CVE-2024-7023

Published: Sep 23, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

Affected (1)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Chrome	Before 128.0.6537.0

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://issues.chromium.org/issues/341803763

Source: chrome-cve-admin@google.com

ExploitIssue Tracking

Timeline

No history available yet.