CVE-2020-37178

4.6 mediumEPSS 0.3%

Medium (4.6). EPSS 0.3% chance of exploitation in the next 30 days.

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.

Severity

CVSS 4.0

4.6 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2026-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://keepass.info/
https://www.exploit-db.com/exploits/47952
https://www.vulncheck.com/advisories/keepass-denial-of-service-poc

Check your stack JSON