Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence
Zurück zu Microsoft

Microsoft

Windows 7

Veraltetes Betriebssystem (auch als Windows Embedded Standard 7), das noch regelmäßig auf älteren Thin Clients und HMI-PCs in Umspannwerken anzutreffen ist.

101

Schwachstellen

101

KEV

0

Advisories

RSS-Feed

Kategorie

operating-system

Davon kritisch (CVSS ≥ 9)

3

KEV-Treffer

101

Patch verfügbar

96 / 101

RDPHTTPSOnderstations

Schwachstellen

Sortiert nach IACS-Radar-Prioritätswert (CVSS, EPSS, KEV und industrielle Relevanz kombiniert).

CVE-2010-2568

Microsoft Windows Remote Code Execution Vulnerability

100/100CVSS 7.8 KEVPatch verfügbar

CVE-2015-1635

Microsoft HTTP.sys Remote Code Execution Vulnerability

100/100CVSS 9.8 KEVPatch verfügbar

CVE-2019-0708

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

100/100CVSS 9.8 KEVPatch verfügbar

CVE-2017-0144

Microsoft SMBv1 Remote Code Execution Vulnerability

99/100CVSS 8.8 KEVPatch verfügbar

CVE-2014-6332

Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

98/100CVSS 8.8 KEVPatch verfügbar

CVE-2017-0143

Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

97/100CVSS 8.8 KEVPatch verfügbar

CVE-2017-0148

Microsoft SMBv1 Server Remote Code Execution Vulnerability

96/100CVSS 8.1 KEVPatch verfügbar

CVE-2017-0146

Microsoft Windows SMB Remote Code Execution Vulnerability

96/100CVSS 8.8 KEVPatch verfügbar

CVE-2017-8464

Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

96/100CVSS 8.8 KEVPatch verfügbar

CVE-2017-0145

Microsoft SMBv1 Remote Code Execution Vulnerability

96/100CVSS 8.8 KEVPatch verfügbar

CVE-2022-30190

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

95/100CVSS 7.8 KEVPatch verfügbar

CVE-2017-8543

Microsoft Windows Search Remote Code Execution Vulnerability

94/100CVSS 9.8 KEVPatch verfügbar

CVE-2015-2426

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

94/100CVSS 8.8 KEVPatch verfügbar

CVE-2017-0147

Microsoft Windows SMBv1 Information Disclosure Vulnerability

93/100CVSS 7.5 KEVPatch verfügbar

CVE-2011-3402

Microsoft Windows Remote Code Execution Vulnerability

91/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2012-0151

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

90/100CVSS 7.8 KEVPatch verfügbar

CVE-2013-3918

Microsoft Windows Out-of-Bounds Write Vulnerability

89/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2014-4113

Microsoft Win32k Privilege Escalation Vulnerability

89/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8174

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

89/100CVSS 7.5 KEVPatch verfügbar

CVE-2021-1675

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

89/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-0824

Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

88/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2014-4114

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

87/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-40449

Microsoft Windows Win32k Privilege Escalation Vulnerability

87/100CVSS 7.8 KEVPatch verfügbar

CVE-2016-7255

Microsoft Win32k Privilege Escalation Vulnerability

87/100CVSS 7.8 KEVPatch verfügbar

CVE-2017-0213

Microsoft Windows Privilege Escalation Vulnerability

86/100CVSS 7.3 KEVPatch verfügbar

CVE-2016-7256

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

85/100CVSS 8.8 KEVPatch verfügbar

CVE-2015-0016

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

85/100CVSS 7.8 KEVPatch verfügbar

CVE-2014-6352

Microsoft Windows Code Injection Vulnerability

85/100CVSS 7.8 KEVPatch verfügbar

CVE-2014-1812

Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

85/100CVSS 8.8 KEVPatch verfügbar

CVE-2020-1020

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

85/100CVSS 8.8 KEVPatch verfügbar

CVE-2019-1458

Microsoft Win32k Privilege Escalation Vulnerability

84/100CVSS 7.8 KEVPatch verfügbar

CVE-2014-4148

Microsoft Windows Remote Code Execution Vulnerability

83/100CVSS 8.8 KEVPatch verfügbar

CVE-2016-3393

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

82/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8453

Microsoft Win32k Privilege Escalation Vulnerability

82/100CVSS 7.8 KEVPatch verfügbar

CVE-2016-0185

Microsoft Windows Media Center Remote Code Execution Vulnerability

82/100CVSS 7.8 KEVPatch verfügbar

CVE-2020-0938

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

82/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

81/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8120

Microsoft Win32k Privilege Escalation Vulnerability

80/100CVSS 7.0 KEVPatch verfügbar

CVE-2017-0101

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

77/100CVSS 7.8 KEVPatch verfügbar

CVE-2015-1701

Microsoft Win32k Privilege Escalation Vulnerability

76/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-33742

Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

76/100CVSS 7.5 KEVPatch verfügbar

CVE-2019-0808

Microsoft Win32k Privilege Escalation Vulnerability

75/100CVSS 7.8 KEVPatch verfügbar

CVE-2015-1671

Microsoft Windows Remote Code Execution Vulnerability

73/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-0803

Microsoft Win32k Privilege Escalation Vulnerability

72/100CVSS 7.8 KEVPatch verfügbar

CVE-2020-1054

Microsoft Win32k Privilege Escalation Vulnerability

72/100CVSS 7.0 KEVPatch verfügbar

CVE-2020-0787

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

71/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-21999

