CVE Feed

    Dashboard / CVE / CVE-2024-26362

    CVE-2024-26362

    HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note.

    Published:Apr 10, 2024
    Last Modified:Jun 17, 2025
    EPS:Apr 10, 2024
    EPSS Score:0.00188
    CVSS Score:8.8

    Affected Products

    Vendor
    Enpass
    Product
    Desktop Application
    Vendor
    Enpass
    Product
    Password Manager
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Microsoft
    Product
    Windows

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High