CWE-591 — known CVE vulnerabilities

CVEs classified under CWE-591, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (45)

• CVE-2024-38131 — CVSS 8.8 (high): Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
• CVE-2025-27482 — CVSS 8.1 (high): Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a…
• CVE-2025-24045 — CVSS 8.1 (high): Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over…
• CVE-2025-24035 — CVSS 8.1 (high): Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over…
• CVE-2025-21309 — CVSS 8.1 (high): Windows Remote Desktop Services Remote Code Execution Vulnerability
• CVE-2025-21294 — CVSS 8.1 (high): Microsoft Digest Authentication Remote Code Execution Vulnerability
• CVE-2023-28283 — CVSS 8.1 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2023-28220 — CVSS 8.1 (high): Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
• CVE-2023-28219 — CVSS 8.1 (high): Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
• CVE-2023-21548 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2024-43563 — CVSS 7.8 (high): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• CVE-2024-21446 — CVSS 7.8 (high): NTFS Elevation of Privilege Vulnerability
• CVE-2024-20686 — CVSS 7.8 (high): Win32k Elevation of Privilege Vulnerability
• CVE-2023-35340 — CVSS 7.8 (high): Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
• CVE-2023-24946 — CVSS 7.8 (high): Windows Backup Service Elevation of Privilege Vulnerability
• CVE-2023-28236 — CVSS 7.8 (high): Windows Kernel Elevation of Privilege Vulnerability
• CVE-2025-27484 — CVSS 7.5 (high): Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to…
• CVE-2025-26686 — CVSS 7.5 (high): Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
• CVE-2024-38262 — CVSS 7.5 (high): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
• CVE-2024-38263 — CVSS 7.5 (high): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
• CVE-2023-36005 — CVSS 7.5 (high): Windows Telephony Server Elevation of Privilege Vulnerability
• CVE-2023-33163 — CVSS 7.5 (high): Windows Network Load Balancing Remote Code Execution Vulnerability
• CVE-2023-28238 — CVSS 7.5 (high): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
• CVE-2024-49091 — CVSS 7.2 (high): Windows Domain Name Service Remote Code Execution Vulnerability
• CVE-2025-48819 — CVSS 7.1 (high): Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to…
• CVE-2023-28224 — CVSS 7.1 (high): Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
• CVE-2023-23414 — CVSS 7.1 (high): Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
• CVE-2025-27475 — CVSS 7.0 (high): Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.
• CVE-2025-26665 — CVSS 7.0 (high): Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
• CVE-2024-38106 — CVSS 7.0 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-21405 — CVSS 7.0 (high): Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
• CVE-2024-21355 — CVSS 7.0 (high): Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
• CVE-2023-36403 — CVSS 7.0 (high): Windows Kernel Elevation of Privilege Vulnerability
• CVE-2023-32010 — CVSS 7.0 (high): Windows Bus Filter Driver Elevation of Privilege Vulnerability
• CVE-2023-28229 — CVSS 7.0 (high) — actively exploited: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
• CVE-2023-21739 — CVSS 7.0 (high): Windows Bluetooth Driver Elevation of Privilege Vulnerability
• CVE-2023-35345 — CVSS 6.6 (medium): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2023-35344 — CVSS 6.6 (medium): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2023-28256 — CVSS 6.6 (medium): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2023-28255 — CVSS 6.6 (medium): Windows DNS Server Remote Code Execution Vulnerability
• CVE-2025-11711 — CVSS 6.5 (medium): There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in…
• CVE-2024-43633 — CVSS 6.5 (medium): Windows Hyper-V Denial of Service Vulnerability
• CVE-2025-27471 — CVSS 5.9 (medium): Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a…
• CVE-2024-38264 — CVSS 5.9 (medium): Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
• CVE-2024-34525 — CVSS 5.3 (medium): FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.