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

70/100CVSS 7.8 KEVPatch verfügbar

CVE-2013-3660

Microsoft Win32k Privilege Escalation Vulnerability

69/100CVSS 7.8 KEVPatch verfügbar

CVE-2013-3900

Microsoft WinVerifyTrust function Remote Code Execution

69/100CVSS 5.5 KEVPatch verfügbar

CVE-2020-1464

Microsoft Windows Spoofing Vulnerability

69/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-41128

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

68/100CVSS 8.8 KEVPatch verfügbar

CVE-2016-0099

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

68/100CVSS 7.8 KEVPatch verfügbar

CVE-2015-2387

Microsoft ATM Font Driver Privilege Escalation Vulnerability

68/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-0903

Microsoft GDI Remote Code Execution Vulnerability

67/100CVSS 8.8 KEVPatch verfügbar

CVE-2019-1405

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

66/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-37969

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

65/100CVSS 7.8 KEVPatch verfügbar

CVE-2010-0232

Microsoft Windows Kernel Exception Handler Vulnerability

65/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-34448

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

65/100CVSS 6.8 KEVPatch verfügbar

CVE-2015-2360

Microsoft Win32k Privilege Escalation Vulnerability

64/100CVSS 8.8 KEVPatch verfügbar

CVE-2016-0040

Microsoft Windows Kernel Privilege Escalation Vulnerability

63/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8639

Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

62/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2021-34484

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

62/100CVSS 7.8 KEVPatch verfügbar

CVE-2016-3309

Microsoft Windows Kernel Privilege Escalation Vulnerability

62/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-31956

Microsoft Windows NTFS Privilege Escalation Vulnerability

62/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-22047

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

61/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-22718

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

61/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8440

Microsoft Windows Privilege Escalation Vulnerability

61/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-1215

Microsoft Windows Privilege Escalation Vulnerability

61/100CVSS 7.8 KEVPatch verfügbar

CVE-2016-0165

Microsoft Win32k Privilege Escalation Vulnerability

59/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-26925

Microsoft Windows LSA Spoofing Vulnerability

59/100CVSS 8.1 KEVPatch verfügbar

CVE-2015-2546

Microsoft Win32k Memory Corruption Vulnerability

59/100CVSS 8.2 KEVPatch verfügbar

CVE-2017-0005

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

58/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-1388

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

57/100CVSS 7.8 KEVPatch verfügbar

CVE-2010-4398

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

57/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-1132

Microsoft Win32k Privilege Escalation Vulnerability

57/100CVSS 7.8 KEVPatch verfügbar

CVE-2017-0263

Microsoft Win32k Privilege Escalation Vulnerability

57/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

56/100CVSS 7.0 KEVPatch verfügbar

CVE-2022-24521

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

56/100CVSS 7.8 KEVPatch verfügbar

CVE-2020-0683

Microsoft Windows Installer Privilege Escalation Vulnerability

56/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8611

Microsoft Windows Kernel Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2020-1027

Microsoft Windows Kernel Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-0543

Microsoft Windows Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2016-0167

Microsoft Win32k Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2020-17087

Microsoft Windows Kernel Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-31979

Microsoft Windows Kernel Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-0859

Microsoft Win32k Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-0863

Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-36955

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-43226

Microsoft Windows Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-41073

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-41033

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2018-8589

Microsoft Win32k Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-1315

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2017-0001

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-1214

Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2019-0703

Microsoft Windows SMB Information Disclosure Vulnerability

50/100CVSS 6.5 KEVPatch verfügbar

CVE-2022-21919

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

50/100CVSS 7.0 KEVPatch verfügbar

CVE-2021-41379

Microsoft Windows Installer Privilege Escalation Vulnerability

50/100CVSS 5.5 KEVPatch verfügbar

CVE-2015-1769

Microsoft Windows Mount Manager Privilege Escalation Vulnerability

49/100CVSS 6.6 KEVPatch verfügbar

CVE-2021-31199

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

41/100CVSS 5.2 KEVPatch verfügbar

CVE-2021-31201

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

41/100CVSS 5.2 KEVPatch verfügbar

ICS-Advisories

Advisories von CISA oder direkt vom Hersteller.

Keine ICS-Advisories für dieses Produkt bekannt