keepassxreboot vulnerabilities

Products

• keepassxc 2

Latest keepassxreboot CVEs

Newest publication first

1. CVE-2026-118673 KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses

   Published 2026-10-29

   Medium·CVSS 4.1 EPSS 0.11%

   KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vector even though Botan::...

2. CVE-2026-69150 KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

   Published 2026-10-13

   Medium·CVSS 4.3 EPSS 0.14%

   KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.