# Microsoft Windows 7.

Every CVE that names Microsoft Windows 7 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Microsoft Windows Server 2012: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8621.md)
  `CVE-2018-8621` · CVE record: Microsoft Windows Server 2012 and 2 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Improper resource shutdown in Microsoft Windows 7 and others](https://agentprime.io/advisories/CVE-2018-8611.md)
  `CVE-2018-8611` · CVE record: Microsoft Windows 7 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 12 Dec 2018 · Tags: Denial of service
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8596.md)
  `CVE-2018-8596` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8595.md)
  `CVE-2018-8595` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when Remote Procedure Call runtime…](https://agentprime.io/advisories/CVE-2018-8514.md)
  `CVE-2018-8514` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8477.md)
  `CVE-2018-8477` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Windows Server 2008: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2018-8589.md)
  `CVE-2018-8589` · CVE record: Microsoft Windows Server 2008 and 2 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the win32k component improperly…](https://agentprime.io/advisories/CVE-2018-8565.md)
  `CVE-2018-8565` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when DirectX improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8563.md)
  `CVE-2018-8563` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2018-8562.md)
  `CVE-2018-8562` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the way that Microsoft Graphics…](https://agentprime.io/advisories/CVE-2018-8553.md)
  `CVE-2018-8553` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the way that the VBScript engine handles…](https://agentprime.io/advisories/CVE-2018-8544.md)
  `CVE-2018-8544` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.48 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows Server 2016: An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX…](https://agentprime.io/advisories/CVE-2018-8471.md)
  `CVE-2018-8471` · CVE record: Microsoft Windows Server 2016 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when Windows Search handles objects in…](https://agentprime.io/advisories/CVE-2018-8450.md)
  `CVE-2018-8450` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A tampering vulnerability exists in PowerShell that could allow an attacker to execute…](https://agentprime.io/advisories/CVE-2018-8415.md)
  `CVE-2018-8415` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly…](https://agentprime.io/advisories/CVE-2018-8408.md)
  `CVE-2018-8408` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when "Kernel Remote Procedure Call…](https://agentprime.io/advisories/CVE-2018-8407.md)
  `CVE-2018-8407` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when PowerShell improperly handles specially…](https://agentprime.io/advisories/CVE-2018-8256.md)
  `CVE-2018-8256` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.23 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML…](https://agentprime.io/advisories/CVE-2018-8494.md)
  `CVE-2018-8494` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.22 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…](https://agentprime.io/advisories/CVE-2018-8489.md)
  `CVE-2018-8489` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when DirectX improperly handles objects in…](https://agentprime.io/advisories/CVE-2018-8486.md)
  `CVE-2018-8486` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when Windows Media Player improperly…](https://agentprime.io/advisories/CVE-2018-8482.md)
  `CVE-2018-8482` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when Windows Media Player improperly…](https://agentprime.io/advisories/CVE-2018-8481.md)
  `CVE-2018-8481` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists in the way that the Windows Graphics…](https://agentprime.io/advisories/CVE-2018-8472.md)
  `CVE-2018-8472` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2018-8453.md)
  `CVE-2018-8453` · CVE record: Microsoft Windows 7 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.70 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the way that Microsoft Graphics…](https://agentprime.io/advisories/CVE-2018-8432.md)
  `CVE-2018-8432` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the Microsoft JET Database Engine…](https://agentprime.io/advisories/CVE-2018-8423.md)
  `CVE-2018-8423` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.32 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when "Windows Theme API" does not properly…](https://agentprime.io/advisories/CVE-2018-8413.md)
  `CVE-2018-8413` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.46 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists when NTFS improperly checks access…](https://agentprime.io/advisories/CVE-2018-8411.md)
  `CVE-2018-8411` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An Elevation of Privilege vulnerability exists in Filter Manager when it improperly…](https://agentprime.io/advisories/CVE-2018-8333.md)
  `CVE-2018-8333` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8330.md)
  `CVE-2018-8330` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when Windows does not properly handle…](https://agentprime.io/advisories/CVE-2018-8475.md)
  `CVE-2018-8475` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape…](https://agentprime.io/advisories/CVE-2018-8468.md)
  `CVE-2018-8468` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8446.md)
  `CVE-2018-8446` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8443.md)
  `CVE-2018-8443` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8442.md)
  `CVE-2018-8442` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2018-8440.md)
  `CVE-2018-8440` · CVE record: Microsoft Windows 7 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.19 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when Windows Hyper-V on a host operating…](https://agentprime.io/advisories/CVE-2018-8434.md)
  `CVE-2018-8434` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows Graphics component…](https://agentprime.io/advisories/CVE-2018-8433.md)
  `CVE-2018-8433` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8424.md)
  `CVE-2018-8424` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8422.md)
  `CVE-2018-8422` · CVE record: Microsoft Windows 7 and 1 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML…](https://agentprime.io/advisories/CVE-2018-8420.md)
  `CVE-2018-8420` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.49 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel fails to properly…](https://agentprime.io/advisories/CVE-2018-8419.md)
  `CVE-2018-8419` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists when the Windows Kernel API improperly…](https://agentprime.io/advisories/CVE-2018-8410.md)
  `CVE-2018-8410` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could…](https://agentprime.io/advisories/CVE-2018-8393.md)
  `CVE-2018-8393` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.22 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could…](https://agentprime.io/advisories/CVE-2018-8392.md)
  `CVE-2018-8392` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.23 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows Server 2008: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8336.md)
  `CVE-2018-8336` · CVE record: Microsoft Windows Server 2008 and 2 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows font library improperly…](https://agentprime.io/advisories/CVE-2018-8332.md)
  `CVE-2018-8332` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists in Windows when the Windows bowser.sys…](https://agentprime.io/advisories/CVE-2018-8271.md)
  `CVE-2018-8271` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2018-8404.md)
  `CVE-2018-8404` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8398.md)
  `CVE-2018-8398` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows Server 2008: A remote code execution vulnerability exists in the way that the Windows Graphics Device…](https://agentprime.io/advisories/CVE-2018-8397.md)
  `CVE-2018-8397` · CVE record: Microsoft Windows Server 2008 and 2 more · No CVSS score · EPSS 0.68 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows Server 2008: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8396.md)
  `CVE-2018-8396` · CVE record: Microsoft Windows Server 2008 and 2 more · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2018-8394.md)
  `CVE-2018-8394` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails…](https://agentprime.io/advisories/CVE-2018-8349.md)
  `CVE-2018-8349` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.23 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2018-8348.md)
  `CVE-2018-8348` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows Server 2008: A remote code execution vulnerability exists in Microsoft Windows that could allow remote…](https://agentprime.io/advisories/CVE-2018-8346.md)
  `CVE-2018-8346` · CVE record: Microsoft Windows Server 2008 and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in Microsoft Windows that could allow remote…](https://agentprime.io/advisories/CVE-2018-8345.md)
  `CVE-2018-8345` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows font library improperly…](https://agentprime.io/advisories/CVE-2018-8344.md)
  `CVE-2018-8344` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.23 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Windows 7: An elevation of privilege vulnerability exists in the Network Driver Interface…](https://agentprime.io/advisories/CVE-2018-8343.md)
  `CVE-2018-8343` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · Not analysed yet · Published 15 Aug 2018

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-7.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-7.md?cursor=WyIyMDE4LTA4LTE1VDE3OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC04MzQzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-7&cursor=WyIyMDE4LTEyLTEyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC04NjIyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-7/?cursor=WyIyMDE4LTEyLTEyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC04NjIyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.