CVE-2024-7979

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium)
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

26 Aug 2024, 15:13

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.0
v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
First Time Microsoft
Google chrome
Microsoft windows
Google
References () https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html - () https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html - Release Notes
References () https://issues.chromium.org/issues/356064205 - () https://issues.chromium.org/issues/356064205 - Permissions Required

22 Aug 2024, 15:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.0
CWE CWE-345

22 Aug 2024, 12:48

Type Values Removed Values Added
Summary
  • (es) La validación de datos insuficiente en el instalador de Google Chrome en Windows anterior a 128.0.6613.84 permitió a un atacante local realizar una escalada de privilegios a través de un enlace simbólico manipulado. (Severidad de seguridad de Chromium: media)

21 Aug 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-21 21:15

Updated : 2024-08-26 15:13


NVD link : CVE-2024-7979

Mitre link : CVE-2024-7979

CVE.ORG link : CVE-2024-7979


JSON object : View

Products Affected

microsoft

  • windows

google

  • chrome
CWE
CWE-345

Insufficient Verification of Data Authenticity