Secure Cyber Vulnerability Management

06/08/2025
Zero-Day Initiative

ZDI-25-773: (0Day) Google Drive File Sharing Mark-of-the-Web Bypass Vulnerability

by Deepanshu Jha
This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Google Drive. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8.

Comments are closed.

You may also like