Login Request a demo
DR
Vendor
Dropbox
8 products with CVEs on record
23
CVEs
0
On KEV
3
New 30D
Products
ES
esaml
dropbox
8.7
4 CVEs0 on KEV3 new
DR
Dropbox
Dropbox
8.8
6 CVEs0 on KEV0 new
LE
Lepton
Dropbox
7.8
6 CVEs0 on KEV0 new
SA
samly
dropbox
9.8
3 CVEs0 on KEV0 new
DD
Dropbox Desktop
Dropbox
8.8
1 CVEs0 on KEV0 new
DS
Dropbox Sdk
Dropbox
5.3
1 CVEs0 on KEV0 new
MC
mcp-server-dash
dropbox
3.1
1 CVEs0 on KEV0 new
ME
Merou
Dropbox
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-93471
ES
esaml
dropbox
8.7
0%
Oct 22Unbounded SAML message decompression in esaml allows memory exhaustion
CVE-2026-86696
ES
esaml
dropbox
8.2
0%
Oct 22Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion
CVE-2026-105270
ES
esaml
dropbox
8.7
0%
Oct 22Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion
CVE-2026-81102
MC
mcp-server-dash
dropbox
3.1
0%
Aug 27Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation
CVE-2026-53424
SA
samly
dropbox
9.1
1%
Aug 20Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
CVE-2026-53425
SA
samly
dropbox
7.6
0%
Aug 20Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses
CVE-2026-28809
ES
esaml
dropbox
5.3
0%
Mar 23XXE in esaml SAML library allows local file read and potential SSRF
CVE-2024-5924
DD
Dropbox Desktop
Dropbox
8.8
1%
Jun 13Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability
CVE-2024-25718
SA
Samly
Dropbox
9.8
1%
Feb 11In the Samly package before 1.4.0 for Elixir, Samly.State.Store.get_assertion/3 can return an expired session, which interferes with access control because Samly.AuthHandler uses…
CVE-2022-4768
ME
Merou
Dropbox
9.8
1%
Dec 27A vulnerability was found in Dropbox merou
CVE-2022-26181
LE
Lepton
Dropbox
7.8
1%
Feb 28Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/bitops.cc:108
CVE-2019-12171
DR
Dropbox
Dropbox
7.8
1%
Jul 8Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account…
CVE-2018-20820
LE
Lepton
Dropbox
5.5
1%
Apr 23read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file
CVE-2018-20819
LE
Lepton
Dropbox
7.8
1%
Apr 23io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or…
CVE-2018-12446
DR
Dropbox
Dropbox
3.6
0%
Jun 20An issue was discovered in the com.dropbox.android application 98.2.2 for Android
CVE-2018-12445
DR
Dropbox
Dropbox
3.1
0%
Jun 20An issue was discovered in the com.dropbox.android application 98.2.2 for Android
CVE-2018-12271
DR
Dropbox
Dropbox
6.4
0%
Jun 13An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS
CVE-2018-12108
LE
Lepton
Dropbox
5.5
1%
Jun 11An issue was discovered in Dropbox Lepton 1.2.1
CVE-2014-8889
DS
Dropbox Sdk
Dropbox
5.3
6%
Sep 26Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack
CVE-2017-8891
LE
Lepton
Dropbox
5.5
1%
May 10Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads
CVE-2017-7448
LE
Lepton
Dropbox
5.5
1%
Apr 5The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and…
CVE-2010-3354
DR
Dropbox
Dropbox
–
0%
Oct 20dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the…