CVE-2025-42888
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
Nov 11, 2025
CISA due date
—
The record
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-77407 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-316
- CVE-2026-53604 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-316
- CVE-2026-75137 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that… CWE-316
- CVE-2026-75135 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that… CWE-316
- CVE-2026-8636 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-316
- CVE-2026-0857 Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona… CWE-316
- CVE-2026-24319 In SAP Business One, sensitive information is written to the application�s memory dump… CWE-316
- GHSA-62vx-hpcr-m9ch @perfood/couch-auth may expose session tokens, passwords CWE-316