CVE-2024-1694

2024-06-0700:00:00

ubuntu.com

google chrome

google updator

inappropriate implementation

local attacker

access control bypass

cve-2024-1694

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Inappropriate implementation in Google Updator prior to 1.3.36.351 in
Google Chrome allowed a local attacker to bypass discretionary access
control via a malicious file. (Chromium security severity: High)

Notes

Author	Note
alexmurray	The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur	starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap