VDB
CVE-2024-38272
CVE-2024-38272
PUBLISHED
CVSS 7.099999904632568 HIGH
There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows app we can't send a file without the user accept from the receiving device if the visibility is set to everyone mode or contacts mode. We recommend upgrading to version 1.0.1724.0 of Quick Share or above
EPSS 0.21% · 11.5th percentile
Risk Scores
CVSS 4.0
7.099999904632568
CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
EPSS Score
0.21%
11.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nearby | 0 | |
| nearby | 0 |
Timeline
- Jun 26, 2024 CVE Published
- Jun 27, 2024 EPSS Score
- Jul 20, 2024 EPSS Score
- Aug 12, 2024 EPSS Score
- Aug 12, 2024 PoC Published
- Aug 14, 2024 PoC Published
- Aug 18, 2024 PoC Published
- Sep 4, 2024 EPSS Score
- Sep 27, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 20, 2024 EPSS Score
- Nov 7, 2024 Coalition ESS Score