CVE-2010-5196

CVE-2010-5196 describes an untrusted search path vulnerability in KeePass Password Safe versions prior to 2.13. This flaw allows a local attacker to elevate privileges by placing a malicious DwmApi.dll file in the same directory as a .kdbx database. The vulnerability has a CVSS score of 6.9, indicating a medium severity. It requires local access and medium attack complexity, but successful exploitation could lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community attention and media coverage.