CVE Intelligence

Keepass KeePass vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Keepass KeePass: 1 record(s), with affected versions and fixes.

CVE-2026-86776 Low · 3.3 CWE-789 Sep 9, 2026
KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consume resources and terminate.