CVE-2024-0804

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Score

CVSS 3.1 7.5 High

Status

Modified - chrome-cve-admin@google.com

Published

2024-01-24

Last modified

2025-05-22

Weaknesses

CWE-693

Affected products

• Fedora (Fedoraproject)
• Chrome (Google)

References

• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html
• https://crbug.com/1515137
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6G…
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC…