Advisories · Technology

Microsoft Windows 7 Service Pack 1.

Every CVE that names Microsoft Windows 7 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-26935 CVE record

CVSS 6.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26934 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26931 CVE record

CVSS 7.5 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26926 CVE record

CVSS 7.8 High

Windows Address Book Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 May 2022
CVE-2022-26925 CVE record

CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows LSA Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 10 May 2022
CVE-2022-23270 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22019 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22015 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22014 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22013 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22012 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22011 CVE record

CVSS 5.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-21972 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26919 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26918 CVE record

CVSS 7.8 High

Windows Fax Compose Form Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26917 CVE record

CVSS 7.8 High

Windows Fax Compose Form Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26916 CVE record

CVSS 7.8 High

Windows Fax Compose Form Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26915 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26904 CVE record

CVSS 7.0 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022
CVE-2022-26903 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26831 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26827 CVE record

CVSS 7.0 High

Windows File Server Resource Management Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26810 CVE record

CVSS 7.8 High

Windows File Server Resource Management Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26809 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26807 CVE record

CVSS 7.0 High

Windows Work Folder Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022
CVE-2022-26802 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26801 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26798 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26797 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26796 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26794 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26792 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26790 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26787 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24544 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24542 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24541 CVE record

CVSS 8.8 High

Windows Server Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24540 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022
CVE-2022-24534 CVE record

CVSS 7.5 High

Win32 Stream Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24533 CVE record

CVSS 8.0 High

Remote Desktop Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24530 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24528 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24521 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 15 Apr 2022
CVE-2022-24500 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows SMB Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24499 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24498 CVE record

CVSS 6.5 Medium

Windows iSCSI Target Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24494 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24493 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24492 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24485 CVE record

CVSS 7.5 High

Win32 File Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24481 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24474 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-21983 CVE record

CVSS 7.5 High

Win32 Stream Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24503 CVE record

CVSS 5.4 Medium

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24502 CVE record

CVSS 4.3 Medium

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24459 CVE record

CVSS 7.8 High

Windows Fax and Scan Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24454 CVE record

CVSS 7.8 High

Windows Security Support Provider Interface Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23299 CVE record

CVSS 7.8 High

Windows PDEV Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23298 CVE record

CVSS 7.0 High

Windows NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23297 CVE record

CVSS 5.5 Medium

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022