# CWE-591. Every Advisory and CVE whose sources give the weakness CWE-591, newest first. ## Records, newest first - [Some non-writable Object properties could be modified](https://agentprime.io/advisories/CVE-2025-11711.md) `CVE-2025-11711` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-591 - [Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-48819.md) `CVE-2025-48819` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-591 - [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-30394.md) `CVE-2025-30394` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 5.9 Medium · EPSS 0.34 · Not analysed yet · Published 13 May 2025 · Tags: CWE-591 - [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27732.md) `CVE-2025-27732` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27482.md) `CVE-2025-27482` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27484.md) `CVE-2025-27484` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26671.md) `CVE-2025-26671` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-591 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26648.md) `CVE-2025-26648` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-591 - [Windows Update Stack Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27475.md) `CVE-2025-27475` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Microsoft Streaming Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27471.md) `CVE-2025-27471` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26686.md) `CVE-2025-26686` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows upnphost.dll Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26665.md) `CVE-2025-26665` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24045.md) `CVE-2025-24045` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24035.md) `CVE-2025-24035` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-591 - [Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21224.md) `CVE-2025-21224` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21309.md) `CVE-2025-21309` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-591 - [Microsoft Digest Authentication Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21294.md) `CVE-2025-21294` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49128.md) `CVE-2024-49128` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49095.md) `CVE-2024-49095` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49132.md) `CVE-2024-49132` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49126.md) `CVE-2024-49126` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49123.md) `CVE-2024-49123` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49115.md) `CVE-2024-49115` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49108.md) `CVE-2024-49108` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49106.md) `CVE-2024-49106` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49097.md) `CVE-2024-49097` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49091.md) `CVE-2024-49091` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.2 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-591 - [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43633.md) `CVE-2024-43633` · CVE record: Microsoft Windows 11 version 22H2 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-591 - [Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-38264.md) `CVE-2024-38264` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-591 - [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43563.md) `CVE-2024-43563` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-591 - [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38262.md) `CVE-2024-38262` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-591 - [Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38263.md) `CVE-2024-38263` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-591 - [Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38137.md) `CVE-2024-38137` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Aug 2024 · Tags: Memory corruption, CWE-591 - [Clipboard Virtual Channel Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38131.md) `CVE-2024-38131` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-591 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38106.md) `CVE-2024-38106` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-591 - [FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.](https://agentprime.io/advisories/CVE-2024-34525.md) `CVE-2024-34525` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2024 · Tags: CWE-591 - [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26242.md) `CVE-2024-26242` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-591 - [Windows Update Stack Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-26236.md) `CVE-2024-26236` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-591 - [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21446.md) `CVE-2024-21446` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-591 - [Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21405.md) `CVE-2024-21405` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-591 - [Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21355.md) `CVE-2024-21355` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-591 - [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-20686.md) `CVE-2024-20686` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 7.8 High · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-591 - [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36005.md) `CVE-2023-36005` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-591 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36403.md) `CVE-2023-36403` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-591 - [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-38159.md) `CVE-2023-38159` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-591 - [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35310.md) `CVE-2023-35310` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35309.md) `CVE-2023-35309` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows Network Load Balancing Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-33163.md) `CVE-2023-33163` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows Clip Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35362.md) `CVE-2023-35362` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35360.md) `CVE-2023-35360` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35346.md) `CVE-2023-35346` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35345.md) `CVE-2023-35345` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35344.md) `CVE-2023-35344` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows CNG Key Isolation Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35340.md) `CVE-2023-35340` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-591 - [Windows Bus Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-32010.md) `CVE-2023-32010` · CVE record: Microsoft Windows 11 version 22H2 · CVSS 7.0 High · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-591 - [Windows Backup Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-24946.md) `CVE-2023-24946` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 May 2023 · Tags: CWE-591 - [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-24899.md) `CVE-2023-24899` · CVE record: Microsoft Windows Server 2022 and 2 more · CVSS 7.0 High · Not analysed yet · Published 9 May 2023 · Tags: CWE-591 - [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-28283.md) `CVE-2023-28283` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 May 2023 · Tags: CWE-591 - [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-28256.md) `CVE-2023-28256` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-591 - [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-28278.md) `CVE-2023-28278` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-591 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .