Vendors / bitwarden Records 17 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 10
Exploited now bitwarden records in CISA KEV No bitwarden vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 66
Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00987 · Published 2023-03-08 · No fix listed
Priority HIGH 66
Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes.
CVSS 3.1 HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00585 · Published 2023-06-09 · No fix listed CWE-312
Priority MEDIUM 41
Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01029 · Published 2023-03-08 · No fix listed CWE-200
Priority LOW 25
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00516 · Published 2023-08-15 · No fix listed
Open these records in search → All records by CVSS severity
1 10 5 1 0
THREATIST.IORead the docs