CWE-591 · Race Conditions
Sensitive Data Storage in Improperly Locked Memory
75CVEs
2exploited
0with a public check
5likely (EPSS 10%+)
SortMost likely exploited
75 CVEs with CWE-591 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-38106In CISA KEVExploitedWindows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2024-08-13 | 7.0 | 6.3% | 2024-08-13 |
| CVE-2023-28229In CISA KEVExploitedWindows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2023-04-11 | 7.0 | 1.7% | 2023-04-11 |
| CVE-2025-30394Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft · Windows Server 2012 · CVSS 5.9 · 2025-05-13 | 5.9 | 34% | 2025-05-13 |
| CVE-2023-36005Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-12-12 | 7.5 | 24% | 2023-12-12 |
| CVE-2025-21309Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2012 · CVSS 8.1 · 2025-01-14 | 8.1 | 15% | 2025-01-14 |
| CVE-2023-28220Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2023-04-11 | 8.1 | 15% | 2023-04-11 |
| CVE-2023-28219Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2023-04-11 | 8.1 | 15% | 2023-04-11 |
| CVE-2023-38159Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2023-10-10 | 7.0 | 4.1% | 2023-10-10 |
| CVE-2025-21224Windows Line Printer Daemon (LPD) Service Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 21H2 · CVSS 8.1 · 2025-01-14 | 8.1 | 1.9% | 2025-01-14 |
| CVE-2025-24035Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.1 · 2025-03-11 | 8.1 | 1.7% | 2025-03-11 |
| CVE-2024-49091Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2012 · CVSS 7.2 · 2024-12-10 | 7.2 | 1.7% | 2024-12-10 |
| CVE-2025-27482Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2016 · CVSS 8.1 · 2025-04-08 | 8.1 | 1.6% | 2025-04-08 |
| CVE-2025-26686Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2025-04-08 | 7.5 | 1.4% | 2025-04-08 |
| CVE-2025-24045Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2012 · CVSS 8.1 · 2025-03-11 | 8.1 | 1.3% | 2025-03-11 |
| CVE-2024-38264Microsoft Virtual Hard Disk (VHDX) Denial of Service VulnerabilityMicrosoft · Windows Server 2025 · CVSS 5.9 · 2024-11-12 | 5.9 | 1.3% | 2024-11-12 |
| CVE-2025-27471Microsoft Streaming Service Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 5.9 · 2025-04-08 | 5.9 | 1.3% | 2025-04-08 |
| CVE-2024-38131Clipboard Virtual Channel Extension Remote Code Execution VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 8.8 · 2024-08-13 | 8.8 | 1.3% | 2024-08-13 |
| CVE-2025-21294Microsoft Digest Authentication Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.1 · 2025-01-14 | 8.1 | 1.2% | 2025-01-14 |
| CVE-2024-49108Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2016 · CVSS 8.1 · 2024-12-10 | 8.1 | 1.2% | 2024-12-10 |
| CVE-2024-49106Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2016 · CVSS 8.1 · 2024-12-10 | 8.1 | 1.2% | 2024-12-10 |
| CVE-2024-49128Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2012 · CVSS 8.1 · 2024-12-10 | 8.1 | 1.2% | 2024-12-10 |
| CVE-2024-38263Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2008 Service Pack 2 · CVSS 7.5 · 2024-09-10 | 7.5 | 1.2% | 2024-09-10 |
| CVE-2024-49115Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows Server 2016 · CVSS 8.1 · 2024-12-10 | 8.1 | 1.1% | 2024-12-10 |
| CVE-2024-38262Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2008 Service Pack 2 · CVSS 7.5 · 2024-10-08 | 7.5 | 1.1% | 2024-10-08 |
| CVE-2024-49132Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2024-12-10 | 8.1 | 1.1% | 2024-12-10 |
| CVE-2024-49123Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2024-12-10 | 8.1 | 1.1% | 2024-12-10 |
| CVE-2023-21546Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2023-01-10 | 8.1 | 1.1% | 2023-01-10 |
| CVE-2023-21548Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2023-01-10 | 8.1 | 1.0% | 2023-01-10 |
| CVE-2023-21535Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2023-01-10 | 8.1 | 1.0% | 2023-01-10 |
| CVE-2023-28283Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2023-05-09 | 8.1 | 1.0% | 2023-05-09 |
| CVE-2023-21766Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 4.7 · 2023-01-10 | 4.7 | 0.9% | 2023-01-10 |
| CVE-2023-28238Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-04-11 | 7.5 | 0.9% | 2023-04-11 |
| CVE-2023-28278Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-04-11 | 6.6 | 0.9% | 2023-04-11 |
| CVE-2023-28256Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-04-11 | 6.6 | 0.8% | 2023-04-11 |
| CVE-2023-28255Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-04-11 | 6.6 | 0.8% | 2023-04-11 |
| CVE-2025-27484Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2025-04-08 | 7.5 | 0.8% | 2025-04-08 |
| CVE-2023-35309Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-07-11 | 7.5 | 0.8% | 2023-07-11 |
| CVE-2023-35346Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-07-11 | 6.6 | 0.7% | 2023-07-11 |
| CVE-2023-35345Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-07-11 | 6.6 | 0.7% | 2023-07-11 |
| CVE-2023-35344Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-07-11 | 6.6 | 0.7% | 2023-07-11 |
| CVE-2024-20686Win32k Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 7.8 · 2024-01-09 | 7.8 | 0.7% | 2024-01-09 |
| CVE-2024-21446NTFS Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-03-12 | 7.8 | 0.7% | 2024-03-12 |
| CVE-2023-35310Windows DNS Server Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 6.6 · 2023-07-11 | 6.6 | 0.7% | 2023-07-11 |
| CVE-2023-21739Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2023-01-10 | 7.0 | 0.6% | 2023-01-10 |
| CVE-2024-43633Windows Hyper-V Denial of Service VulnerabilityMicrosoft · Windows 11 version 22H2 · CVSS 6.5 · 2024-11-12 | 6.5 | 0.6% | 2024-11-12 |
| CVE-2023-36403Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2023-11-14 | 7.0 | 0.5% | 2023-11-14 |
| CVE-2025-26648Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-04-08 | 7.8 | 0.5% | 2025-04-08 |
| CVE-2024-43563Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2024-10-08 | 7.8 | 0.5% | 2024-10-08 |
| CVE-2023-24946Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-05-09 | 7.8 | 0.4% | 2023-05-09 |
| CVE-2024-49097Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2024-12-10 | 7.0 | 0.4% | 2024-12-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.