Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-532: Sensitive information in a log file

1,341 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 1,341 in the listAtom feed of new CVEsWhat CWE-532 is, at MITRE (opens in a new tab)
Published CVEs
1,341
Last 12 months
338
Critical
58
Known exploited
2

Critical 58High 301Medium 817Low 165Not scored 0

CVEs per yearBy the year they were published

  1. 20132
  2. 20167
  3. 201731
  4. 201869
  5. 2019104
  6. 202093
  7. 202184
  8. 2022117
  9. 2023144
  10. 2024194
  11. 2025178
  12. 2026315

Known exploitedNewest addition to KEV first

  • CVE-2025-24984

    Windows NTFS Information Disclosure Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedMedium4.6
  • CVE-2023-21492

    Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium4.4

Newest CVEs

  • CVE-2026-81209

    Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

    IBM · Sterling B2B Integrator

    Medium4.9
  • CVE-2026-12737

    IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

    IBM · Sterling B2B Integrator

    Medium4.4
  • CVE-2026-123512

    Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs

    go-vikunja · vikunja

    High8.4
  • CVE-2026-123502

    Vikunja before 2.7.1 Link-Share Hash Exposure via Request Path Logging

    go-vikunja · vikunja

    Medium6.9
  • CVE-2026-120548

    YML for Yandex Market <= 5.10.0 - Unauthenticated Sensitive Information Exposure through Log File via 'y4ym_check_action' Parameter via admin-post.php

    icopydoc · YML for Yandex Market

    Medium5.3
  • CVE-2026-17322

    Multiple Vulnerabilities in IBM API Connect

    IBM · API Connect

    High7.1
  • CVE-2026-17128

    Multiple Vulnerabilities in IBM API Connect

    IBM · API Connect

    Medium6.8
  • CVE-2026-106019

    Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials. This…

    Johnson Controls · C-CURE 9000, Victor

    High8.8
  • CVE-2026-123316

    In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

    JetBrains · Junie CLI

    Medium5.5
  • CVE-2026-54145

    OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)

    tinyhumansai · openhuman

    High8.8

Vendors it comes up for most

  1. IBM89
  2. Dell57
  3. Apple45
  4. Apache Software Foundation37
  5. Red Hat34
  6. Elastic28
  7. Microsoft27
  8. Samsung Mobile26
  9. Brocade20
  10. Cisco20