CVE-2025-27471: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network...

CVE-2025-27482: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27484: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over a network...

PT-2025-15556 · Microsoft · Windows Win32K +1

Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is ...

[SECURITY] Fedora 41 Update: qgis-3.40.5-2.fc41

Geographic Information System GIS manages, analyzes, and displays databases of geographic information. QGIS supports shape file viewing and editing, spatial data storage with PostgreSQL/PostGIS, projection on-the-fly, map composition, and a number of other features via a plugin interface. QGIS al...

[SECURITY] Fedora 42 Update: qgis-3.42.1-2.fc42

Geographic Information System GIS manages, analyzes, and displays databases of geographic information. QGIS supports shape file viewing and editing, spatial data storage with PostgreSQL/PostGIS, projection on-the-fly, map composition, and a number of other features via a plugin interface. QGIS al...

Dell Unity OS Command Execution Vulnerability (CNVD-2025-08303)

Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from an OS command execution vulnerability that can be exploited by an attacker to submit a special request to execute arbitrary commands...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-08302)

Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from an OS command injection vulnerability that can be exploited by an attacker to submit a special request to delete arbitrary files...

FAST LTA Silent Brick WebUI 安全漏洞

The FAST LTA Silent Brick WebUI is a web-based user interface for a Silent Brick data storage system from FAST LTA. A security vulnerability exists in FAST LTA Silent Brick WebUI versions prior to 2.63, which stems from reflective cross-site scripting and could allow an attacker to inject malicio...

Dorset DG 201 Digital Lock 安全漏洞

Dorset DG 201 Digital Lock is a portal digital lock from Dorset. A security vulnerability exists in the Dorset DG 201 Digital Lock version H5433WBSKv2.2220605, which stems from improper storage of NFC card data and could lead to bypassing authentication...

CVE-2025-24045

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-24045

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-24035

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

CVE-2025-24035

CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Services Remote Code Execution Vulnerability

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

KB5053598: Windows 11 Version 24H2 / Windows Server 2025 Security Update (March 2025)

The remote Windows host is missing security update 5053598. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...

PT-2025-10800 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Windows Server 2019 version 10.0.17763.0 Description: The issue is related to sensitive data storage in improperly locked memory in Windows Remote Desktop Services, allowing an...

KB5053618: Windows 10 LTS 1507 Security Update (March 2025)

The remote Windows host is missing security update 5053618. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...