CVE-2019-12171
HIGHDropbox <71.4.108.0 - Memory Corruption
Title source: llmDescription
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.
Scores
CVSS v3
7.8
EPSS
0.0012
EPSS Percentile
30.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-522
CWE-312
Status
published
Affected Products (1)
dropbox/dropbox
Timeline
Published
Jul 08, 2019
Tracked Since
Feb 18, 2026