Vulnerabilities > Microsoft > Windows 7 > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-14 CVE-2023-34367 Improper Authentication vulnerability in Microsoft Windows 7
Windows 7 is vulnerable to a full blind TCP/IP hijacking attack.
network
low complexity
microsoft CWE-287
6.5
2022-10-11 CVE-2022-38043 Unspecified vulnerability in Microsoft products
Windows Security Support Provider Interface Information Disclosure Vulnerability
local
low complexity
microsoft
5.5
2022-05-10 CVE-2022-26925 Missing Authentication for Critical Function vulnerability in Microsoft products
Windows LSA Spoofing Vulnerability
network
high complexity
microsoft CWE-306
5.9
2022-05-10 CVE-2022-26934 Unspecified vulnerability in Microsoft products
Windows Graphics Component Information Disclosure Vulnerability
network
low complexity
microsoft
6.5
2022-05-10 CVE-2022-26935 Unspecified vulnerability in Microsoft products
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
low complexity
microsoft
6.5
2021-12-15 CVE-2021-43216 Exposure of Resource to Wrong Sphere vulnerability in Microsoft products
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
network
low complexity
microsoft CWE-668
6.5
2021-12-15 CVE-2021-43224 Unspecified vulnerability in Microsoft products
Windows Common Log File System Driver Information Disclosure Vulnerability
local
low complexity
microsoft
5.5
2020-08-17 CVE-2020-1383 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled.
local
low complexity
microsoft
5.5
2020-07-14 CVE-2020-1468 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2020-07-14 CVE-2020-1419 Missing Initialization of Resource vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-909
5.5