Windows 7 Security Vulnerabilities

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21682

Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability

CVE-2023-21728

Windows Netlogon Denial of Service Vulnerability

CVE-2023-21730

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2023-21732

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21746

Windows NTLM Elevation of Privilege Vulnerability

CVE-2023-21747

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21748

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21749

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21750

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21752

Windows Backup Service Elevation of Privilege Vulnerability

CVE-2023-21754

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21755

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21757

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

CVE-2023-21760

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-21765

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-21772

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21773

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21774

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21776

Windows Kernel Information Disclosure Vulnerability

CVE-2023-34367

Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.