Skip to content
OpenAdvisories

Package · Ubuntu

keepassxc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.1
    CVE-2026-118673

    KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses

    KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vecto…

    keepassxreboot keepassxc keepassxc keepassxc Debian Ubuntu
  • Medium 4.3
    CVE-2026-69150

    KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

    KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .…

    keepassxreboot keepassxc keepassxc keepassxc Debian Ubuntu
  • High 7.3
    CVE-2026-4158

    KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to ex…

    KeePassXC KeePassXC keepassxc Ubuntu