Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-1672
HistoryFeb 21, 2024 - 12:00 a.m.

CVE-2024-1672

2024-02-2100:00:00
ubuntu.com
ubuntu.com
12
cve-2024-1672
google chrome
content security policy
remote attack
bypass
chromium
html
debian
ubuntu
snap

AI Score

6.4

Confidence

High

EPSS

0

Percentile

15.5%

Inappropriate implementation in Content Security Policy in Google Chrome
prior to 122.0.6261.57 allowed a remote attacker to bypass content security
policy via a crafted HTML page. (Chromium security severity: Medium)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap