CWE-591 · 65 records

Sensitive Data Storage in Improperly Locked Memory

CVEs in this class

65 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2024-38106Weaponized	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.0	KEV	6.3%	Aug 13, 2024
59Plan	CVE-2023-28229Weaponized	Windows CNG Key Isolation Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.0	KEV	1.7%	Apr 11, 2023
39Monitor	CVE-2023-36005No exploit	Windows Telephony Server Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Pre-auth	High8.1	—	23.9%	Dec 12, 2023
36Monitor	CVE-2023-28220No exploit	Layer 2 Tunneling Protocol Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 pre-auth RCE	High8.1	—	15.0%	Apr 11, 2023
36Monitor	CVE-2023-28219No exploit	Layer 2 Tunneling Protocol Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 pre-auth RCE	High8.1	—	15.0%	Apr 11, 2023
36Monitor	CVE-2025-21309No exploit	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows server 2012 · CWE-591 pre-auth RCE	High8.1	—	14.9%	Jan 14, 2025
35Monitor	CVE-2024-38131No exploit	Clipboard Virtual Channel Extension Remote Code Execution Vulnerabilitymicrosoft · remote desktop client · CWE-591 pre-auth RCE	High8.8	—	1.3%	Aug 13, 2024
33Monitor	CVE-2025-27482No exploit	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-591 pre-auth RCE	High8.1	—	1.7%	Apr 8, 2025
33Monitor	CVE-2025-24035Proof of concept	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 pre-auth RCE	High8.1	—	1.7%	Mar 11, 2025
32Monitor	CVE-2025-30394No exploit	Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerabilitymicrosoft · windows server 2012 · CWE-591 Pre-auth Denial of service	Medium5.9	—	30.5%	May 13, 2025
32Monitor	CVE-2025-24045No exploit	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows server 2012 · CWE-591 pre-auth RCE	High8.1	—	1.3%	Mar 11, 2025
32Monitor	CVE-2025-21294No exploit	Microsoft Digest Authentication Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 pre-auth RCE	High8.1	—	1.2%	Jan 14, 2025
32Monitor	CVE-2024-49123No exploit	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-591 pre-auth RCE	High8.1	—	1.1%	Dec 11, 2024
32Monitor	CVE-2023-21546No exploit	Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-591 pre-auth RCE	High8.1	—	1.1%	Jan 10, 2023
32Monitor	CVE-2023-21535No exploit	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-591 pre-auth RCE	High8.1	—	1.1%	Jan 10, 2023
32Monitor	CVE-2023-21548No exploit	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-591 pre-auth RCE	High8.1	—	1.1%	Jan 10, 2023
32Monitor	CVE-2023-28283No exploit	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 pre-auth RCE	High8.1	—	1.0%	May 9, 2023
31Monitor	CVE-2024-20686No exploit	Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows server 2022 23h2 · CWE-591 Local privilege escalation	High7.8	—	0.7%	Jan 9, 2024
31Monitor	CVE-2024-21446No exploit	NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.8	—	0.7%	Mar 12, 2024
31Monitor	CVE-2024-43563No exploit	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.8	—	0.5%	Oct 8, 2024
31Monitor	CVE-2023-24946No exploit	Windows Backup Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.8	—	0.4%	May 9, 2023
31Monitor	CVE-2023-28236No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.8	—	0.3%	Apr 11, 2023
31Monitor	CVE-2023-35362No exploit	Windows Clip Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.8	—	0.3%	Jul 11, 2023
31Monitor	CVE-2023-35340No exploit	Windows CNG Key Isolation Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.8	—	0.3%	Jul 11, 2023
30Monitor	CVE-2023-38159No exploit	Windows Graphics Component Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-591 Local privilege escalation	High7.0	—	5.6%	Oct 10, 2023

CVE-2024-38106
60This week
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0KEVWeaponizedEPSS 6%
- Local privilege escalation
microsoft · windows 10 1507Aug 13, 2024
CVE-2023-28229
59Plan
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
HighCVSS 7.0KEVWeaponizedEPSS 2%
- Local privilege escalation
microsoft · windows 10 1507Apr 11, 2023
CVE-2023-36005
39Monitor
Windows Telephony Server Elevation of Privilege Vulnerability
HighCVSS 8.1No exploitEPSS 24%
- Pre-auth
microsoft · windows 10 1507Dec 12, 2023
CVE-2023-28220
36Monitor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 15%
- pre-auth RCE
microsoft · windows 10 1507Apr 11, 2023
CVE-2023-28219
36Monitor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 15%
- pre-auth RCE
microsoft · windows 10 1507Apr 11, 2023
CVE-2025-21309
36Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 15%
- pre-auth RCE
microsoft · windows server 2012Jan 14, 2025
CVE-2024-38131
35Monitor
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
microsoft · remote desktop clientAug 13, 2024
CVE-2025-27482
33Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 2%
- pre-auth RCE
microsoft · windows server 2016Apr 8, 2025
CVE-2025-24035
33Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 8.1Proof of conceptEPSS 2%
- pre-auth RCE
microsoft · windows 10 1507Mar 11, 2025
CVE-2025-30394
32Monitor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
MediumCVSS 5.9No exploitEPSS 30%
- Pre-auth
- Denial of service
microsoft · windows server 2012May 13, 2025
CVE-2025-24045
32Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows server 2012Mar 11, 2025
CVE-2025-21294
32Monitor
Microsoft Digest Authentication Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1507Jan 14, 2025
CVE-2024-49123
32Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1809Dec 11, 2024
CVE-2023-21546
32Monitor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1607Jan 10, 2023
CVE-2023-21535
32Monitor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1607Jan 10, 2023
CVE-2023-21548
32Monitor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1607Jan 10, 2023
CVE-2023-28283
32Monitor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1507May 9, 2023
CVE-2024-20686
31Monitor
Win32k Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
microsoft · windows server 2022 23h2Jan 9, 2024
CVE-2024-21446
31Monitor
NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
microsoft · windows 10 1507Mar 12, 2024
CVE-2024-43563
31Monitor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507Oct 8, 2024
CVE-2023-24946
31Monitor
Windows Backup Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507May 9, 2023
CVE-2023-28236
31Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507Apr 11, 2023
CVE-2023-35362
31Monitor
Windows Clip Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507Jul 11, 2023
CVE-2023-35340
31Monitor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507Jul 11, 2023
CVE-2023-38159
30Monitor
Windows Graphics Component Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 6%
- Local privilege escalation
microsoft · windows 10 1507Oct 10, 2023

All vulnerability classes