Apple AirDrop Quarantine Bypass Vulnerability

A vulnerability exists in AirDrop functionality across multiple Apple platforms, including visionOS, macOS Sonoma, iOS, and iPadOS. This vulnerability allows files received via AirDrop to be transferred without the appropriate quarantine flag, which is essential for security. The issue arises from inadequate state management, potentially exposing users to risks from unverified files.

Impact

The primary consequence of this vulnerability is the improper application of the quarantine flag on files received through AirDrop. This oversight can lead to the execution of unverified files, which may contain malicious content.

Remediation

Users can update to the latest versions of the affected operating systems to address this vulnerability. The patch is included in visionOS 1.3, macOS Sonoma 14.6, iOS 17.6, and iPadOS 17.6.