PatchTheCVEdropbox vulnerabilities and fixes
Recent CVEs affecting dropbox, with upgrade or downgrade steps. 6 tracked.
dropbox has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-07-08. Highest priority: CVE-2019-12171 (score 47/100).
- CVE-2019-12171 HIGH 7.8 DOWNGRADE Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store
- CVE-2018-12446 LOW 3.6 DOWNGRADE An issue was discovered in the com.dropbox.android application 98.2.2 for Android
- CVE-2018-12445 LOW 3.1 DOWNGRADE An issue was discovered in the com.dropbox.android application 98.2.2 for Android
- CVE-2018-12271 MEDIUM 6.4 DOWNGRADE An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS
- CVE-2010-3354 MEDIUM 6.9 DOWNGRADE dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local use
- CVE-2007-0974 HIGH 7.5 DOWNGRADE Multiple unspecified vulnerabilities in Ian Bezanson DropBox before 0.0.4 beta have unknown impact and attack
FAQ
How do I fix dropbox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dropbox being exploited right now?
None of the tracked dropbox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dropbox CVE should I patch first?
CVE-2019-12171 currently ranks highest (47/100): Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store.