GCVE - cpe:2.3:a:keepassxc:keepassxc:2.7.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:keepassxc:keepassxc:2.7.7:*:*:*:*:*:*:*

part: a version: 2.7.7 update: *

Vendor	Keepassxc (`4e825203-335b-5307-b657-207fae620fed`)
Product	Keepassxc (`ee44edee-9799-5a40-b6f2-2a114807480d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/keepassxc`	purl2cpe	2026-06-01 10:15:24.879708
`pkg:deb/ubuntu/keepassxc`	purl2cpe	2026-06-01 10:15:24.879709
`pkg:docker/keepassxreboot/keepassxc`	purl2cpe	2026-06-01 10:15:24.879711
`pkg:github/keepassxreboot/keepassxc`	purl2cpe	2026-06-01 10:15:24.879712
`pkg:rpm/fedora/keepassxc`	purl2cpe	2026-06-01 10:15:24.879713
`pkg:rpm/opensuse/keepassxc`	purl2cpe	2026-06-01 10:15:24.879715
`pkg:sourceforge/keepassxc`	purl2cpe	2026-06-01 10:15:24.879716

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-33901`	vulnerable	2026-06-08 06:37:32.287578	Details available Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs. Published: 2024-05-20T20:21:40.789Z Updated: 2025-02-13T15:53:01.159Z Open on db.gcve.eu Reference links https://keepassxc.org/blog/ https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 https://github.com/keepassxreboot/keepassxc/issues/10784 https://keepassxc.org/blog/2019-02-21-memory-security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33900`	vulnerable	2026-06-08 06:37:32.287100	Details available KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs. Published: 2024-05-20T20:29:54.072Z Updated: 2025-02-13T15:53:00.579Z Open on db.gcve.eu Reference links https://keepassxc.org/blog/ https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 https://github.com/keepassxreboot/keepassxc/issues/10784 https://keepassxc.org/blog/2019-02-21-memory-security/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.