Weakness (CWE)
CWE-591: Sensitive Data Storage in Improperly Locked Memory
The product stores sensitive data in memory that is not locked, or that has been incorrectly locked.
How to prevent it (2 mitigations)
-
Architecture and Design
Identify data that needs to be protected from swapping and choose platform-appropriate protection mechanisms.
-
Implementation
When using potentially risky functions such as mlock() or VirtualLock(), check return values to ensure that locking operations are successful.
Source: MITRE CWE-591
5 results · Clear filters · Feed
-
High 7.5CVE-2025-26686 Public exploit
Windows TCP/IP Remote Code Execution Vulnerability
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
-
High 8.1CVE-2025-24035 Public exploit
Windows Remote Desktop Services Remote Code Execution Vulnerability
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
KEV Oct 4, 2023 -
Medium 4.7CVE-2023-21766 Public exploit
Windows Overlay Filter Information Disclosure Vulnerability
Windows Overlay Filter Information Disclosure Vulnerability
-
High 7.0CVE-2023-21739 Public exploit
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Windows Bluetooth Driver Elevation of Privilege Vulnerability