Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to install a malicious app to potentially perform a sandbox escape via a malicious file. (Chromium security severity: Medium)
Metrics
Affected Vendors & Products
References
History
Thu, 26 Dec 2024 16:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Google
Google chrome |
|
Weaknesses | NVD-CWE-noinfo | |
CPEs | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
Vendors & Products |
Google
Google chrome |
|
Metrics |
cvssV3_1
|
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Chrome
Published: 2024-07-16T22:30:27.095Z
Updated: 2024-08-02T08:50:08.212Z
Reserved: 2023-12-20T15:35:08.814Z
Link: CVE-2023-7012
Vulnrichment
Updated: 2024-08-02T08:50:08.212Z
NVD
Status : Analyzed
Published: 2024-07-16T23:15:11.270
Modified: 2024-12-26T15:43:32.457
Link: CVE-2023-7012
Redhat
No data.