CVE-2019-12171

NONE EPSS 55.8%
Published Jul 8, 20196y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jul 8, 2019 6y ago
Last Modified Jun 17, 2026 2w ago

Description

Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.

Threat Intelligence

EPSS Exploit Probability
55.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 2

CWE-312
CWE-522

Affected Products 1

VendorProductVersionRange
dropboxdropbox71.4.108.0any

References 2

  • drive.google.com https://drive.google.com/open?id=1DCGurwRTu0HsUpTglVR0jgItZNqqDm_5
    ExploitThird Party Advisory
  • drive.google.com https://drive.google.com/open?id=1msz6pb08crPC0VT7s_Z_KTsKm9CbLJEXNsmRwzoNLy8
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.