CVE-2026-86776

KeePass versions 2.35 through 2.61.1 are affected by a memory exhaustion vulnerability in the ReadHeaderField function. The root cause is a failure to validate KDBX header field sizes before performing memory allocation. An attacker can craft a malicious KDBX file declaring excessive header field...