CWE-591

Total CVEs
63
Vulnerabilities
Avg CVSS v3
7.2
High
Latest CVE
2025
Most Recent

Severity Distribution

Critical 0
0%
High 50
79.4%
Medium 13
20.6%
Low 0
0%

External References

All CVEs (63)

Page 1 of 3
CVSS:8.8(High)

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

CVSS:8.1(High)

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVSS:8.1(High)

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVSS:8.1(High)

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVSS:8.1(High)

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS:8.1(High)

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVSS:8.1(High)

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS:8.1(High)

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS:8.1(High)

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS:8.1(High)

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS:8.1(High)

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS:8.1(High)

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVSS:8.1(High)

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS:7.8(High)

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS:7.8(High)

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS:7.5(High)

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

CVSS:7.5(High)

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVSS:7.5(High)

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability