EUVD-2026-70260
GHSA-9258-5wrj-fw57
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack reading process memory requires at minimum user-level privileges (PR:L); confidentiality impact is total (all vault credentials), but no integrity or availability impact is described.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
5DescriptionCVE.org
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers can extract the backup key from process memory to decrypt the encrypted master password backup stored in v6-vault1.DATA.txt, then use the recovered master password to decrypt the main vault and export all password manager entries in cleartext.
AnalysisAI
Sensitive key retention in UpSignOn for Windows before 7.19.0 allows a local attacker with low privileges to recover the master password and decrypt the entire password vault. The backup key used to protect an encrypted master password backup is retained in the memory of UpSignOn.exe even after the vault is re-locked, enabling an attacker who can read process memory to extract it, decrypt the master password backup stored in v6-vault1.DATA.txt, and subsequently export all stored credentials in cleartext. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Local low-privilege Windows user account is required - the attacker must be able to read the memory of UpSignOn.exe, which on Windows typically requires being the process owner or holding SeDebugPrivilege. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 6.9 (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N) accurately reflects the attack profile: this is a local-only, low-complexity flaw requiring low-privilege access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade UpSignOn for Windows to version 7.19.0 or later, which according to the vendor's release notes (https://upsignon.eu/en/resources/release-notes/app#7.19.0) addresses the sensitive key retention issue. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Insecure credential storage in UpSignOn for Windows (before 7.19.0) exposes the biometric unlock key from the Windows Pa
Cleartext vault data in UpSignOn for Windows before 7.19.0 persists in process memory after the application locks, expos
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today