Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-33900 EUVD-2024-31604GHSA-c45j-7735-f4r2

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the ven…

Published May 20, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

Advisories 1

References