CVE Catalog
CVE-2023-38840
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.56%
42th percentile - higher than 42% of all known CVEs
Summary
Bitwarden Desktop version 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.
Risk Assessment
An attacker with local access can acquire confidential data, potentially leading to breaches of user privacy and organizational security.
Recommendation
It is recommended to update Bitwarden Desktop to the latest version to minimize the risk of information leakage.
Original NVD description (English source)
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.