Dropbox
Security Risk Profile
30
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 20, 2010 to present
18
Total CVEs
7
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
30/100
low
Severity Distribution
Critical
2High
5Medium
8Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XEE
1
2
SSRF
1
3
Integer Overflow
1
4
Buffer Overflow
1
5
Input Validation
1
Most Affected Products
1. Dropbox Lepton6
2. Dropbox dropbox2
3. Dropbox Dropbox Desktop2
4. Dropbox Dropbox Android2
5. Dropbox Dropbox Sdk Android2
Recent Vulnerabilities
See more →CVE-2026-28809
CVSS 6.3medium
XXE in esaml SAML library allows local file read and potential SSRF
3/23/2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/lastpass-fake-password-managers-infect-mac-users-with-malware/
unknown
LastPass: Fake password managers infect Mac users with malware
9/22/2025🔧 No Patch
CVE-2024-52270
CVSS 8.2high
PDF Document Spoofing in DropBox Sign(HelloSign)
12/5/2024🔧 No Patch
CVE-2024-5924
CVSS 8.8EPSS 0%high
(0Day) Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability
6/13/2024🔧 No Patch
CVE-2024-25718
CVSS 9.8EPSS 0%critical
2/11/2024
CVE-2022-4768
CVSS 9.8critical
Dropbox merou SSH Public Key public_key.py add_public_key injection
12/27/2022
CVE-2022-26181
CVSS 7.8high
2/28/2022🔧 No Patch
CVE-2019-12171
CVSS 7.8high
7/8/2019🔧 No Patch
CVE-2018-20820
CVSS 5.5medium
4/23/2019
CVE-2018-20819
CVSS 7.8high
4/23/2019
Monitor Dropbox in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.