BI
Product
Bitwarden
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Bitwarden to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27974 | 7.5 | Mar 9 | Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when… Affected: through 2023.2.1 |
| CVE-2018-25081 | 7.5 | Mar 9 | Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element Affected: through 2023.2.1 |
| CVE-2023-27706 | 7.1 | Jun 9 | Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes Affected: before 2023.4.0 |
| CVE-2023-38840 | 5.5 | Aug 15 | Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process Affected: through 2023.7.0 |
Showing 4