Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent
Briefly

Cybersecurity researchers revealed a vulnerability in Google's Quick Share data transfer tool for Windows, tracked as CVE-2024-10668. This flaw allows unauthorized file transfers and potential denial-of-service attacks, stemming from improper fixes on previously identified vulnerabilities. Although the issue has been addressed in the latest version, the ability to exploit it by sending files arbitrarily raises concerns about the security of Quick Share. The flaw, which can affect code execution on Windows systems, urges users to update their applications promptly to avoid exposure.
The flaw, tracked as CVE-2024-10668, allows arbitrary files to be sent to targets without their approval, posing significant risks for users of Google's Quick Share.
Quick Share's vulnerabilities could be exploited to achieve a denial-of-service attack or to gain arbitrary code execution, raising urgent concerns among cybersecurity experts.
Read at The Hacker News
[
|
]