# Microsoft Windows 7 Service Pack 1.

Every CVE that names Microsoft Windows 7 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows CryptoAPI Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2022-34689.md)
  `CVE-2022-34689` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.38 · Not analysed yet · Published 11 Oct 2022
- [Windows TCP/IP Driver Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-33645.md)
  `CVE-2022-33645` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Oct 2022
- [Windows GDI+ Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-33635.md)
  `CVE-2022-33635` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2022
- [Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-33634.md)
  `CVE-2022-33634` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Oct 2022
- [Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30198.md)
  `CVE-2022-30198` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Oct 2022
- [Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-24504.md)
  `CVE-2022-24504` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Oct 2022
- [Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22035.md)
  `CVE-2022-22035` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Oct 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-38006.md)
  `CVE-2022-38006` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Sept 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-38005.md)
  `CVE-2022-38005` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows Fax Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-38004.md)
  `CVE-2022-38004` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-37969.md)
  `CVE-2022-37969` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.28 · Not analysed yet · Published 13 Sept 2022 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-37964.md)
  `CVE-2022-37964` · CVE record: Microsoft Windows 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-37958.md)
  `CVE-2022-37958` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.86 · Not analysed yet · Published 13 Sept 2022
- [Windows Group Policy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-37955.md)
  `CVE-2022-37955` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-35840.md)
  `CVE-2022-35840` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-35836.md)
  `CVE-2022-35836` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-35835.md)
  `CVE-2022-35835` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-35834.md)
  `CVE-2022-35834` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows Secure Channel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-35833.md)
  `CVE-2022-35833` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2022
- [Windows Event Tracing Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-35832.md)
  `CVE-2022-35832` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Sept 2022
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-35803.md)
  `CVE-2022-35803` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 13 Sept 2022
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34734.md)
  `CVE-2022-34734` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34733.md)
  `CVE-2022-34733` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34732.md)
  `CVE-2022-34732` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34731.md)
  `CVE-2022-34731` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34730.md)
  `CVE-2022-34730` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows GDI Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-34729.md)
  `CVE-2022-34729` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 13 Sept 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-34728.md)
  `CVE-2022-34728` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Sept 2022
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34727.md)
  `CVE-2022-34727` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34726.md)
  `CVE-2022-34726` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34722.md)
  `CVE-2022-34722` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Sept 2022
- [Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34721.md)
  `CVE-2022-34721` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.76 · Not analysed yet · Published 13 Sept 2022
- [Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-34720.md)
  `CVE-2022-34720` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2022
- [Windows Distributed File System (DFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-34719.md)
  `CVE-2022-34719` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34718.md)
  `CVE-2022-34718` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.55 · Not analysed yet · Published 13 Sept 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30200.md)
  `CVE-2022-30200` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows Credential Roaming Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30170.md)
  `CVE-2022-30170` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) and 4 more · CVSS 7.3 High · Not analysed yet · Published 13 Sept 2022
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-37956.md)
  `CVE-2022-37956` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Sept 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-35837.md)
  `CVE-2022-35837` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Sept 2022
- [Windows Bluetooth Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-35820.md)
  `CVE-2022-35820` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Aug 2022
- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-35795.md)
  `CVE-2022-35795` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Aug 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-35793.md)
  `CVE-2022-35793` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.3 High · Not analysed yet · Published 9 Aug 2022
- [Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-35769.md)
  `CVE-2022-35769` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Denial of service
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-35768.md)
  `CVE-2022-35768` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-35767.md)
  `CVE-2022-35767` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Aug 2022 · Tags: Code injection
- [Microsoft ATA Port Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-35760.md)
  `CVE-2022-35760` · CVE record: Microsoft Windows 10 Version 21H1 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Aug 2022
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34714.md)
  `CVE-2022-34714` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Aug 2022 · Tags: Code injection
- [Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34713.md)
  `CVE-2022-34713` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.68 · Not analysed yet · Published 9 Aug 2022
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-34708.md)
  `CVE-2022-34708` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Information disclosure
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-34707.md)
  `CVE-2022-34707` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Aug 2022 · Tags: Memory corruption
- [Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-34706.md)
  `CVE-2022-34706` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-34702.md)
  `CVE-2022-34702` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Aug 2022 · Tags: Race condition
- [Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-34701.md)
  `CVE-2022-34701` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Denial of service
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-34691.md)
  `CVE-2022-34691` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Aug 2022 · Tags: Privilege escalation
- [Windows Fax Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-34690.md)
  `CVE-2022-34690` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Aug 2022
- [Windows WebBrowser Control Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30194.md)
  `CVE-2022-30194` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Aug 2022 · Tags: Code injection
- [Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30133.md)
  `CVE-2022-30133` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Aug 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30226.md)
  `CVE-2022-30226` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.1 High · Not analysed yet · Published 12 Jul 2022
- [Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30225.md)
  `CVE-2022-30225` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.1 High · Not analysed yet · Published 12 Jul 2022
- [Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30224.md)
  `CVE-2022-30224` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Jul 2022

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-7-service-pack-1.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-7-service-pack-1.md?cursor=WyIyMDIyLTA3LTEyVDIyOjM3OjUxLjAwMDAwMFoiLCJDVkUtMjAyMi0zMDIyNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-7-service-pack-1&cursor=WyIyMDIyLTEwLTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0zNTc3MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-7-service-pack-1/?cursor=WyIyMDIyLTEwLTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi0zNTc3MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.
