Skip to content
OpenAdvisories

Package · Debian

keepassxc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.1
    CVE-2026-118673

    KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses

    KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vecto…

    keepassxreboot keepassxc keepassxc keepassxc Debian Ubuntu
  • Medium 4.3
    CVE-2026-69150

    KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

    KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .…

    keepassxreboot keepassxc keepassxc keepassxc Debian Ubuntu