Dropbox vulnerabilities

Products

• Dropbox 6
• Lepton 6
• Esaml 4
• Samly 3

Newest

• arekinath esaml Unbounded SAML message decompression in esaml allows memory exhaustion CVE-2026-93471 8.7 HighOctober 22, 2026
• arekinath esaml Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion CVE-2026-86696 8.2 HighOctober 22, 2026
• arekinath esaml Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion CVE-2026-105270 8.7 HighOctober 22, 2026
• dropbox mcp-server-dash Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation CVE-2026-81102 2.3 LowAugust 27, 2026
• dropbox samly Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions CVE-2026-53424 9.1 CriticalAugust 20, 2026
• dropbox samly Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses CVE-2026-53425 7.6 HighAugust 20, 2026
• arekinath esaml XXE in esaml SAML library allows local file read and potential SSRF CVE-2026-28809 6.3 MediumMarch 23, 2026
• dropbox, dropbox desktop +1 more Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability CVE-2024-5924 8.8 HighJune 13, 2024
• dropbox samly, samly elixr +1 more Samly access control vulnerability CVE-2024-25718 Fix available 9.8 CriticalFebruary 11, 2024
• dropbox merou Dropbox merou SSH Public Key public_key.py add_public_key injection CVE-2022-4768 6.3 MediumDecember 27, 2022
• dropbox lepton Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the... CVE-2022-26181 7.8 HighFebruary 28, 2022
• dropbox Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71... CVE-2019-12171 7.8 HighJuly 8, 2019
• dropbox lepton read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service ... CVE-2018-20820 5.5 MediumApril 23, 2019
• dropbox lepton io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to... CVE-2018-20819 7.8 HighApril 23, 2019
• dropbox ** DISPUTED ** An issue was discovered in the com.dropbox.android application 98.2.2 for Android.... CVE-2018-12446 Disputed 3.6 LowJune 20, 2018
• dropbox ** DISPUTED ** An issue was discovered in the com.dropbox.android application 98.2.2 for Android.... CVE-2018-12445 Disputed 3.1 LowJune 20, 2018
• dropbox ** DISPUTED ** An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The... CVE-2018-12271 Disputed 6.4 MediumJune 13, 2018
• dropbox lepton An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation... CVE-2018-12108 5.5 MediumJune 11, 2018
• dropbox sdk Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information... CVE-2014-8889 5.3 MediumSeptember 25, 2017
• dropbox lepton Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because... CVE-2017-8891 5.5 MediumMay 10, 2017
• dropbox lepton The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1... CVE-2017-7448 5.5 MediumApril 5, 2017
• dropbox dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which... CVE-2010-3354 6.9 MediumOctober 20, 2010