Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-3840
HistoryApr 17, 2024 - 12:00 a.m.

CVE-2024-3840

2024-04-1700:00:00
ubuntu.com
ubuntu.com
4
chrome
insufficient policy enforcement
site isolation
remote attacker
navigation restrictions
crafted html
chromium
severity medium
ubuntu 19.10
debian

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

Insufficient policy enforcement in Site Isolation in Google Chrome prior to
124.0.6367.60 allowed a remote attacker to bypass navigation restrictions
via a crafted HTML page. (Chromium security severity: Medium)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap