CVE-2023-7261

Published: Jun 7, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)

Affected (1)

Products: Google: Updater

Google

1 product

Updater

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Updater	Before 1.3.36.351

Running on/with	Platform Versions
Google Chrome	All versions

Related CWEs

CWE-233

Improper Handling of Parameters

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References (2)

https://issues.chromium.org/issues/40064602

Source: chrome-cve-admin@google.com

ExploitIssue Tracking

https://issues.chromium.org/issues/40064602

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

Timeline

No history available yet.