CWE-591
77 CVEs • Abstraction: Variant
Sensitive Data Storage in Improperly Locked Memory
The product stores sensitive data in memory that is not locked, or that has been incorrectly locked, which might cause the memory to be written to swap files on disk by the virtual memory manager. This can make the data more accessible to external actors.
CVEs (77)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 moreJun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Remote Desktop Services Remote Code Execution Vulnerability |
1Microsoft 5Windows Server 2016 Windows Server 2019Windows Server 2022+2 moreJun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Remote Desktop Services Remote Code Execution Vulnerability |
1Microsoft 5Windows Server 2016 Windows Server 2019Windows Server 2022+2 moreJun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Remote Desktop Services Remote Code Execution Vulnerability |
1Microsoft 5Windows Server 2016 Windows Server 2019Windows Server 2022+2 moreJun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Remote Desktop Services Remote Code Execution Vulnerability |
1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 moreJun 17, 2026 Dec 12, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 moreJun 17, 2026 Dec 12, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
1Microsoft 6Windows Server 2012 Windows Server 2016Windows Server 2019+3 moreJun 17, 2026 Dec 12, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 Windows Domain Name Service Remote Code Execution Vulnerability |
1Microsoft 3Windows 11 22h2 Windows 11 23h2Windows 11 24h2Jun 17, 2026 Nov 12, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Windows Hyper-V Denial of Service Vulnerability |
1Microsoft 5Windows 11 22h2 Windows 11 23h2Windows 11 24h2+2 moreJun 17, 2026 Nov 12, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability |
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Oct 8, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 moreJun 17, 2026 Oct 8, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 moreJun 17, 2026 Sep 10, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 21h2+5 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
1Microsoft 16Remote Desktop Client Windows 10 1507Windows 10 1607+13 moreJun 17, 2026 Aug 13, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Clipboard Virtual Channel Extension Remote Code Execution Vulnerability |
1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 moreJun 17, 2026 Aug 13, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability |
FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file. |
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Apr 9, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Telephony Server Elevation of Privilege Vulnerability |
Windows Update Stack Elevation of Privilege Vulnerability |
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Mar 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 NTFS Elevation of Privilege Vulnerability |
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Feb 13, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |