Google Nearby vulnerabilities

2 CVEs affecting Google Nearby, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-38272, published 2024-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-38271, published 2024-06-26. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. There exists a vulnerability in Quick Share/Nearby, where an attacker can force a victim to stay connected to a temporary hotspot created for the sharing. As part of the sequence of packets in a…
CVE-2024-38272, published 2024-06-26. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows app we can't send a file without the…