Skip to content
CVE Tracker

CWE-922: Insecure storage of sensitive information

388 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 388 in the listAtom feed of new CVEsWhat CWE-922 is, at MITRE (opens in a new tab)
Published CVEs
388
Last 12 months
32
Critical
20
Known exploited
0

Critical 20High 87Medium 234Low 45Not scored 2

CVEs per yearBy the year they were published

  1. 20177
  2. 202130
  3. 202224
  4. 20223
  5. 202331
  6. 202452
  7. 202421
  8. 2025149
  9. 202623
  10. 202648

Newest CVEs

  • CVE-2026-61728

    SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover

    socfortress · CoPilot

    Critical9.9
  • CVE-2026-118551

    AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271

    Drupal · AI (Artificial Intelligence)

    Not scored
  • CVE-2026-118568

    Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291

    Drupal · Content Sync (content-sync.io)

    Not scored
  • CVE-2026-109822

    Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files…

    Yamaha Corporation · NWR100

    High7.1
  • CVE-2026-87951

    SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149

    Drupal · SAML SSO - Service Provider

    Low3.8
  • CVE-2026-91477

    Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27.…

    Oracle Corporation · Oracle JavaFX

    Low3.1
  • CVE-2026-82153

    Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical…

    Dell · OS Recovery Tool

    Low2.2
  • CVE-2026-89075

    MOVEit Transfer Local Disclosure of Session Information Vulnerability

    Progress · MOVEit Transfer

    High7.3
  • CVE-2026-5047

    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an…

    Brocade · Brocade SANnav

    High8.2
  • CVE-2026-84283

    FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate

    FluteCode · Secure Folder

    Medium6.8

Vendors it comes up for most

  1. Apple43
  2. IBM30
  3. Samsung Mobile14
  4. Google7
  5. HCL Software6
  6. OpenHarmony6
  7. ABB4
  8. Apache Software Foundation4
  9. Brocade4
  10. Dell4