CVE-2024-7004

CVSS V2 None CVSS V3 None

Description

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low)

Overview

CVE ID
CVE-2024-7004

Assigner
Chrome

Vulnerability Status
PUBLISHED

Published Version
2024-08-06T15:37:27.365Z

Last Modified Date
2024-08-06T15:37:27.365Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_23.html
https://issues.chromium.org/issues/40063014

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-7004
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7004

History

Created	Old Value	New Value	Data Type	Notes
2024-08-07 13:06:27				Added to TrackCVE