Advisories · Weakness

CWE-591.

Every Advisory and CVE whose sources give the weakness CWE-591, newest first.

CVE-2025-11711 CVE record

CVSS 6.5 Medium

Some non-writable Object properties could be modified
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-591
Not analysed yet 14 Oct 2025
CVE-2025-48819 CVE record

CVSS 7.1 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Jul 2025
CVE-2025-30394 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 13 May 2025
CVE-2025-27732 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27482 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27484 CVE record

CVSS 7.5 High

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26671 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26648 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27475 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27471 CVE record

CVSS 5.9 Medium

Microsoft Streaming Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26686 CVE record

CVSS 7.5 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26665 CVE record

CVSS 7.0 High

Windows upnphost.dll Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-24045 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 11 Mar 2025
CVE-2025-24035 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 11 Mar 2025
CVE-2025-21224 CVE record

CVSS 8.1 High

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21309 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21294 CVE record

CVSS 8.1 High

Microsoft Digest Authentication Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2024-49128 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49095 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49132 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49126 CVE record

CVSS 8.1 High

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49123 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49115 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49108 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49106 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49097 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49091 CVE record

CVSS 7.2 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-43633 CVE record

CVSS 6.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-591
Not analysed yet 12 Nov 2024
CVE-2024-38264 CVE record

CVSS 5.9 Medium

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-591
Not analysed yet 12 Nov 2024
CVE-2024-43563 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-38262 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-38263 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 10 Sept 2024
CVE-2024-38137 CVE record

CVSS 7.0 High

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
- CWE-591
Not analysed yet 13 Aug 2024
CVE-2024-38131 CVE record

CVSS 8.8 High

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- CWE-591
Not analysed yet 13 Aug 2024
CVE-2024-38106 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 13 Aug 2024
CVE-2024-34525 CVE record

CVSS 5.3 Medium

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.
- CWE-591
Not analysed yet 5 May 2024
CVE-2024-26242 CVE record

CVSS 7.0 High

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 9 Apr 2024
CVE-2024-26236 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- CWE-591
Not analysed yet 9 Apr 2024
CVE-2024-21446 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 12 Mar 2024
CVE-2024-21405 CVE record

CVSS 7.0 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 13 Feb 2024
CVE-2024-21355 CVE record

CVSS 7.0 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 13 Feb 2024
CVE-2024-20686 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- CWE-591
Not analysed yet 9 Jan 2024
CVE-2023-36005 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 12 Dec 2023
CVE-2023-36403 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 14 Nov 2023
CVE-2023-38159 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Oct 2023
CVE-2023-35310 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35309 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-33163 CVE record

CVSS 7.5 High

Windows Network Load Balancing Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35362 CVE record

CVSS 7.8 High

Windows Clip Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35360 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35346 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35345 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35344 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35340 CVE record

CVSS 7.8 High

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-32010 CVE record

CVSS 7.0 High

Windows Bus Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- CWE-591
Not analysed yet 13 Jun 2023
CVE-2023-24946 CVE record

CVSS 7.8 High

Windows Backup Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 9 May 2023
CVE-2023-24899 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-591
Not analysed yet 9 May 2023
CVE-2023-28283 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 9 May 2023
CVE-2023-28256 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28278 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023