Windows 7

Vendor:

First CVE: Nov 12, 2008 · Active for 17 years

3,088
Total CVEs
More Total CVEs than 100% of tracked products
193.0
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
4.9%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Windows 7 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 12, 2008
17 years ago
Most Recent CVE
Jun 14, 2023
1,136 days ago

CVE Severity & Scoring

Windows 73,088 CVEs
All CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local1,306 (42.3%)
Network930 (30.1%)
Unknown809 (26.2%)
Physical12 (0.4%)
Adjacent Network31 (1.0%)
Attack Complexity
Low1,807 (58.5%)
High472 (15.3%)
Unknown809 (26.2%)
User Interaction
None1,389 (45.0%)
Unknown809 (26.2%)
Required890 (28.8%)
Privileges Required
Low1,164 (37.7%)
High45 (1.5%)
None1,070 (34.7%)
Unknown809 (26.2%)

Top CVEs

Signals from CVEs in this product scope (3088 CVEs).

3,088 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-0646CRITICAL
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
Jan 14, 20209.899YESYES
CVE-2019-0708CRITICAL
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP
May 16, 20199.899YESYES
CVE-2015-1635CRITICAL
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via c
Apr 14, 20159.899YESYES
CVE-2020-1147HIGH
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.
Jul 14, 20207.898YESYES
CVE-2017-8464HIGH
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,
Jun 15, 20178.898YESYES
CVE-2017-0199HIGH
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows
Apr 12, 20177.898YESYES
CVE-2017-0148HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.198YESYES
CVE-2017-0147HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20177.598YESYES
CVE-2017-0144HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.898YESYES
CVE-2017-0143HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.898YESYES
View all 3,088 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (3088 CVEs).

CISA KEV
151 CVEs
4.9% of CVEs· 97th percentile
Metasploit
95 CVEs
3.1% of CVEs· 96th percentile
Nuclei
2 CVEs
0.1% of CVEs· 96th percentile
ExploitDB
409 CVEs
13.2% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (3088 CVEs).

Media Mentions

Signals from CVEs in this product scope (3088 CVEs).

Top CNAs Publishing CVEs For Windows 7

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
sp1297.12.5%11
gold110.024.2%00