Skip to content

CWE-316 · weakness in Cryptography

Cleartext Storage of Sensitive Information in Memory

42 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 42 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Advantech WebAccess Cleartext Storage of Sensitive Information in MemoryCVE-2014-2366Advantech · CVSS 9 · 1.3% likely

    Advantech

  2. Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor dispu…CVE-2024-33901Keepassxc · CVSS 6.5 · 0.7% likely

    Keepassxc

  3. Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer…CVE-2022-29832Mitsubishi Electric Corporation · CVSS 3.7 · 0.7% likely

    Mitsubishi Electric

  4. RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'H…CVE-2019-3733Dell · CVSS 4.4 · 0.6% likely

    Dell

  5. Intergard SGS sensitive information in memoryCVE-2023-3762Intergard · CVSS 4.3 · 0.4% likely

    Intergard

  6. A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager…CVE-2021-31989Axis Communications AB · 0.4% likely

    Axis Communications AB

  7. Emerson ValveLink Products Cleartext Storage of Sensitive Information in MemoryCVE-2025-52579Emerson · CVSS 9.4 · 0.4% likely

    Emerson

  8. Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows)…CVE-2023-44153Acronis · CVSS 2.2 · 0.4% likely

    Acronis

  9. KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-managem…CVE-2024-33900Keepassxc · CVSS 6.5 · 0.3% likely

    Keepassxc

  10. An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.CVE-2024-36792Netgear · CVSS 8.2 · 0.3% likely

    NETGEAR

  11. Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a wind…CVE-2025-60794Perfood · CVSS 6.5 · 0.2% likely
  12. IBM ApplinX Information DisclosureCVE-2024-49800IBM · CVSS 4.3 · 0.2% likely

    IBM

  13. SmartConsole Sensitive Credential Exposure via Memory DumpCVE-2024-24915checkpoint · CVSS 6.1 · 0.2% likely

    Check Point

  14. Multiple Vulnerabilities in IBM DatacapCVE-2026-8636IBM · CVSS 5.5 · 0.2% likely

    IBM

  15. IBM Datacap Navigator information disclosureCVE-2024-39732IBM · CVSS 4.1 · 0.2% likely

    IBM

  16. DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material…CVE-2025-56565CVSS 7.6 · 0.2% likely
  17. The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnosti…CVE-2021-32942AVEVA · CVSS 6.6 · 0.2% likely

    AVEVA

  18. AVEVA System Platform Cleartext Storage of Sensitive Information in MemoryCVE-2022-0835AVEVA · CVSS 8.1 · 0.2% likely

    AVEVA

  19. Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. Thi…CVE-2021-23182Gallagher · CVSS 6 · 0.2% likely

    Gallagher

  20. A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions…CVE-2024-35282Fortinet · CVSS 3.9 · 0.2% likely

    Fortinet

  21. The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi cre…CVE-2025-65832Meatmeet · CVSS 4.6 · 0.1% likely

    Meatmeet

  22. A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the…CVE-2022-46141Siemens · CVSS 4.2 · 0.1% likely

    Siemens

  23. Emerson ValveLink Products Cleartext Storage of Sensitive Information in MemoryCVE-2025-50109Emerson · CVSS 7.7 · 0.1% likely

    Emerson

  24. The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.CVE-2025-48930TeleMessage · CVSS 2.8 · 0.1% likely

    TeleMessage

  25. Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access t…CVE-2022-33918Dell · CVSS 5.5 · 0.1% likely

    Dell

  26. Enpass Password Manager sensitive information in memoryCVE-2024-9203Enpass · CVSS 2.5 · 0.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.