CVE-2019-12171

CVE-2019-12171 describes a vulnerability in the Dropbox desktop application (versions including 71.4.108.0) where cleartext user credentials are stored in memory (specifically in Dropbox.exe and QtWebEngineProcess.exe) after successful login or account creation, and are not securely cleared. This vulnerability carries a high CVSS score of 7.8, indicating a significant risk where an attacker could potentially gain high confidentiality, integrity, and availability impact through a low-complexity attack, typically requiring user interaction. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.