Read the docs

KeePassXC

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

KeePassXC records in CISA KEV

No KeePassXC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Keepassxc 3 records MEDIUM Keepassxc-browser 1 record LOW

Records

1 record in Keepassxc-browser · all components

TI-2025-40288 CVE-2025-65203 · GHSA-86gj-qj6h-cwmx

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into…

Priority LOW 30

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandb…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00137 Published 2025-12-17 No fix listed CWE-352
Open these records in search →