cve.bz

CWE-591: Sensitive Data Storage in Improperly Locked Memory

Filter

The product stores sensitive data in memory that is not locked, or that has been incorrectly locked.

What the weakness is: CWE-591 at MITRE. All weaknesses

Ask an AI about CWE-591

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-591: Sensitive Data Storage in Improperly Locked Memory and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/591.html and https://cve.bz/cve/cwe/591?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2025-11711EPSS 0.2%

    There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.

  2. 7.1CVE-2025-48819EPSS 0.4%

    Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

  3. 5.9CVE-2025-30394EPSS 34%

    Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

  4. 7.0CVE-2025-27732EPSS 0.3%

    Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  5. 7.5CVE-2025-27484EPSS 0.8%

    Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

  6. 8.1CVE-2025-27482EPSS 1.6%

    Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  7. 7.0CVE-2025-27475EPSS 0.4%

    Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.

  8. 5.9CVE-2025-27471EPSS 1.3%

    Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.

  9. 7.5CVE-2025-26686EPSS 1.4%

    Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  10. 8.1CVE-2025-26671EPSS 1.2%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  11. 7.0CVE-2025-26665EPSS 0.3%

    Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2025-26648EPSS 0.5%

    Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

  13. 8.1CVE-2025-24045EPSS 1.3%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  14. 8.1CVE-2025-24035EPSS 1.7%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  15. 8.1CVE-2025-21309EPSS 15%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  16. 8.1CVE-2025-21294EPSS 1.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  17. 8.1CVE-2025-21224EPSS 1.9%

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

  18. 8.1CVE-2024-49132EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  19. 8.1CVE-2024-49128EPSS 1.2%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  20. 8.1CVE-2024-49126EPSS 1.3%

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  21. 8.1CVE-2024-49123EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  22. 8.1CVE-2024-49115EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  23. 8.1CVE-2024-49108EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  24. 8.1CVE-2024-49106EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  25. 7.0CVE-2024-49097EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  26. 7.0CVE-2024-49095EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  27. 7.2CVE-2024-49091EPSS 1.7%

    Windows Domain Name Service Remote Code Execution Vulnerability

  28. 6.5CVE-2024-43633EPSS 0.6%

    Windows Hyper-V Denial of Service Vulnerability

  29. 5.9CVE-2024-38264EPSS 1.3%

    Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

  30. 7.8CVE-2024-43563EPSS 0.5%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  31. 7.5CVE-2024-38262EPSS 1.1%

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  32. 7.5CVE-2024-38263EPSS 1.2%

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  33. 7.0CVE-2024-38137EPSS 0.4%

    Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

  34. 8.8CVE-2024-38131EPSS 1.3%

    Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

  35. 7.0CVE-2024-38106KEVEPSS 6.3%

    Windows Kernel Elevation of Privilege Vulnerability

  36. 5.3CVE-2024-34525EPSS 0.2%

    FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.

  37. 7.0CVE-2024-26242EPSS 0.3%

    Windows Telephony Server Elevation of Privilege Vulnerability

  38. 7.0CVE-2024-26236EPSS 0.4%

    Windows Update Stack Elevation of Privilege Vulnerability

  39. 7.8CVE-2024-21446EPSS 0.7%

    NTFS Elevation of Privilege Vulnerability

  40. 7.0CVE-2024-21405EPSS 0.4%

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  41. 7.0CVE-2024-21355EPSS 0.3%

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  42. 7.8CVE-2024-20686EPSS 0.7%

    Win32k Elevation of Privilege Vulnerability

  43. 8.1CVE-2023-36005EPSS 24%

    Windows Telephony Server Elevation of Privilege Vulnerability

  44. 7.0CVE-2023-36403EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  45. 7.0CVE-2023-38159EPSS 4.1%

    Windows Graphics Component Elevation of Privilege Vulnerability

  46. 7.8CVE-2023-35362EPSS 0.3%

    Windows Clip Service Elevation of Privilege Vulnerability

  47. 7.0CVE-2023-35360EPSS 0.3%

    Windows Kernel Elevation of Privilege Vulnerability

  48. 6.6CVE-2023-35346EPSS 0.7%

    Windows DNS Server Remote Code Execution Vulnerability

  49. 6.6CVE-2023-35345EPSS 0.7%

    Windows DNS Server Remote Code Execution Vulnerability

  50. 6.6CVE-2023-35344EPSS 0.7%

    Windows DNS Server Remote Code Execution Vulnerability