Known vulnerabilities in keepassxc

Vendor: keepassxc.org
Software: keepassxc
Software CPE: cpe:2.3:a:keepassxc.org:keepassxc:*:*:*:*:*:*:*:*
Website: https://keepassxc.org
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting keepassxc keepassxc is affected by 6 known vulnerabilities: 3 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151871 - Use After Free
CVE-2026-69150		 CWE-416 Medium
No
No
 2.8.0 23.09.2026 SB2026092381
#VU151870 - Authorization Bypass Through User-Controlled Key
 CWE-639 Medium
No
No
 2.8.0 23.09.2026 SB2026092381
#VU151869 - Out-of-bounds write
CVE-2026-118673		 CWE-787 Low
No
No
 2.8.0 23.09.2026 SB2026092381
#VU151868 - Generation of Predictable Numbers or Identifiers
 CWE-340 Low
No
No
 2.8.0 23.09.2026 SB2026092381
#VU151867 - Integer overflow
 CWE-190 Low
No
No
 2.8.0 23.09.2026 SB2026092381
#VU124122 - Uncontrolled Search Path Element
CVE-2026-4158		 CWE-427 Medium
No
No
 2.7.12 19.03.2026 SB2026031915