CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.

• CWE-319
• CWE-319

• https://github.com/keepassxreboot/keepassxc/discussions/9433Issue Tracking
• https://github.com/vdohney/keepass-password-dumperExploit, Third Party Advisory
• https://sourceforge.net/p/keepass/discussion/329220/thread/f3438e6283/Issue Tracking
• https://github.com/keepassxreboot/keepassxc/discussions/9433Issue Tracking
• https://github.com/vdohney/keepass-password-dumperExploit, Third Party Advisory
• https://sourceforge.net/p/keepass/discussion/329220/thread/f3438e6283/Issue Tracking

Published

May 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32766Gitpod before 2022.11.3 allows XSS because redirection can o…6.1
• CVE-2023-32767The web interface of Symcon IP-Symcon before 6.3 (i.e., befo…7.5
• CVE-2023-3277The MStore API plugin for WordPress is vulnerable to Unautho…9.8
• CVE-2023-32781A command injection vulnerability was identified in PRTG 23.…7.2
• CVE-2023-32782A command injection was identified in PRTG 23.2.84.1566 and …7.2
• CVE-2023-32783The event analysis component in Zoho ManageEngine ADAudit Pl…7.5
• CVE-2023-32785Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-32786In Langchain through 0.0.155, prompt injection allows an att…7.5
• CVE-2023-32787The OPC UA Legacy Java Stack before 6f176f2 enables an attac…7.5
• CVE-2023-32788In telephony service, there is a missing permission check. T…5.5
• CVE-2023-32789In telephony service, there is a missing permission check. T…5.5
• CVE-2023-3279The WordPress Gallery Plugin WordPress plugin before 3.39 do…4.9