Vulnerability · Published Feb 11, 2026 · Assigned by VulnCheck
CVE-2020-37178KeePass 2.44 - Denial of Service (PoC)
High 7.5
In plain English
A high-severity code injection in KeePass Password Safe from Keepass. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 74.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Keepass | KeePass Password Safe | < 2.44 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-47952 exploit
- KeePass Official Homepage product
- VulnCheck Advisory: KeePass 2.44 - Denial of Service (PoC) third-party-advisory