CVE-2017-1000066

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information.

Risk Assessment

Disclosure of sensitive information may lead to privacy violations for users and potential attacks on the organization's data.

Recommendation

It is recommended to update KeePass to the latest version to eliminate this vulnerability and minimize the risk of data disclosure.

Other vulnerabilities in KeePass 1.32

CVE-2026-86776Low
KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file with excessive header field lengths to trigger allocation of gigabytes of memory, causing resource consumption and termination.

Original NVD description (English source)

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information.