CVE-2017-15404

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page.

Score

CVSS 3.0 7.8 High

Status

Modified - chrome-cve-admin@google.com

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-367

Affected products

• Chrome (Google)

References

• https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html
• https://crbug.com/766275