Vulnerabilities

CVSS

4.3 Medium

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Risk score

34.4

Published

2024-06-26

Status

Modified

There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows app we can't send a file without the user accept from the receiving device if the visibility is set to everyone mode or contacts mode. We recommend upgrading to version 1.0.1724.0 of Quick Share or above

Weaknesses

CWE-294

Coverage 1

vulnerability

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Researchers have identified six security flaws in AirDrop and Quick Share, wireless file-sharing features used on Apple and Samsung devices. These vulnerabilities allow an attacker within range to trigger crashes, bypass…

The Hacker News · Jun 30, 2026 High

CVE-2024-38271CVE-2024-38272CVE-2024-10668USGBairdropquicksharecrash

All articles mentioning it

Advisories and references

• github.com/google/nearby/pull/2402
• github.com/google/nearby/pull/2589
• github.com/google/nearby/pull/2402
• github.com/google/nearby/pull/2589