PT-2026-7676 · Keepass · Keepass Password Safe

Published 2026-02-11 · Updated 2026-02-11 · CVE-2020-37178

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions KeePass Password Safe versions prior to 2.44

Description A denial of service issue exists in the help system's HTML handling. An attacker can trigger this by dragging and dropping malicious HTML files into the help area, which may lead to application instability or a crash.

Recommendations Update to version 2.44 or later.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2020-37178

Affected Products

Keepass Password Safe

References · 4

• 🔥 https://exploit-db.com/exploits/47952 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37178 · Security Note
• https://vulncheck.com/advisories/keepass-denial-of-service-poc · Note
• https://keepass.info · Note