From gbhackers.com
A zero-day vulnerability in Dropbox for Windows allows attackers to escalate privileges from simple windows users privilege to the reserved SYSTEM privilege.
The vulnerability resides in the DropBoxUpdater service, which is responsible for keeping the client application up to date.