Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent
Summary: A new vulnerability in Google’s Quick Share utility for Windows has been revealed, allowing potential denial-of-service (DoS) attacks and unauthorized file transfers. The flaw, tracked as CVE-2024-10668, is part of a broader set of vulnerabilities that could lead to arbitrary code execution if exploited. Although an initial fix was issued, follow-up analysis indicated that some problems were not adequately addressed, leaving users at risk.

Affected: Google Quick Share (Windows)

Keypoints :

  • Vulnerability CVE-2024-10668 allows for denial-of-service attacks and unauthorized file transfers.
  • Two vulnerabilities from an earlier disclosure were not fixed properly, leading to potential exploits.
  • Sending two files with the same “payload ID” can result in one file being retained despite unauthorized transfer.

Source: https://thehackernews.com/2025/04/google-patches-quick-share.html