 2.0%
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
-
CVE-2023-21546 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
PublishedHighCVSS 8.1 EPSS 1.1%Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
-
MediumCVSS 5.3 EPSS 1.5%
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
-
HighCVSS 7.8 EPSS 0.52%
Windows Kernel Elevation of Privilege Vulnerability
-
HighCVSS 7.0 EPSS 0.29%
Windows Installer Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 0.55%
Windows Print Spooler Elevation of Privilege Vulnerability
-
CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability
PublishedHighCVSS 7.8 EPSS 0.46%Windows Credential Manager User Interface Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 0.76%
Windows Kernel Elevation of Privilege Vulnerability
-
CVE-2023-21557 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
PublishedCriticalCVSS 9.1 EPSS 2.2%Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
-
HighCVSS 7.8 EPSS 0.87%
Windows Kernel Elevation of Privilege Vulnerability
-
CVE-2023-21555 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
PublishedHighCVSS 8.1 EPSS 1.1%Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
-
HighCVSS 7.8 EPSS 0.87%
Windows Kernel Elevation of Privilege Vulnerability
-
MediumCVSS 5.5 EPSS 1.1%
Windows Kernel Information Disclosure Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.