CVE-2024-33901

2024-05-2021:15:09

[email protected]

web.nvd.nist.gov

keepassxc

vulnerability

password recovery

memory dump

database

privilege escalation

6.2 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.