CVE-2020-37178CWE-94

KeePass 2.44 - Denial of Service (PoC)

Medium · published February 11, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-02-11T20:37Z
EPSS history
Timeline
  • 11 FEB 20:37Z
    KeePass 2.44 - Denial of Service (PoC)
    cvelistv5