CWE-591

Sensitive Data Storage in Improperly Locked Memory

Parent: CWE-413 - Improper Resource Locking

The product stores sensitive data in memory that is not locked, or that has been incorrectly locked, which might cause the memory to be written to swap files on disk by the virtual memory manager. This can make the data more accessible to external actors.

77 vulnerabilities with CWE-591
CVE-2023-35340 HIGH
Windows CNG Key Isolation Service - Privilege Escalation
CVSS 7.8
CVE-2023-35310 MEDIUM
Microsoft Windows Server 2008 - Race Condition
CVSS 6.6
CVE-2023-35309 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20048 - Race Condition
CVSS 7.5
CVE-2023-33163 HIGH
Windows Network Load Balancing - RCE
CVSS 7.5
CVE-2023-32010 HIGH
Windows Bus Filter Driver - Privilege Escalation
CVSS 7.0
CVE-2023-28283 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19926 - Remote Code Execution
CVSS 8.1
CVE-2023-24946 HIGH
Windows Backup Service - Privilege Escalation
CVSS 7.8
CVE-2023-24899 HIGH
Windows Graphics Component - Privilege Escalation
CVSS 7.0
CVE-2023-28278 MEDIUM
Microsoft Windows Server 2008 - Race Condition
CVSS 6.6
CVE-2023-28273 HIGH
Microsoft Windows 10 1607 < 10.0.14393.5850 - Race Condition
CVSS 7.0
CVE-2023-28256 MEDIUM
Microsoft Windows Server 2008 - Remote Code Execution
CVSS 6.6
CVE-2023-28255 MEDIUM
Microsoft Windows Server 2008 - Remote Code Execution
CVSS 6.6
CVE-2023-28238 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19869 - Remote Code Execution
CVSS 7.5
CVE-2023-28236 HIGH
Windows Kernel - Privilege Escalation
CVSS 7.8
CVE-2023-28229 HIGH KEV
Windows CNG Key Isolation Service - Privilege Escalation
CVSS 7.0
CVE-2023-28224 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19869 - Remote Code Execution
CVSS 7.1
CVE-2023-28220 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19869 - Remote Code Execution
CVSS 8.1
CVE-2023-28219 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19869 - Remote Code Execution
CVSS 8.1
CVE-2023-23414 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19805 - Remote Code Execution
CVSS 7.1
CVE-2023-23407 HIGH
Microsoft Windows 10 1507 < 10.0.10240.19805 - Race Condition
CVSS 7.1
CVE-2023-23393 HIGH
Microsoft Windows 10 1809 < 10.0.17763.4131 - Race Condition
CVSS 7.0
CVE-2023-21771 HIGH
Windows Local Session Manager LSM - Privilege Escalation
CVSS 7.0
CVE-2023-21766 MEDIUM
Windows Overlay Filter - Info Disclosure
CVSS 4.7
CVE-2023-21739 HIGH
Windows Bluetooth Driver - Privilege Escalation
CVSS 7.0
CVE-2023-21548 HIGH
Windows SSTP - RCE
CVSS 8.1
Details
Vulnerabilities 77
Links
MITRE CWE Entry Search this CWE With Exploits