CVE-2024-1694

2024-06-0720:06:43

Chrome

github.com

google

updator

local attacker

access control

AI Score

6.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.36.351"
      }
    ],
    "defaultStatus": "unknown"
  }
]