Microsoft Windows 7 Service Pack 1 vulnerabilities, page 4
843 vulnerabilities
Known vulnerabilities in Microsoft Windows 7 Service Pack 1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-41331microsoftwindows_10+27
EPSS score2.03%
Windows Media Audio Decoder Remote Code Execution VulnerabilityCVE-2021-41342microsoftwindows_10+22EPSS score1.63%
Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-41333microsoftwindows_10+31EPSS score1.07%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-26425microsoftwindows_10+26EPSS score0.90%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26435microsoftwindows_10+27EPSS score5.38%
Windows Scripting Engine Memory Corruption VulnerabilityCVE-2021-26901microsoftwindows_10+27EPSS score0.81%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26442microsoftwindows_10+30EPSS score0.79%
Windows HTTP.sys Elevation of Privilege VulnerabilityCVE-2021-26869microsoftwindows_10+25EPSS score1.03%
Windows ActiveX Installer Service Information Disclosure VulnerabilityCVE-2021-26872microsoftwindows_10+27EPSS score0.75%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26887microsoftwindows_10+27EPSS score1.06%
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.
To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.
This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the FAQ section of this CVE for configuration guidance.CVE-2021-26873microsoftwindows_10+27EPSS score1.15%
Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-26881microsoftwindows_10+25EPSS score2.83%
Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2021-26898microsoftwindows_10+27EPSS score0.87%
Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26415microsoftwindows_10+28EPSS score3.57%
Windows Installer Elevation of Privilege VulnerabilityCVE-2021-26882microsoftwindows_10+27EPSS score2.11%
Remote Access API Elevation of Privilege VulnerabilityCVE-2021-26878microsoftwindows_10+27EPSS score0.85%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-26875microsoftwindows_10+27EPSS score0.86%
Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-26414microsoftwindows_10+28EPSS score49.84%
Windows DCOM Server Security Feature BypassCVE-2021-26862microsoftwindows_10+27EPSS score1.25%
Windows Installer Elevation of Privilege VulnerabilityCVE-2021-26899microsoftwindows_10+27EPSS score0.97%
Windows UPnP Device Host Elevation of Privilege Vulnerability