UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any aut…
CVSS 4.0MEDIUM 6.9·Local·Low privileges·No interaction·EPSS 0.0016·Published 2026-09-02·Fixed in 7.19.0CWE-522
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked.
CVSS 4.0MEDIUM 6.9·Local·Low privileges·No interaction·EPSS 0.00097·Published 2026-09-02·Fixed in 7.19.0CWE-316
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process…
CVSS 4.0MEDIUM 6.9·Local·Low privileges·No interaction·EPSS 0.00097·Published 2026-09-02·Fixed in 7.19.0CWE-316