PatchTheCVEkeepass vulnerabilities and fixes
Recent CVEs affecting keepass, with upgrade or downgrade steps. 2 tracked.
keepass has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-05-15. Highest priority: CVE-2023-32784 (score 59/100).
- CVE-2023-32784 HIGH 7.5 UPGRADE In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even w
- CVE-2023-24055 MEDIUM 5.5 UPGRADE KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configura
FAQ
How do I fix keepass vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is keepass being exploited right now?
None of the tracked keepass CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which keepass CVE should I patch first?
CVE-2023-32784 currently ranks highest (59/100): In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even w.