Every CVE Search/ Get API key

CVE-2026-69150

KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

4.3 Medium

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
Active

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

0.14%Unchanged since Oct 14, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.3

KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Record
CVE-2026-69150
CVSS 4.0
4.3 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-98810 4.3

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Record
EUVD-2026-98810
CVSS 4.0
4.3 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
NVD 4.3

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Record
CVE-2026-69150
CVSS 4.0
4.3 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-416
Updated
2026-11-02
OSV 4.3

KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Record
CVE-2026-69150
CVSS 4.0
4.3 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2026-69150 4.3

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Record
DEBIAN-CVE-2026-69150
CVSS 4.0
4.3 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVUBUNTU-CVE-2026-69150 4.3

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1.

Record
UBUNTU-CVE-2026-69150
CVSS 4.0
4.3 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
keepassxc
Debian:12
 All versions, plus listed versions
2.7.10+dfsg1-12.7.10+dfsg1-22.7.10+dfsg1-2.12.7.4+dfsg.1-22.7.6+dfsg.1-1
Show 6 moreShow less
2.7.7+dfsg.1-12.7.7+dfsg.1-1+exp12.7.7+dfsg.1-22.7.7+dfsg.1-32.7.7+dfsg.1-3~exp12.7.9+dfsg1-1
 None known
keepassxc
Debian:13
 All versions, plus listed versions
2.7.10+dfsg1-12.7.10+dfsg1-22.7.10+dfsg1-2.1
 None known
keepassxc
Debian:14
 All versions, plus listed versions
2.7.10+dfsg1-12.7.10+dfsg1-22.7.10+dfsg1-2.1
 None known
keepassxc
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.2.2-12.2.3+dfsg.1-12.2.4+dfsg.1-12.3.0+dfsg.1-0ubuntu22.3.1+dfsg.1-1
 None known
keepassxc
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.4.3+dfsg.1-12.4.3+dfsg.1-1build1
 None known
keepassxc
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.6.6+dfsg.1-1~exp12.6.6+dfsg.1-1
 None known
keepassxc
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.7.4+dfsg.1-22.7.6+dfsg.1-12.7.6+dfsg.1-1build22.7.6+dfsg.1-1build3
 None known
keepassxc
Ubuntu:26.10
 All versions, plus listed versions
2.7.10+dfsg1-2ubuntu12.7.10+dfsg1-2.12.7.10+dfsg1-2.1build1
 None known
keepassxc
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.7.10+dfsg1-12.7.10+dfsg1-22.7.10+dfsg1-2ubuntu1
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-69150 is a medium vulnerability (CVSS 4.3) in Keepassxc, published October 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open