CVE-2024-33901

6.5 mediumEPSS 0.7%

Medium (6.5) in keepassxc keepassxc. EPSS 0.7% chance of exploitation in the next 30 days.

Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-316
Published: 2024-05-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

keepassxc:keepassxc

References

https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838
https://github.com/keepassxreboot/keepassxc/issues/10784
https://keepassxc.org/blog/
https://keepassxc.org/blog/2019-02-21-memory-security/
https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838

Check your stack JSON