Apple Works on Fixes After Researchers Find Three AirDrop Vulnerabilities

Apple is working to fully address three newly discovered AirDrop vulnerabilities that could allow an attacker to remotely disrupt several key iPhone and Mac features, according to information shared by security researchers.

The flaws affect AirDrop on Apple devices, while similar vulnerabilities were also identified in Android’s Quick Share feature. Although the issues do not appear to expose user data, researchers say they could be used to crash AirDrop and related services, leaving them unavailable for as long as an attack continues.

Services potentially affected include AirDrop, AirPlay, Handoff, Universal Clipboard, and Continuity Camera. That means an attacker could interfere with common cross-device features used to share files, mirror media, copy content between devices, or use an iPhone as a Mac camera.

According to Help Net Security, the attack is relatively simple to trigger. The main risk is disruption rather than theft, since the vulnerabilities cannot be used to access private files, messages, photos, or other personal information.

Security researcher Arash Ebrahim, who reported the findings, said such vulnerabilities are difficult to eliminate entirely. He noted that comparable weaknesses were found across different platforms, even though Apple’s AirDrop and Android’s Quick Share do not share much underlying code.

Ebrahim has not released technical details of the vulnerabilities, following standard responsible disclosure practices. He said the information will remain limited until both Apple and Google have had a fair opportunity to patch the issues.

Apple has already fixed one of the three AirDrop vulnerabilities and is continuing work on patches for the remaining two. Google is also expected to address the related Quick Share issues.

For now, users are advised to keep their devices updated as patches become available. While the flaws do not allow attackers to steal data, they could still cause serious inconvenience by disabling widely used sharing and continuity features.