Microsoft Windows 7

Name: Microsoft Windows 7
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical267high410medium71low

updated 2026-10-27

vulnerabilities (922)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	6.1.7601.25984	2022-06-01	6.1.0 → 6.1.7601.25984
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	6.1.7601.25712	2021-09-15	6.1.0 → 6.1.7601.25712
CVE-2018-8174US	high7.5OT critical	88.2% (100th)	KEV	no fix	2018-05-09	2 versions
CVE-2021-1675US	high9.3OT critical	85.3% (100th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2021-40449US	medium4.6OT critical	81.9% (100th)	KEV	6.1.7601.25740	2021-10-13	6.1.0 → 6.1.7601.25740
CVE-2018-8120US	high7.0OT critical	73.3% (99th)	KEV	no fix	2018-05-09	2 versions
CVE-2018-8453US	high7.8OT critical	70.0% (99th)	KEV	no fix	2018-10-10	2 versions
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	6.1.7601.25860	2022-02-09	6.1.0 → 6.1.7601.25860
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	6.1.7601.26115	2022-09-13	6.1.0 → 6.1.7601.26115
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2018-8639US	high7.8OT critical	22.2% (98th)	KEV	no fix	2018-12-12	2 versions
CVE-2018-8440US	high7.8OT critical	18.5% (97th)	KEV	no fix	2018-09-13	2 versions
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	6.1.7601.25860	2022-02-09	6.1.0 → 6.1.7601.25860
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	publication	2020-11-11	6.1.0 → publication
CVE-2018-8611US	high7.8OT critical	4.20% (91st)	KEV	no fix	2018-12-12	2 versions
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	6.1.7601.25712	2021-09-15	6.1.0 → 6.1.7601.25712
CVE-2021-43226US	high7.8OT critical	3.28% (88th)	KEV	6.1.7601.25796	2021-12-15	6.1.0 → 6.1.7601.25796
CVE-2022-34713US	—OT critical	67.8% (99th)	KEV	6.1.7601.26065	2022-08-09	6.1.0 → 6.1.7601.26065
CVE-2021-33742US	medium6.8OT critical	59.4% (99th)	KEV	6.1.7601.25632	2021-06-08	2 versions
CVE-2021-34448US	high9.3OT critical	40.1% (99th)	KEV	6.1.7601.25661	2021-07-16	6.1.0 → 6.1.7601.25661
CVE-2020-1464US	low2.1OT critical	38.9% (99th)	KEV	publication	2020-08-17	6.1.0 → publication
CVE-2022-41128US	—OT critical	24.6% (98th)	KEV	6.1.7601.26221	2022-11-09	6.1.0 → 6.1.7601.26221
CVE-2021-34484US	medium4.6OT critical	21.8% (98th)	KEV	6.1.7601.25685	2021-08-12	6.1.0 → 6.1.7601.25685
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	6.1.7601.25769	2021-11-10	6.1.0 → 6.1.7601.25769
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	6.1.7601.26022	2022-07-12	6.1.0 → 6.1.7601.26022
CVE-2022-26925US	medium5.9OT critical	10.5% (96th)	KEV	6.1.7601.25954	2022-05-10	6.1.0 → 6.1.7601.25954
CVE-2021-31979US	high7.2OT critical	4.54% (92nd)	KEV	6.1.7601.25661	2021-07-14	6.1.0 → 6.1.7601.25661
CVE-2018-8589US	high7.8OT critical	3.02% (87th)	KEV	no fix	2018-11-14	2 versions
CVE-2021-31199US	medium4.6OT critical	2.95% (87th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2021-31201US	medium4.6OT critical	2.62% (85th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2022-21919US	medium6.9OT critical	2.43% (84th)	KEV	6.1.7601.25829	2022-01-11	6.1.0 → 6.1.7601.25829
CVE-2022-41073US	—OT critical	2.36% (84th)	KEV	6.1.7601.26221	2022-11-09	6.1.0 → 6.1.7601.26221
CVE-2022-41033US	—OT critical	1.89% (79th)	KEV	6.1.7601.26174	2022-10-11	6.1.0 → 6.1.7601.26174
CVE-2022-26809US	high10.0	91.0% (100th)	Exploit	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2022-23270US	high9.3	70.3% (99th)	Exploit	6.1.7601.25954	2022-05-10	6.1.0 → 6.1.7601.25954
CVE-2021-24086US	medium5.0	59.0% (99th)	Exploit	publication	2021-02-25	6.1.0 → publication
CVE-2022-23253US	medium4.0	56.4% (99th)	Exploit	6.1.7601.25898	2022-03-09	6.1.0 → 6.1.7601.25898
CVE-2022-34718US	—	54.7% (99th)	Exploit	6.1.7601.26115	2022-09-13	6.1.0 → 6.1.7601.26115
CVE-2021-26414US	medium4.3	49.8% (99th)	Exploit	6.1.7601.25984	2021-06-08	6.1.0 → 6.1.7601.25984
CVE-2018-8420US	high8.8	48.9% (99th)	Exploit	no fix	2018-09-13	2 versions
CVE-2019-1040US	medium4.3	48.0% (99th)	Exploit	publication	2019-06-12	6.1.0 → publication
CVE-2021-34481US	high7.5	47.7% (99th)	Exploit	6.1.7601.25685	2021-07-16	6.1.0 → 6.1.7601.25685
CVE-2018-8544US	high8.8	47.6% (99th)	Exploit	no fix	2018-11-14	2 versions
CVE-2018-8413US	high7.8	46.3% (99th)	Exploit	no fix	2018-10-10	2 versions
CVE-2022-44666US	—	41.4% (99th)	Exploit	6.1.7601.26266	2022-12-13	6.1.0 → 6.1.7601.26266
CVE-2022-24500US	medium6.8	38.0% (99th)	Exploit	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2019-1150US	high9.3	26.2% (98th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2022-24481US	medium4.6	16.8% (97th)	Exploit	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924

showing 50 of 922

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-264188 CVEs
CWE-269Improper Privilege Management183 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor146 CVEs
CWE-20Improper Input Validation139 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer136 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')93 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')39 CVEs
CWE-404Improper Resource Shutdown or Release28 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)922 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan