Vulnerabilities

Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation.

An issue was discovered in the com.dropbox.android application 98.2.2 for Android.

An issue was discovered in the com.dropbox.android application 98.2.2 for Android.

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS.

dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.