Sensitive Data Storage in Improperly Locked Memory

The product stores sensitive data in memory that is not locked, or that has been incorrectly locked, which might cause the memory to be written to swap files on disk by the virtual memory manager. This can make the data more accessible to external actors.

CVEs (77)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28256 1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 more Jun 17, 2026 Apr 11, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28255 1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 more Jun 17, 2026 Apr 11, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28238 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2023-28236 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28229 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-28224 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVE-2023-28220 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 11, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28219 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 11, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-23414 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Mar 14, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVE-2023-23407 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Mar 14, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVE-2023-23393 1Microsoft 8Windows 10 1809 Windows 10 20h2Windows 10 21h2+5 more Jun 17, 2026 Mar 14, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
CVE-2023-21771 1Microsoft 3Windows 10 Windows 11Windows Server 2022 Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
CVE-2023-21766 1Microsoft 5Windows 10 Windows 11Windows Server 2016+2 more Jun 17, 2026 Jan 10, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Windows Overlay Filter Information Disclosure Vulnerability
CVE-2023-21739 1Microsoft 10Windows 10 1507 Windows 10 1607Windows 10 1809+7 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-21548 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-21546 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21535 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 20h2+11 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Previous 1 2 34