Lucene search

MicrosoftMS:CVE-2024-7978

HistoryAug 22, 2024 - 7:00 a.m.

Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer

2024-08-2207:00:00

Microsoft

msrc.microsoft.com

101

chromium

data transfer

vulnerability

policy enforcement

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

17.8%

JSON

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected configurations

Vulners

Node

microsoftedge_chromiumRange<128.0.2739.42

VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	edge_chromium	*	cpe:2.3:a:microsoft:edge_chromium::::::::

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

17.8%

JSON

Related for MS:CVE-2024-7978