Browser Extension Version 16.5.3 and 16.5.4

Released on June 27, 2023

This update contained a security update in reference to a bug which was discovered by the Meta Offensive Security Group (namely Godlove Penn, Samuel Manzer, Tom Ravenscroft, Aaron Grattafiori, Greg Prosser).

This release addresses ticket BE-5131 in which the Keeper browser extension was writing temporary ephemeral logs to a user's computer-device storage that contained local vault data and data typed into Keeper in some circumstances.

The issue required a fully-compromised, physical device to exploit. We resolved and published a security update within 12 hours of receiving and verifying the research findings. No reports of any customers affected by this bug have been reported to Keeper. Mobile Apps and Desktop Applications were not affected and do not require updates.

All users with affected Keeper browser extensions (versions 16.4.16, 16.5.0, 16.5.1, 16.5.2) have been automatically force-updated to version 16.5.4 (or newer) across all app stores. Access to affected versions was blocked. Customers do not need to take any further action.

If you have any questions please email [e-mail].

Version 16.5.3 was pushed live on June 27, 2023, and version 16.5.4 was pushed out to users on July 1, 2023.