Microsoft Windows 7 Service Pack 1

Name: Microsoft Windows 7 Service Pack 1
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical207high364medium71low

updated 2026-10-27

vulnerabilities (817)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	6.1.7601.25984	2022-06-01	6.1.0 → 6.1.7601.25984
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	6.1.7601.25712	2021-09-15	6.1.0 → 6.1.7601.25712
CVE-2021-1675US	high9.3OT critical	85.3% (100th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2021-40449US	medium4.6OT critical	81.9% (100th)	KEV	6.1.7601.25740	2021-10-13	6.1.0 → 6.1.7601.25740
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	6.1.7601.25860	2022-02-09	6.1.0 → 6.1.7601.25860
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	6.1.7601.26115	2022-09-13	6.1.0 → 6.1.7601.26115
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	6.1.7601.25860	2022-02-09	6.1.0 → 6.1.7601.25860
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	publication	2020-11-11	6.1.0 → publication
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	6.1.7601.25712	2021-09-15	6.1.0 → 6.1.7601.25712
CVE-2021-43226US	high7.8OT critical	3.28% (88th)	KEV	6.1.7601.25796	2021-12-15	6.1.0 → 6.1.7601.25796
CVE-2022-34713US	—OT critical	67.8% (99th)	KEV	6.1.7601.26065	2022-08-09	6.1.0 → 6.1.7601.26065
CVE-2021-33742US	medium6.8OT critical	59.4% (99th)	KEV	6.1.7601.25632	2021-06-08	2 versions
CVE-2021-34448US	high9.3OT critical	40.1% (99th)	KEV	6.1.7601.25661	2021-07-16	6.1.0 → 6.1.7601.25661
CVE-2020-1464US	low2.1OT critical	38.9% (99th)	KEV	publication	2020-08-17	6.1.0 → publication
CVE-2022-41128US	—OT critical	24.6% (98th)	KEV	6.1.7601.26221	2022-11-09	6.1.0 → 6.1.7601.26221
CVE-2021-34484US	medium4.6OT critical	21.8% (98th)	KEV	6.1.7601.25685	2021-08-12	6.1.0 → 6.1.7601.25685
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	6.1.7601.25769	2021-11-10	6.1.0 → 6.1.7601.25769
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	6.1.7601.26022	2022-07-12	6.1.0 → 6.1.7601.26022
CVE-2022-26925US	medium5.9OT critical	10.5% (96th)	KEV	6.1.7601.25954	2022-05-10	6.1.0 → 6.1.7601.25954
CVE-2021-31979US	high7.2OT critical	4.54% (92nd)	KEV	6.1.7601.25661	2021-07-14	6.1.0 → 6.1.7601.25661
CVE-2021-31199US	medium4.6OT critical	2.95% (87th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2021-31201US	medium4.6OT critical	2.62% (85th)	KEV	6.1.7601.25632	2021-06-08	6.1.0 → 6.1.7601.25632
CVE-2022-21919US	medium6.9OT critical	2.43% (84th)	KEV	6.1.7601.25829	2022-01-11	6.1.0 → 6.1.7601.25829
CVE-2022-41073US	—OT critical	2.36% (84th)	KEV	6.1.7601.26221	2022-11-09	6.1.0 → 6.1.7601.26221
CVE-2022-41033US	—OT critical	1.89% (79th)	KEV	6.1.7601.26174	2022-10-11	6.1.0 → 6.1.7601.26174
CVE-2022-26809US	high10.0	91.0% (100th)	Exploit	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2022-23270US	high9.3	70.3% (99th)	Exploit	6.1.7601.25954	2022-05-10	6.1.0 → 6.1.7601.25954
CVE-2021-24086US	medium5.0	59.0% (99th)	Exploit	publication	2021-02-25	6.1.0 → publication
CVE-2022-23253US	medium4.0	56.4% (99th)	Exploit	6.1.7601.25898	2022-03-09	6.1.0 → 6.1.7601.25898
CVE-2022-34718US	—	54.7% (99th)	Exploit	6.1.7601.26115	2022-09-13	6.1.0 → 6.1.7601.26115
CVE-2021-26414US	medium4.3	49.8% (99th)	Exploit	6.1.7601.25984	2021-06-08	6.1.0 → 6.1.7601.25984
CVE-2019-1040US	medium4.3	48.0% (99th)	Exploit	publication	2019-06-12	6.1.0 → publication
CVE-2021-34481US	high7.5	47.7% (99th)	Exploit	6.1.7601.25685	2021-07-16	6.1.0 → 6.1.7601.25685
CVE-2022-44666US	—	41.4% (99th)	Exploit	6.1.7601.26266	2022-12-13	6.1.0 → 6.1.7601.26266
CVE-2021-28476US	medium6.5	39.2% (99th)	Exploit	6.1.7601.24598	2021-05-11	2 versions
CVE-2022-24500US	medium6.8	38.0% (99th)	Exploit	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2019-1150US	high9.3	26.2% (98th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2022-24481US	medium4.6	16.8% (97th)	Exploit	6.1.7601.25924	2022-04-15	6.1.0 → 6.1.7601.25924
CVE-2019-1151US	high9.3	15.5% (97th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2021-38666US	medium6.8	15.2% (97th)	Exploit	6.1.7601.25769	2021-11-10	6.1.0 → 6.1.7601.25769
CVE-2019-1019US	medium6.0	15.1% (97th)	Exploit	publication	2019-06-12	6.1.0 → publication
CVE-2020-1337US	high7.2	14.2% (97th)	Exploit	publication	2020-08-17	6.1.0 → publication
CVE-2019-1149US	high9.3	13.9% (97th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2019-1152US	high9.3	13.1% (96th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2019-1145US	high9.3	13.1% (96th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2019-1144US	high9.3	13.1% (96th)	Exploit	publication	2019-08-14	6.1.0 → publication
CVE-2019-0948US	medium4.3	12.7% (96th)	Exploit	publication	2019-06-12	6.1.0 → publication

showing 50 of 817

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-264181 CVEs
CWE-269Improper Privilege Management178 CVEs
CWE-20Improper Input Validation130 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor110 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer91 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')90 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')40 CVEs
CWE-787Out-of-bounds Write25 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)817 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan