Security Advisory

CVE-2024-33900

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-20 20:29:54
Last updated 2025-02-13 15:53:00
Assigner mitre
State PUBLISHED

Description

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.