CWE-591
77 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 77
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 2
Critical 0High 63Medium 14Low 0Not scored 0
CVEs per yearBy the year they were published
- 202335
- 202425
- 202517
Known exploitedNewest addition to KEV first
- CVE-2024-38106
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.0 - CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.0
Newest CVEs
- CVE-2025-11711
Some non-writable Object properties could be modified
Mozilla · Firefox
Medium6.5 - CVE-2025-48819
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
High7.1 - CVE-2025-30394
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Microsoft · Windows Server 2012
Medium5.9 - CVE-2025-27732
Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
High7.0 - CVE-2025-27482
Windows Remote Desktop Services Remote Code Execution Vulnerability
Microsoft · Windows Server 2016
High8.1 - CVE-2025-27484
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
High7.5 - CVE-2025-26671
Windows Remote Desktop Services Remote Code Execution Vulnerability
Microsoft · Windows Server 2008 R2 Service Pack 1
High8.1 - CVE-2025-26648
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
High7.8 - CVE-2025-27475
Windows Update Stack Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 22H2
High7.0 - CVE-2025-27471
Microsoft Streaming Service Denial of Service Vulnerability
Microsoft · Windows 10 Version 1507
Medium5.9