https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-12171.htmlhttps://patchthecve.com/cve/CVE-2019-12171.htmlWed, 17 Jun 2026 02:14:11 +0000HIGH 7.8: Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.https://patchthecve.com/cve/CVE-2018-12446.htmlhttps://patchthecve.com/cve/CVE-2018-12446.htmlWed, 17 Jun 2026 01:37:47 +0000LOW 3.6: An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendhttps://patchthecve.com/cve/CVE-2018-12445.htmlhttps://patchthecve.com/cve/CVE-2018-12445.htmlWed, 17 Jun 2026 01:37:47 +0000LOW 3.1: An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in conjunchttps://patchthecve.com/cve/CVE-2018-12271.htmlhttps://patchthecve.com/cve/CVE-2018-12271.htmlWed, 17 Jun 2026 01:37:28 +0000MEDIUM 6.4: An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is not used. In othttps://patchthecve.com/cve/CVE-2010-3354.htmlhttps://patchthecve.com/cve/CVE-2010-3354.htmlTue, 16 Jun 2026 23:22:38 +0000MEDIUM 6.9: dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.https://patchthecve.com/cve/CVE-2007-0974.htmlhttps://patchthecve.com/cve/CVE-2007-0974.htmlTue, 16 Jun 2026 22:36:40 +0000HIGH 7.5: Multiple unspecified vulnerabilities in Ian Bezanson DropBox before 0.0.4 beta have unknown impact and attack vectors, possibly related to a variable extraction vulnerability.