Microsoft Windows 7

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.

Windows CryptoAPI Denial of Service Vulnerability

An spoofing vulnerability exists when Internet Explorer improperly handles URLs, aka 'Internet Explorer Spoofing Vulnerability'.

Windows Remote Assistance Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Server Service Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Print Spooler Information Disclosure Vulnerability

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS Denial of Service Vulnerability".

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows Security Account Manager (SAM) Denial of Service Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Browser Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Windows NTLM Spoofing Vulnerability

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.