CVE-2024-33900

2024-05-2021:15:09

[email protected]

web.nvd.nist.gov

keepassxc security cleartext 2024

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.