← All advisories

Medium severity5.5NVD Advisory· Published Aug 15, 2023· Updated Jun 17, 2026

CVE-2023-38840

CVE-2023-38840

Description

Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Bitwarden/Bitwarden2 versions
cpe:2.3:a:bitwarden:bitwarden:*:*:*:*:desktop:*:*:*+ 1 more
- cpe:2.3:a:bitwarden:bitwarden:*:*:*:*:desktop:*:*:*range: <=2023.7.0
- (no CPE)range: <=2023.7.0
Bitwarden/Desktopdescription

Patches

Vulnerability mechanics

References

3

github.com/bitwarden/clients/pull/5813nvdPatchThird Party Advisory
github.com/bitwarden/desktop/issues/476nvdIssue TrackingThird Party Advisory
redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.