cve.bz

CVE-2019-12171

7.8 highEPSS 0.9%

High (7.8) in dropbox dropbox. EPSS 0.9% chance of exploitation in the next 30 days.

Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.

Severity

CVSS 3.0

7.8 high
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWEs
CWE-312, CWE-522
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON