medium6.1
CVE-2026-75137
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process me…
Impact
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked. Attackers can use the PROCESS_VM_READ permission to read the memory space of UpSignOn.exe and extract sensitive fields including entry names, URLs, usernames, passwords, TOTP secrets, and notes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| UpSignOn | UpSignOn For Windows | before 7.19.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.