CVE-2020-37178 MEDIUM

CVE-2020-37178: KeePass 2.44 - Denial of Service (PoC)

Vendor Keepass
Product KeePass Password Safe
Weakness CWE-94 · Code injection
Published February 11, 2026
Last update March 5, 2026
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.

Key dates

02Disclosure timeline

February 11, 2026 CVE published
March 5, 2026 Record updated