QuickShell: Sharing is caring about an RCE attack chain on Quick Share

Or Yair

REcon 2025 · Day 1 · Main Track

Google's Quick Share — the AirDrop equivalent for Android and Windows — turned out to harbor a chain of vulnerabilities serious enough to achieve unauthenticated remote code execution on a victim's Wi

AI review

Eight bugs, one chain, unauthenticated RCE on a pre-installed Windows app — this is how professional vulnerability research looks.

Watch on YouTube