What’s Vulnerable › Vulnerabilities

CVE-2020-37178: KeePass 2.44 - Denial of Service (PoC)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-11 · updated 2026-06-17
• Weakness: CWE-94

Description

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.

Affected products

• KeePass Password Safe: before 2.44

References

• https://keepass.info/
• https://www.exploit-db.com/exploits/47952
• https://www.vulncheck.com/advisories/keepass-denial-of-service-poc

Get alerted when CVE-2020-37178 or the next vulnerability affects your stack