CVE-2024-1672

HIGH Year: 2024
CVSS v3 Score
8.8
High
Weakness Type
CWE-474
View all →

Vulnerability Description

Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

Related Vulnerabilities

CVE-2024-5836

HIGH
CVSS:8.8(High)

Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrom...

CWE-4742024

CVE-2024-5839

HIGH
CVSS:8.8(High)

Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security se...

CWE-4742024

CVE-2024-1694

HIGH
CVSS:7.8(High)

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: H...

CWE-4742024

CVE-2024-5836

HIGH
CVSS:8.8(High)

Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrom...

CWE-4742024

CVE-2024-5839

HIGH
CVSS:8.8(High)

Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security se...

CWE-4742024

CVE-2024-1694

HIGH
CVSS:7.8(High)

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: H...

CWE-4742024