We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Reserved 2024-04-28 | Published 2024-05-20 | Updated 2025-02-13 | Assigner mitregist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838
github.com/keepassxreboot/keepassxc/issues/10784
keepassxc.org/blog/2019-02-21-memory-security/
Support options
