KeePassXC: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung

Summary

Product

Vulnerabilities 2

• Medium 4.3
  CVE-2026-69150

  KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

  KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .…

  keepassxreboot keepassxc keepassxc keepassxc Debian Ubuntu
  Oct 13, 2026
• Medium 4.1
  CVE-2026-118673

  KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses

  KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vecto…

  keepassxreboot keepassxc keepassxc keepassxc Debian Ubuntu
  Oct 29, 2026

Revision history

1. 2026-10-29 #3

   CVE ergänzt

2. 2026-10-13 #2

   Referenz(en) aufgenommen: EUVD-2026-98810

3. 2026-09-23 #1

   Initiale Fassung

References

• KeePassXC Release Notes vom 2026-09-23
  https://keepassxc.org/blog/2026-09-23-2.8.0-beta1-released/
• KeePass Security Advisory vom 2026-09-23
  https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-4642-49vv-4p43
• KeePass Security Advisory vom 2026-09-23
  https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-2vm2-vmc3-vccr
• KeePass Security Advisory vom 2026-09-23
  https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-3448-gh8j-3227
• KeePass Security Advisory vom 2026-09-23
  https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-mffq-j98j-wfr2
• KeePass Security Advisory vom 2026-09-23
  https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-rq29-wgrv-xgh4