TI-2026-03606 CVE-2026-4158 · GHSA-h7gx-vxj4-mr6x
Uncontrolled search path in KeePassXC
Priority HIGH 67
KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
KeePassXC
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
KeePassXC records in CISA KEVNo KeePassXC vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-22373 CVE-2024-33901 · GHSA-g437-xqhv-c7mq
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to…
Priority MEDIUM 62
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump.
TI-2023-17939 CVE-2023-35866 · GHSA-65v5-9w4x-xh53
In KeePassXC through 2.7.5, a local attacker can make changes to the Database security…
Priority MEDIUM 58
In KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings, including master password and second-factor authentication, within an authenticated KeePassXC Database session, without the…
TI-2024-22372 CVE-2024-33900 · GHSA-c45j-7735-f4r2
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover…
Priority LOW 31
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump.
TI-2025-40288 CVE-2025-65203 · GHSA-86gj-qj6h-cwmx
KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into…
Priority LOW 30
KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandb…