CWE · MITRE source
CWE-214Invocation of Process Using Visible Sensitive Information
A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.
Many operating systems allow a user to list information about processes that are owned by other users. Other users could see information such as command line arguments or environment variable settings. When this data contains sensitive information such as credentials, it might allow other users to launch an attack against the product or related resources.
Last updated: 20 August 2026 13:14 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Prevent
Stop it (NIST 800-53 / CSF Protect)
PR.DS-10PR.PS-06SC-4Information in Shared System Resources
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
—
Validate
Prove the fix (OWASP ASVS)
V1.2.5
NIST 800-53 r5 controls that address this weakness (0)AI-assisted
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2021-3859 UPD | 6.1 | 7.5 | 0.0130 | 2022-08-26 |
CVE-2020-36771 UPD | 5.9 | 7.8 | 0.0047 | 2024-01-22 |
CVE-2018-16837 UPD | 5.8 | 7.8 | 0.0036 | 2018-10-23 |
CVE-2019-3869 UPD | 5.7 | 7.2 | 0.0127 | 2019-03-28 |
CVE-2026-33247 UPD | 5.7 | 7.4 | 0.0041 | 2026-03-25 |
CVE-2024-4254 UPD | 5.5 | 7.1 | 0.0047 | 2024-06-04 |
CVE-2020-5422 UPD | 5.3 | 6.5 | 0.0092 | 2020-10-02 |
CVE-2026-12250 | 5.3 | 7.9 | 0.0011 | 2026-07-05 |
CVE-2025-5452 UPD | 5.0 | 6.6 | 0.0029 | 2025-11-11 |
CVE-2025-59955 | 4.5 | 5.7 | 0.0026 | 2026-01-05 |
CVE-2025-1333 UPD | 4.4 | 6.0 | 0.0026 | 2025-05-01 |
CVE-2025-32987 UPD | 4.3 | 6.0 | 0.0016 | 2025-04-15 |
CVE-2024-28799 UPD | 4.2 | 5.6 | 0.0030 | 2024-08-14 |
CVE-2026-40159 UPD | 4.2 | 5.5 | 0.0018 | 2026-04-10 |
CVE-2026-74873 | 4.2 | 5.5 | 0.0023 | 2026-08-17 |
CVE-2020-1753 UPD | 4.1 | 5.0 | 0.0051 | 2020-03-16 |
CVE-2026-9494 | 4.1 | 5.5 | 0.0011 | 2026-07-16 |
CVE-2021-32638 UPD | 3.7 | 4.4 | 0.0040 | 2021-05-25 |
CVE-2024-39314 UPD | 3.7 | 4.7 | 0.0019 | 2024-07-01 |
CVE-2026-18915 | 3.7 | 5.0 | 0.0010 | 2026-08-06 |
CVE-2026-12139 UPD | 3.4 | 4.4 | 0.0011 | 2026-07-21 |
CVE-2025-53860 | 3.2 | 4.1 | 0.0012 | 2025-10-15 |
CVE-2024-1742 UPD | 3.1 | 3.8 | 0.0024 | 2024-03-22 |
CVE-2018-17957 UPD | 3.0 | 3.4 | 0.0037 | 2018-12-26 |
CVE-2025-48709 UPD | 2.9 | 3.8 | 0.0012 | 2025-08-07 |